{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T14:53:58Z","timestamp":1779202438624,"version":"3.51.4"},"reference-count":63,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100006021","name":"Direction G\u00e9n\u00e9rale de L\u2019armement Fran\u00e7aise and R\u00e9gion Bretagne","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100006021","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3335187","type":"journal-article","created":{"date-parts":[[2023,11,20]],"date-time":"2023-11-20T14:29:10Z","timestamp":1700490550000},"page":"131273-131288","source":"Crossref","is-referenced-by-count":6,"title":["Toward Hardware-Assisted Malware Detection Utilizing Explainable Machine Learning: A Survey"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8176-8510","authenticated-orcid":false,"given":"Yehya","family":"Nasser","sequence":"first","affiliation":[{"name":"Lab-STICC, UMR CNRS 6285, IMT Atlantique School, Brest, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8857-4436","authenticated-orcid":false,"given":"Mohamad","family":"Nassar","sequence":"additional","affiliation":[{"name":"Department of Computer Science, The University of Alabama in Huntsville, Huntsville, AL, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Internet of Things at-a-Glance","year":"2019"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/SERVICES.2015.12"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2019.00040"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.23919\/DATE51398.2021.9474050"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2022.117083"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2018.8342267"},{"key":"ref7","volume-title":"Sonicwall Cyber Threat Report","year":"2022"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2963724"},{"key":"ref9","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.SP.800-83","article-title":"Guide to malware incident prevention and handling","author":"Mell","year":"2005"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1186\/s13174-014-0015-z"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1613\/jair.1.13200"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD50377.2020.00113"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11491"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58342-2_11"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N16-3020"},{"key":"ref16","article-title":"CEnt: An entropy-based model-agnostic explainability framework to contrast classifiers\u2019 decisions","author":"Zini","year":"2023","journal-title":"arXiv:2301.07941"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243792"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516714"},{"key":"ref19","volume-title":"Secure Boot","year":"2023"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ISQED51717.2021.9424322"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SOCC46988.2019.1570564307"},{"key":"ref22","article-title":"Securing the future of authentication with ARM TrustZone-based trusted execution environment and fast identity online (FIDO)","author":"Coombs","year":"2015"},{"key":"ref23","volume-title":"A Technical Analysis of Confidential Computing V1.1","year":"2021"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2019.8661202"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484583"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.14778\/2994509.2994528"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/MSN.2011.19"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/1133572.1133600"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2011.115"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1080\/18335330.2012.653198"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/tce.2023.3297965"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/DCOSS.2019.00054"},{"key":"ref33","volume-title":"Trusted Platform Module (TPM) Summary","year":"2008"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2021.102240"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAIE.2010.5735083"},{"key":"ref36","first-page":"1091","article-title":"DICE: A formally verified implementation of DICE measured boot","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Tao"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3388141"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00250"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2020.3003276"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3485832.3485894"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-019-00074-w"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ipdps.2003.1213517"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11379-1_6"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2508148.2485970"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2016.2540634"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2015.7056070"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1504\/IJESDF.2007.016865"},{"key":"ref48","article-title":"Malware detection by eating a whole exe","volume-title":"Proc. Workshops 32nd AAAI Conf. Artif. Intell.","author":"Raff"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3331076.3331111"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN48605.2020.9207322"},{"key":"ref51","article-title":"Explaining vulnerabilities of deep learning to adversarial malware binaries","author":"Demetrio","year":"2019","journal-title":"arXiv:1901.03583"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00017"},{"key":"ref53","first-page":"1877","article-title":"Language models are few-shot learners","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Brown"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/2046582.2046596"},{"key":"ref55","volume-title":"\u00c9tat de la Menace Ran\u00e7ongiciel","year":"2021"},{"key":"ref56","article-title":"Burning the adversarial bridges: Robust windows malware detection against binary-level mutations","author":"Abusnaina","year":"2023","journal-title":"arXiv:2310.03285"},{"key":"ref57","first-page":"1163","article-title":"Adversarial training for raw-binary malware classifiers","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Lucas"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3174679"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3025775"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.102526"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2013.6583806"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3006143"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00021"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10323406.pdf?arnumber=10323406","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,25]],"date-time":"2025-09-25T17:56:20Z","timestamp":1758822980000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10323406\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":63,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3335187","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}