{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T03:49:54Z","timestamp":1783050594898,"version":"3.54.6"},"reference-count":201,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/100010661","name":"European Commission and the Horizon 2020 Program through the SIMARGL Project","doi-asserted-by":"publisher","award":["833042"],"award-info":[{"award-number":["833042"]}],"id":[{"id":"10.13039\/100010661","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/access.2020.3048319","type":"journal-article","created":{"date-parts":[[2020,12,30]],"date-time":"2020-12-30T21:06:11Z","timestamp":1609362371000},"page":"5371-5396","source":"Crossref","is-referenced-by-count":127,"title":["Tight Arms Race: Overview of Current Malware Threats and Trends in Their Detection"],"prefix":"10.1109","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6466-3354","authenticated-orcid":false,"given":"Luca","family":"Caviglione","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1405-9911","authenticated-orcid":false,"given":"Michal","family":"Choras","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Igino","family":"Corona","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9937-4402","authenticated-orcid":false,"given":"Artur","family":"Janicki","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wojciech","family":"Mazurczyk","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marek","family":"Pawlicki","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8087-790X","authenticated-orcid":false,"given":"Katarzyna","family":"Wasielewska","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2969022"},{"key":"ref172","doi-asserted-by":"crossref","first-page":"240","DOI":"10.1007\/978-3-642-33704-8_21","article-title":"MADAM: A multi-level anomaly detector for Android malware","author":"dini","year":"2012","journal-title":"Computer Network Security"},{"key":"ref171","first-page":"473","article-title":"DeepRefiner: Multi-layer Android malware detection system applying deep neural networks","author":"xu","year":"2018","journal-title":"Proc IEEE Symp Sec Priv"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.1145\/2857705.2857713"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1145\/2791405.2791417"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2739145"},{"key":"ref175","article-title":"SEDMDroid: An enhanced stacking ensemble of deep learning framework for Android malware detection","author":"zhu","year":"2020","journal-title":"IEEE Transactions on Network Science and Engineering"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2986014"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1145\/3403746.3403924"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1109\/ISEA-ISAP49340.2020.235015"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101792"},{"key":"ref39","first-page":"105","article-title":"A survey of visualization systems for malware analysis","author":"wagner","year":"2015","journal-title":"In EuroVis (STARs)"},{"key":"ref38","first-page":"1","article-title":"Malware in IoT software and hardware","author":"milosevic","year":"2016","journal-title":"Proc Trustworthy Manuf Utilization Secure Devices Workshop"},{"key":"ref33","first-page":"7207","article-title":"Malware detection and evasion with machine learning techniques: A survey","volume":"12","author":"barriga","year":"2017","journal-title":"Int J Appl Eng Res"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3003816"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2974752"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1186\/s13673-018-0125-x"},{"key":"ref37","article-title":"IoT malware: Comprehensive survey, analysis framework and case studies","author":"costin","year":"2018","journal-title":"Proc BlackHat"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/QRS-C.2019.00088"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2963145"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.03.007"},{"key":"ref181","doi-asserted-by":"crossref","first-page":"431","DOI":"10.1016\/j.future.2017.06.002","article-title":"Automated multi-level malware detection system based on reconstructed semantic view of executables using machine learning techniques at VMM","volume":"79","author":"a","year":"2018","journal-title":"Future Gener Comput Syst"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2020.106729"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-20376-8_15"},{"key":"ref184","first-page":"128","article-title":"A privacy-preserving federated learning system for Android malware detection based on edge computing","author":"hsu","year":"2020","journal-title":"Proc Asia Joint Conf Inf Secur"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1109\/TPS-ISA48467.2019.00020"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3022722"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2014.2302386"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-16745-9_27"},{"key":"ref187","first-page":"525","article-title":"Covert channels using mobile device’s magnetic field sensors","author":"matyunin","year":"2016","journal-title":"Asia South Pacific Design Autom Conf (ASP-DAC)"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2016.7906972"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2019.02.056"},{"key":"ref27","doi-asserted-by":"crossref","first-page":"122","DOI":"10.3390\/info10040122","article-title":"A survey of deep learning methods for cyber security","volume":"10","author":"berman","year":"2019","journal-title":"Information"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2015.2481378"},{"key":"ref29","first-page":"41:1","article-title":"A survey on malware detection using data mining techniques","volume":"50","author":"ye","year":"2017","journal-title":"ACM Comput Surv"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2636078"},{"key":"ref22","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s42400-019-0043-x","article-title":"An emerging threat fileless malware: A survey and research challenges","volume":"3","author":"kumar","year":"2020","journal-title":"Cybersecurity"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2019.01.002"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1587\/transinf.2019INI0003"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2963724"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.11.001"},{"key":"ref25","doi-asserted-by":"crossref","first-page":"27","DOI":"10.13164\/mendel.2019.2.027","article-title":"A survey on artificial intelligence in malware as next-generation threats","volume":"25","author":"thanh","year":"2019","journal-title":"Mendely"},{"key":"ref50","year":"2020","journal-title":"Cybercriminals Targeting Critical Healthcare Institutions With Ransomware"},{"key":"ref51","year":"2020","journal-title":"The Marriage of Data Exfiltration and Ransomware"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2018.8659358"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2863036"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/SECON.2018.8478898"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1109\/SNPD.2018.8441123"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/BigComp48618.2020.00-96"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2895334"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1145\/3369740.3369796"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-018-0321-2"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1155\/2020\/3842094"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1155\/2020\/5190138"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2745575"},{"key":"ref59","author":"fewer","year":"2008","journal-title":"Reflective Dll Injection"},{"key":"ref58","author":"dolan","year":"2013","journal-title":"MOV is Turing-Complete"},{"key":"ref57","first-page":"77","article-title":"Frankenstein: Stitching malware from benign binaries","author":"mohan","year":"2012","journal-title":"Proc 6th USENIX Workshop on Offensive Technologies"},{"key":"ref56","author":"ferrie","year":"2007","journal-title":"Attacks on Virtual Machine Emulators"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/BWCCA.2010.85"},{"key":"ref54","author":"szor","year":"2005","journal-title":"The Art of Computer Virus Research and Defense"},{"key":"ref53","first-page":"1","article-title":"malWASH: Washing malware to evade dynamic analysis","author":"ispoglou","year":"2016","journal-title":"Proc 10th USENIX Workshop Offensive Technol"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICICIP.2014.7010353"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.101613.00077"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1145\/3403746.3403914"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2780250"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-0818-9_15"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2866319"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2957429"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1109\/ICISCE48695.2019.00014"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid49817.2020.00-51"},{"key":"ref160","first-page":"51","article-title":"A malicious code variants detection method based on self-attention","author":"li","year":"2020","journal-title":"Proc 6th Int Conf Comput Technol Appl"},{"key":"ref4","year":"2019","journal-title":"Gartner says worldwide wearable device sales to grow 17 percent in 2017"},{"key":"ref3","author":"morgan","year":"2019","journal-title":"Humans on the Internet Will Triple From 2015 to 2022 and Hit 6 Billion"},{"key":"ref6","year":"2020","journal-title":"Malware Statistics"},{"key":"ref5","year":"2019","journal-title":"Kaspersky Security Bulletin 2019 Statistics"},{"key":"ref8","year":"2020","journal-title":"Internet Organised Crime Threat Assessment (IOCTA)"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-24274-9_52"},{"key":"ref7","first-page":"225","author":"zhuge","year":"2009","journal-title":"Studying malicious websites and the underground economy on the Chinese web"},{"key":"ref49","year":"2019","journal-title":"Internet Security Threat Report"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCNT.2018.8494096"},{"key":"ref9","year":"2019","journal-title":"McAfee Mobile Threat Report"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2018.00092"},{"key":"ref46","author":"palmer","year":"2018","journal-title":"This New Cryptomining Malware Targets Business PCs and Servers"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355576"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2017.10.012"},{"key":"ref47","year":"2019","journal-title":"Beapy Cryptojacking Worm Hits Enterprises in China"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2015.33"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2350994"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3339261"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2018.032501746"},{"key":"ref73","first-page":"491","article-title":"From throw-away traffic to bots: Detecting the rise of dga-based malware","author":"antonakakis","year":"2012","journal-title":"Proc 21st USENIX Secur Symp"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-33630-5_22"},{"key":"ref71","author":"bejtlich","year":"2010","journal-title":"What is APT and What Does it Want"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.3390\/app10113874"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2018.07.023"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref74","author":"spring","year":"2014","journal-title":"Domain blocking The problem of a googol of domains"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2012.35"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref79","first-page":"321","article-title":"Why do adversarial attacks transfer? Explaining transferability of evasion and poisoning attacks","author":"demontis","year":"2019","journal-title":"Proc 28th USENIX Secur Symp"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.42"},{"key":"ref62","doi-asserted-by":"crossref","first-page":"165","DOI":"10.1007\/978-3-319-45719-2_8","article-title":"Sandprint: Fingerprinting malware sandboxes to provide intelligence for sandbox evasion","author":"yokoyama","year":"2016","journal-title":"Research in Attacks Intrusions and Defenses"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/2592791.2592796"},{"key":"ref63","year":"2019","journal-title":"Evasive Threats Pervasive Effects"},{"key":"ref64","year":"2020","journal-title":"In-Depth Analysis of the Top Cyber Threat Trends Over the Past Year"},{"key":"ref65","author":"segura","year":"2019","journal-title":"Exploit kits fall 2019 review"},{"key":"ref66","author":"steve brodson","year":"2020","journal-title":"Fileless Malware When Windows Turns on Itself"},{"key":"ref67","year":"2018","journal-title":"The Rising Threat of Fileless Malware"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.IR.7298r2"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-44885-4_5"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2016.1600110NM"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2019.03.012"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1109\/ICIoT48696.2020.9089514"},{"key":"ref193","first-page":"615","article-title":"Machine learning—The results are not the only thing that matters! What about security, explainability and fairness?","volume":"12140","author":"chora\u00e5","year":"2020","journal-title":"Proc 20th Int Conf"},{"key":"ref194","first-page":"1","article-title":"Achieving explainability of intrusion detection system by hybrid oracle-explainer approach","author":"szczepa\u017eski","year":"2020","journal-title":"Proc Int Joint Conf Neural Netw"},{"key":"ref195","year":"2020","journal-title":"Malpedia"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2016.7543792"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-017-0306-6"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN.2018.8343255"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2015.7120028"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00067"},{"key":"ref191","doi-asserted-by":"crossref","first-page":"176","DOI":"10.1007\/978-3-319-60753-5_19","article-title":"An inside look at IoT malware","author":"wang","year":"2017","journal-title":"Industrial IoT Technologies and Applications"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1145\/3341105.3373854"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.04.013"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1016\/j.protcy.2012.10.123"},{"key":"ref90","doi-asserted-by":"crossref","first-page":"144","DOI":"10.1007\/978-3-642-41284-4_8","article-title":"FIRMA: Malware clustering and network signature generation with mixed network behaviors","author":"rafique","year":"2013","journal-title":"Research in Attacks Intrusions and Defenses"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2015.11.016"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2010.08.137"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046619"},{"key":"ref97","doi-asserted-by":"crossref","first-page":"109","DOI":"10.1007\/978-3-319-11379-1_6","article-title":"Unsupervised anomaly based malware detection using hardware features","author":"tang","year":"2014","journal-title":"Proc 16th Int Symp Res Attacks Intrusions Defenses (RAID)"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-658-06708-3_9"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00057"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/93.959097"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1002\/9781119081715"},{"key":"ref80","first-page":"387","article-title":"Evasion attacks against machine learning at test time","volume":"8190","author":"biggio","year":"2013","journal-title":"Proc Eur Conf Mach Learn Princ Pract Knowl Discovery Databases (ECML PKDD)"},{"key":"ref89","doi-asserted-by":"crossref","first-page":"101","DOI":"10.1007\/978-3-642-04342-0_6","article-title":"Automatic generation of string signatures for malware detection","author":"griffin","year":"2009","journal-title":"Proc 5th Int Symp Recent Advances in Intrusion Detection"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3341493"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58323-1_55"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1989.36306"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(95)00012-W"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1109\/ICCE.2019.8662080"},{"key":"ref101","first-page":"1109","article-title":"Mobile agents for detecting network attacks using timing covert channels","volume":"25","author":"bieniasz","year":"2019","journal-title":"J Universal Comput Sci"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2009.090604"},{"key":"ref201","doi-asserted-by":"publisher","DOI":"10.1109\/ACIT47987.2019.8991124"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/TCSET49122.2020.235556"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/ICTCS.2019.8923067"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/ICSCAN.2019.8878696"},{"key":"ref124","first-page":"184","article-title":"Dynamic ant colony system with three level update feature selection for intrusion detection","volume":"20","author":"rais","year":"2018","journal-title":"Int J Netw Secur"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2016.0290"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/WCNC45663.2020.9120537"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2805783"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29029-0_28"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2799854"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/CCECE.2019.8861782"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2916886"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-011-0152-x"},{"key":"ref135","first-page":"1","article-title":"A theoretical model: Using logistic regression for malware signature based detection","author":"hughes","year":"2012","journal-title":"Proc 10th Int Conf Dependable Autonomic Secure Comput"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2015.15"},{"key":"ref137","doi-asserted-by":"crossref","first-page":"646","DOI":"10.1016\/j.jnca.2012.10.004","article-title":"Classification of malware based on integrated static and dynamic features","volume":"36","author":"islam","year":"2013","journal-title":"J Netw Comput Appl"},{"key":"ref139","first-page":"30","article-title":"Improving the effectiveness and efficiency of dynamic malware analysis with machine learning","author":"kilgallon","year":"2017","journal-title":"Proc Resilience Week (RWS)"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.18287\/1613-0073-2017-1901-132-139"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/ROPEC.2018.8661441"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-016-0265-3"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2020.05.026"},{"key":"ref2","year":"2020","journal-title":"Catching the Virus Cybercrime Disinformation and the COVID-19 Pandemic"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2020.102483"},{"key":"ref1","author":"morgan","year":"2020","journal-title":"Global Cybercrime Damages Predicted to Reach $6 Trillion Annually by 2021"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1109\/NCC48643.2020.9056080"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-017-0309-3"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/ICECTA48151.2019.8959765"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/IKT.2013.6620049"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93411-2_8"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2018.2889495"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2924549"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2016.2540634"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.59"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1016\/j.pmcj.2015.05.005"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2017.1600955"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.11"},{"key":"ref10","first-page":"17","author":"mazurczyk","year":"2016","journal-title":"Towards a Systematic View Cybersecurity Ecology"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1631\/FITEE.1601745"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.18517\/ijaseit.8.4-2.6827"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2089125.2089126"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3329786"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3017427"},{"key":"ref16","doi-asserted-by":"crossref","DOI":"10.1016\/j.jnca.2019.102526","article-title":"The rise of machine learning for detection and classification of malware: Research developments, trends and challenges","volume":"153","author":"gibert","year":"2020","journal-title":"J Netw Comput Appl"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1145\/2875475.2875481"},{"key":"ref17","article-title":"Tools and techniques for malware detection and analysis","author":"talukder","year":"2020","journal-title":"arXiv 2002 06819"},{"key":"ref117","first-page":"71","article-title":"Detecting local covert channels using process activity correlation on Android smartphones","volume":"32","author":"urbanski","year":"2017","journal-title":"Int J Comput Syst Sci Eng"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3365001"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3150376.3150378"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/NetSoft48620.2020.9165537"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/ICDIS.2019.00016"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00250"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2510825"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2019.8740838"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.22619\/IJCSA.2016.1001010"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-017-0558-5"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2019.8769039"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2017.2676100"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9312710\/09311151.pdf?arnumber=9311151","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,26]],"date-time":"2022-01-26T13:59:55Z","timestamp":1643205595000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9311151\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":201,"URL":"https:\/\/doi.org\/10.1109\/access.2020.3048319","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}