{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,25]],"date-time":"2026-10-25T12:02:25Z","timestamp":1792929745885,"version":"4.5.0"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"National Key Technology Research and Development Program of China","award":["2017YFB0802900"],"award-info":[{"award-number":["2017YFB0802900"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2019.2962198","type":"journal-article","created":{"date-parts":[[2019,12,25]],"date-time":"2019-12-25T20:52:27Z","timestamp":1577307147000},"page":"2313-2326","source":"Crossref","is-referenced-by-count":16,"title":["Semi-Supervised Malware Clustering Based on the Weight of Bytecode and API"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0708-1686","authenticated-orcid":false,"given":"Yong","family":"Fang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4033-0253","authenticated-orcid":false,"given":"Wenjie","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0485-1975","authenticated-orcid":false,"given":"Beibei","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9133-1742","authenticated-orcid":false,"given":"Fan","family":"Jing","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8074-906X","authenticated-orcid":false,"given":"Lei","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01261-8_28"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2019.2898567"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-10674-4"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20267-4_11"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3318396.3318448"},{"key":"ref30","first-page":"1","article-title":"Analyzing and visualizing state sequences inRwithTraMineR","volume":"40","author":"gabadinho","year":"2015","journal-title":"J Statist Software"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2840724"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2787612"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.jocs.2017.07.018"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-017-2046-2"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2914031"},{"key":"ref27","first-page":"110","article-title":"Malware clustering based on called API during runtime","author":"sz\u00e9les","year":"2018","journal-title":"Proc Int Workshop Inf Oper Technol Secur Syst"},{"key":"ref29","author":"elzinga","year":"2007","journal-title":"Sequence analysis Metric representations of categorical time series"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-014-0367-9"},{"key":"ref1","year":"2019","journal-title":"Symantec Network Security Threat Report"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2857705.2857713"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1774088.1774303"},{"key":"ref21","first-page":"159","article-title":"Hierarchical density-based clustering of malware behaviour","volume":"9","author":"abdullah","year":"2017","journal-title":"J Telecommun Electron Comput Eng"},{"key":"ref24","year":"2019","journal-title":"PE Explorer"},{"key":"ref23","year":"2019","journal-title":"Ida pro"},{"key":"ref26","year":"2019","journal-title":"Microsoft Malware Classification Challenge (BIG 2015)"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICRITO.2016.7784976"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2491300"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45719-2_11"},{"key":"ref58","year":"2019","journal-title":"VirusTotal"},{"key":"ref57","year":"2019","journal-title":"VirusShare"},{"key":"ref56","year":"2019","journal-title":"Clonezilla"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/361002.361007"},{"key":"ref54","first-page":"226","article-title":"A density-based algorithm for discovering clusters in large spatial databases with noise","volume":"96","author":"ester","year":"1996","journal-title":"Proc KDD"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-010-0141-5"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/2756601.2756616"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-04212-7_11"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2012.06.022"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1023\/A:1026543900054"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2808769.2808773"},{"key":"ref13","article-title":"Malware analysis through high-level behavior","author":"deng","year":"2018","journal-title":"Proc of USENIX Cyber Security Experimentation and Test (CSET) Workshop"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom\/BigDataSE\/ICESS.2017.222"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.2017.8167802"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/NCA.2017.8171380"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2016.7745437"},{"key":"ref18","first-page":"181","article-title":"Malware clustering based on SNN density using system calls","author":"wang","year":"2015","journal-title":"Proc Int Conf Cloud Comput Secur"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2016.02.115"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.2174\/1872212111666170531115707"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2014.7004290"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/FSKD.2016.7603221"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-72395-2_67"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2016.7745494"},{"key":"ref7","first-page":"187","article-title":"MutantX-S: Scalable malware clustering based on static features","author":"hu","year":"2013","journal-title":"Proc of USENIX Annual Technical Conf (USENIX)"},{"key":"ref49","article-title":"Malware detection by eating a whole exe","author":"raff","year":"2018","journal-title":"Proc 32nd AAAI Conf Artif Intell"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140442"},{"key":"ref46","article-title":"Semi-supervised classification for dynamic Android malware detection","author":"chen","year":"2017","journal-title":"arXiv 1704 05948"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-19934-9_53"},{"key":"ref48","year":"2019","journal-title":"Cuckoo Sandbox"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2017.05.063"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-04780-1_28"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2016.2616302"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2017.7926977"},{"key":"ref43","year":"2017","journal-title":"Evading machine learning malware detection"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/08943285.pdf?arnumber=8943285","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,17]],"date-time":"2021-12-17T19:50:25Z","timestamp":1639770625000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8943285\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":58,"URL":"https:\/\/doi.org\/10.1109\/access.2019.2962198","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]}}}