{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T11:55:43Z","timestamp":1783166143836,"version":"3.54.6"},"reference-count":35,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018,10]]},"DOI":"10.1109\/milcom.2018.8599730","type":"proceedings-article","created":{"date-parts":[[2019,1,3]],"date-time":"2019-01-03T23:10:39Z","timestamp":1546557039000},"page":"450-455","source":"Crossref","is-referenced-by-count":8,"title":["Measuring Relative Accuracy of Malware Detectors in the Absence of Ground Truth"],"prefix":"10.1109","author":[{"given":"John","family":"Charlton","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Pang","family":"Du","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jin-Hee","family":"Cho","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shouhuai","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref33","first-page":"1","article-title":"Modeling and predicting extreme cyber attack rates via marked point processes","volume":"0","author":"peng","year":"2016","journal-title":"Journal of Applied Statistics"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2422261"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2013.2279800"},{"key":"ref30","first-page":"1","article-title":"Preventive and reactive cyber defense dynamics is globally stable","author":"zheng","year":"2017","journal-title":"IEEE Transactions on Network Science and Engineering"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2018.8599852"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2834227"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.2307\/2346806"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1553374.1553488"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2600176.2600190"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2600176.2600189"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3005714"},{"key":"ref15","first-page":"141","author":"noel","year":"2017","journal-title":"A Suite of Metrics for Network Attack Graph Analytics"},{"key":"ref16","article-title":"Metrics and measurement of trustworthy systems","author":"cho","year":"2016","journal-title":"IEEE MILCOM 2016"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3190619.3191680"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3190619.3190639"},{"key":"ref19","article-title":"Charac-terizing the effectiveness of network-based intrusion detection systems","author":"ficke","year":"2018","journal-title":"IEEE Milcom"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1080\/15427951.2013.830583"},{"key":"ref4","first-page":"1","article-title":"Statistical estimation of malware detection metrics in the absence of ground truth","author":"du","year":"2018","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1080\/15427951.2014.902407"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420999"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.33"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2746194.2746196"},{"key":"ref5","doi-asserted-by":"crossref","first-page":"45","DOI":"10.1145\/2808769.2808780","article-title":"Better malware ground truth: Techniques for weighting anti-virus vendor labels","author":"kantchelian","year":"2015","journal-title":"Proc ACM AISec"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435366"},{"key":"ref7","first-page":"1","article-title":"Paint it black: Evaluating the effectiveness of malware blacklists","author":"kiihrer","year":"0","journal-title":"Proc RAID&#x2019; 14"},{"key":"ref2","article-title":"Analyzing malware detection efficiency with multiple anti-malware programs","author":"morales","year":"2012","journal-title":"Proc CyberSecurity'12"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23057"},{"key":"ref1","first-page":"112","article-title":"Av-meter: An evaluation of antivirus scans and labels","author":"mohaisen","year":"2014","journal-title":"Proc DIMVA"},{"key":"ref20","first-page":"28","article-title":"A stochastic model for quantitative security analysis of networked systems","volume":"8","author":"li","year":"2011","journal-title":"IEEE TDSC"},{"key":"ref22","first-page":"30","article-title":"A stochastic model of multivirus dynamics","volume":"9","author":"xu","year":"2012","journal-title":"IEEE TDSC"},{"key":"ref21","first-page":"32:1","article-title":"Push- and pull-based epidemic spreading in arbitrary networks: Thresholds and deeper insights","volume":"7","author":"xu","year":"2012","journal-title":"ACM TAAS"},{"key":"ref24","first-page":"206","article-title":"Optimizing active cyber defense dynamics","author":"lu","year":"2013","journal-title":"Proc GameSec'13"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1080\/15427951.2012.654480"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2600176.2600180"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2555613"}],"event":{"name":"MILCOM 2018 - IEEE Military Communications Conference","location":"Los Angeles, CA","start":{"date-parts":[[2018,10,29]]},"end":{"date-parts":[[2018,10,31]]}},"container-title":["MILCOM 2018 - 2018 IEEE Military Communications Conference (MILCOM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8580348\/8599678\/08599730.pdf?arnumber=8599730","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,25]],"date-time":"2022-01-25T23:57:13Z","timestamp":1643155033000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8599730\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,10]]},"references-count":35,"URL":"https:\/\/doi.org\/10.1109\/milcom.2018.8599730","relation":{},"subject":[],"published":{"date-parts":[[2018,10]]}}}