{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,31]],"date-time":"2026-10-31T04:11:27Z","timestamp":1793419887486,"version":"4.5.0"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"ARO","award":["W911NF-13-1-0421"],"award-info":[{"award-number":["W911NF-13-1-0421"]}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1814679"],"award-info":[{"award-number":["CNS-1814679"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2019340"],"award-info":[{"award-number":["CNS-2019340"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,3,1]]},"DOI":"10.1109\/tdsc.2022.3153844","type":"journal-article","created":{"date-parts":[[2022,2,25]],"date-time":"2022-02-25T15:31:21Z","timestamp":1645803081000},"page":"1390-1402","source":"Crossref","is-referenced-by-count":61,"title":["Semantics-Preserving Reinforcement Learning Attack Against Graph Neural Networks for Malware Detection"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3964-8034","authenticated-orcid":false,"given":"Lan","family":"Zhang","sequence":"first","affiliation":[{"name":"Department of Information Science and Technology, Penn State University, State College, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peng","family":"Liu","sequence":"additional","affiliation":[{"name":"Department of Information Science and Technology, Penn State University, State College, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3556-5082","authenticated-orcid":false,"given":"Yoon-Ho","family":"Choi","sequence":"additional","affiliation":[{"name":"Pusan National University, Kumjeong-ku, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ping","family":"Chen","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"A leakerlocker sample found on virustotal (first seen: 2016-11-23)","year":"2016"},{"key":"ref2","first-page":"533","article-title":"Towards large-scale hunting for android negative-day malware","volume-title":"Proc. 22nd Int. Symp. Res. Attacks, Intrusions Defenses","author":"Yuan","year":"2019"},{"key":"ref3","article-title":"Security tools taking too long to detect new malware, analysis warns","author":"Braue","year":"2015"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/RWEEK.2018.8473556"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00020"},{"key":"ref6","article-title":"Learning to evade static pe machine learning malware models via reinforcement learning","author":"Anderson","year":"2018"},{"key":"ref7","article-title":"Optimization-guided binary diversification to mislead neural networks for malware detection","author":"Sharif","year":"2019"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2019.00210"},{"key":"ref9","article-title":"Deceiving end-to-end deep learning malware detectors using adversarial examples","author":"Kreuk","year":"2018"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11782"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/BWCCA.2010.85"},{"key":"ref12","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref13","article-title":"Semi-supervised classification with graph convolutional networks","author":"Kipf","year":"2016"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2822680"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-56991-8_51"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2016.151"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2017.7966078"},{"key":"ref18","article-title":"malWASH: Washing malware to evade dynamic analysis","volume-title":"Proc. 10th USENIX Workshop Offensive Technol.","author":"Ispoglou","year":"2016"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274731"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2017.00019"},{"key":"ref21","first-page":"1115","article-title":"Adversarial attack on graph structured data","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Dai","year":"2018"},{"key":"ref22","article-title":"Node injection attacks on graphs via reinforcement learning","author":"Sun","year":"2019"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1002\/9781119076582"},{"key":"ref25","article-title":"\u201cVirusshare","year":"2019"},{"key":"ref26","article-title":"\u201cVirustotal","year":"2019"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.17"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.41"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897863"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-30303-1_14"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2857705.2857726"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.52"},{"key":"ref33","first-page":"367","article-title":"\u201cShuffler: Fast and deployable continuous code re-randomization","volume-title":"Proc. 12th USENIX Symp. Oper. Syst. Des. Implementation","author":"Williams-King","year":"2016"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2017.47"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098158"},{"key":"ref39","first-page":"197","article-title":"\u201cPractical evasion of a learning-based classifier: A case study","volume-title":"Proc. IEEE Symp. Secur. privacy","author":"Laskov","year":"2014"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00020"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2824250"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3201243"},{"key":"ref43","article-title":"\u201cFast gradient attack on network embedding","author":"Chen","year":"2018"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3220078"},{"key":"ref45","article-title":"\u201cAttack graph convolutional networks by adding fake nodes","author":"Wang","year":"2018"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354206"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2019.00130"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/10068314\/9721612-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10068314\/09721612.pdf?arnumber=9721612","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,17]],"date-time":"2024-01-17T18:40:15Z","timestamp":1705516815000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9721612\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,1]]},"references-count":47,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3153844","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,1]]}}}