{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T15:20:53Z","timestamp":1784215253938,"version":"3.55.0"},"reference-count":141,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Khalifa University of Science and Technology and the Technology Innovation Institute (TII) of Abu Dhabi, United Arab Emirates","award":["843400048"],"award-info":[{"award-number":["843400048"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Artif. Intell."],"published-print":{"date-parts":[[2025,8]]},"DOI":"10.1109\/tai.2025.3537966","type":"journal-article","created":{"date-parts":[[2025,2,4]],"date-time":"2025-02-04T14:00:47Z","timestamp":1738677647000},"page":"1955-1976","source":"Crossref","is-referenced-by-count":17,"title":["Generative Adversarial Networks for Dynamic Malware Behavior: A Comprehensive Review, Categorization, and Analysis"],"prefix":"10.1109","volume":"6","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9641-7286","authenticated-orcid":false,"given":"Ghebrebrhan","family":"Gebrehans","sequence":"first","affiliation":[{"name":"Center for Secure Cyber-Physical Systems (C2PS) Laboratory, Khalifa University of Science and Technology, Abu Dhabi, United Arab Emirates"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8220-4474","authenticated-orcid":false,"given":"Naveed","family":"Ilyas","sequence":"additional","affiliation":[{"name":"Department of Bioengineering, University of California, Riverside, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4355-4041","authenticated-orcid":false,"given":"Khouloud","family":"Eledlebi","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, Khalifa University of Science and Technology, Abu Dhabi, United Arab Emirates"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0718-0019","authenticated-orcid":false,"given":"Willian Tessaro","family":"Lunardi","sequence":"additional","affiliation":[{"name":"Technology Innovation Institute (TII), Abu Dhabi, United Arab Emirates"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4170-4341","authenticated-orcid":false,"given":"Martin","family":"Andreoni","sequence":"additional","affiliation":[{"name":"Technology Innovation Institute (TII), Abu Dhabi, United Arab Emirates"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1398-952X","authenticated-orcid":false,"given":"Chan Yeob","family":"Yeun","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, Khalifa University, Abu Dhabi, United Arab Emirates"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9557-6496","authenticated-orcid":false,"given":"Ernesto","family":"Damiani","sequence":"additional","affiliation":[{"name":"Center for Secure Cyber-Physical Systems, Khalifa University of Science and Technology, Abu Dhabi, United Arab Emirates"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1002\/widm.1306"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2013.2257594"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.jii.2023.100520"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1057\/9781137513960_6"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2022.3160658"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2023.3330949"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1561\/2200000056"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3422622"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SLAAI-ICAI56923.2022.10002630"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-022-00648-6"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/IBCAST.2019.8667136"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-010-0148-x"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/QRS51102.2020.00028"},{"key":"ref14","article-title":"Generative adversarial networks for malware detection: A survey","author":"Dunmore","year":"2023"},{"key":"ref15","article-title":"Binary black-box evasion attacks against deep learning-based static malware detectors with adversarial byte-level language model","author":"Ebrahimi","year":"2020"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ISI53945.2021.9624787"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2022.3225137"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3634737.3637658"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2018.8599855"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1155\/2023\/8227751"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/DDCLS52934.2021.9455631"},{"key":"ref22","first-page":"7335","article-title":"Modeling tabular data using conditional GAN","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Xu","year":"2019"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3361650"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3446374"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3265665"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2021.108149"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2023.109807"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.3390\/info10040122"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3204051"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/UEMCON51285.2020.9298135"},{"key":"ref31","article-title":"Stegomalware: A systematic survey of malwarehiding and detection in images, machine learningmodels and research challenges","author":"Chaganti","year":"2021"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.37256\/jeee.4120255738"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3519524"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-019-09717-4"},{"key":"ref35","doi-asserted-by":"crossref","DOI":"10.20944\/preprints202311.0798.v1","article-title":"A survey on ransomware threats: Contrasting static and dynamic analysis methods","author":"Kang","year":"2023"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29407-6_4"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/IBCAST.2019.8667136"},{"key":"ref38","article-title":"Signature based malware detection is dead","author":"Scott","year":"2017","journal-title":"Inst. Crit. Infrastructure Technol."},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2963724"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2014.10.011"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3252022"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2019.00042"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-2010-0410"},{"key":"ref44","first-page":"205","article-title":"A malware instruction set for behavior-based analysis","volume":"p-170","author":"Trinius","year":"2010"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.5815\/ijmecs.2017.03.06"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3329786"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2017.8258167"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3446331"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3211346"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICICCT.2018.8473346"},{"key":"ref51","article-title":"KDD Cup 1999 Data.","author":"Stolfo","year":"1999"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.5220\/0006639801080116"},{"key":"ref55","article-title":"A realistic cyber defense dataset (CSE-CIC-IDS2018).","year":"2023"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CSR57506.2023.10224927"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/BigData55660.2022.10021022"},{"key":"ref58","article-title":"GAN-based training for binary classifier","author":"Al-Hamadi","year":"2022"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2013.13"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/UEMCON.2018.8796769"},{"key":"ref61","article-title":"Android malware 2017","year":"2024"},{"key":"ref62","article-title":"Investigation on android malware 2019.","year":"2024"},{"key":"ref63","article-title":"MalDroid 2020","year":"2024"},{"key":"ref64","article-title":"AndMal 2020","year":"2024"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3442520.3442522"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/BigData55660.2022.10020534"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.3390\/computers13060154"},{"key":"ref68","article-title":"Emulating malware authors for proactive protection using GANs over a distributed image visualization of dynamic file behavior","author":"Bhaskara","year":"2018"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-25891-6_4"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2024.123450"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/URTC60662.2023.10535002"},{"key":"ref72","first-page":"4523","article-title":"Pareto GAN: Extending the representational power of GANs to heavy-tailed distributions","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Huster","year":"2021"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/JSAIT.2024.3415670"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.32614\/RJ-2014-031"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.21105\/joss.03021"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/DSC54232.2022.9888906"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSA52016.2021.9478232"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2022.103267"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.14569\/IJACSA.2023.0141067"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427230"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2021.107506"},{"key":"ref82","article-title":"Black-box attacks against RNN based malware detection algorithms","volume-title":"Proc. Workshops 32nd AAAI Conf. Artif. Intell.","author":"Hu","year":"2018"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3146405"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/RDAAPS48126.2021.9452002"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3157042"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.5555\/2969033.2969125"},{"key":"ref87","article-title":"Unsupervised representation learning with deep convolutional generative adversarial networks","author":"Radford","year":"2015"},{"key":"ref88","article-title":"Conditional generative adversarial nets","author":"Mirza","year":"2014"},{"key":"ref89","first-page":"214","article-title":"Wasserstein generative adversarial networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Arjovsky","year":"2017"},{"key":"ref90","article-title":"Improved training of Wasserstein GANs","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Gulrajani","year":"2017"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v31i1.10804"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2023.103761"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2019.00190"},{"key":"ref94","first-page":"2642","article-title":"Conditional image synthesis with auxiliary classifier GANs","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Odena","year":"2017"},{"key":"ref95","first-page":"20","article-title":"Adversaries strike hard: Adversarial attacks against malware classifiers using dynamic API calls as features","volume-title":"Cyber Secur. Cryptography Mach. Learn.","author":"Handa","year":"2021"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.304"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.244"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-19-8991-9_29"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2022.3204349"},{"key":"ref100","article-title":"Copula flows for synthetic data generation","author":"Kamthe","year":"2021"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/DSAA.2016.49"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1049\/cit2.12028"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-021-00102-9"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM42002.2020.9322377"},{"issue":"4.29","key":"ref105","first-page":"101","article-title":"Deep convolutional generative adversarial networks for intent-based dynamic behavior capture","volume":"7","author":"Jan","year":"2018","journal-title":"Int. J. Eng. & Technol."},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1111\/exsy.12611"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/MICCIS58901.2023.00031"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/IIP57348.2022.00070"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/ICFEICT57213.2022.00109"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/CCDC49329.2020.9164558"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/9947059"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.3390\/math11163605"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3436588"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104005"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/ICOCWC60930.2024.10470902"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/ICSSAS57918.2023.10331855"},{"key":"ref117","article-title":"Attention-GAN for anomaly detection: A cutting-edge approach to cybersecurity threat management","author":"Sen","year":"2024"},{"key":"ref118","article-title":"Counteracting concept drift by learning with future malware predictions","author":"Bosansky","year":"2024"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103733"},{"key":"ref120","first-page":"271","article-title":"F-GAN: Training generative neural samplers using variational divergence minimization","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"29","author":"Nowozin","year":"2016"},{"key":"ref121","first-page":"2203","article-title":"MMD GAN: Towards deeper understanding of moment matching network","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Li","year":"2017"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.3390\/fi16100369"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.3390\/fi15100318"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3348451"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2021.3103139"},{"key":"ref126","doi-asserted-by":"crossref","DOI":"10.31219\/osf.io\/ctyz9","article-title":"Ransomware detection using dynamic anomaly matrix for accurate and real-time threat identification","author":"Brownor","year":"2024"},{"key":"ref127","article-title":"Ransomware detection using dynamic behavioral profiling: A novel approach for real-time threat mitigation","author":"Yu","year":"2024","journal-title":"Authorea Preprints"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-017-1110-2"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534432"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-97-9743-1_18"},{"key":"ref131","article-title":"Leveraging LSTM and GAN for modern malware detection","author":"Gupta","year":"2024"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2017.00035"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-025-02357-y"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00467"},{"key":"ref135","article-title":"Towards faster and stabilized GAN training for high-fidelity few-shot image synthesis","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Liu","year":"2020"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1016\/j.cviu.2023.103888"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.35467\/cal\/169299"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103769"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2021.108098"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2022.07.066"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2022.3229289"}],"container-title":["IEEE Transactions on Artificial Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/9078688\/11106307\/10870477.pdf?arnumber=10870477","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T01:09:45Z","timestamp":1755911385000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10870477\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8]]},"references-count":141,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tai.2025.3537966","relation":{},"ISSN":["2691-4581"],"issn-type":[{"value":"2691-4581","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,8]]}}}