{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,30]],"date-time":"2026-05-30T01:50:03Z","timestamp":1780105803995,"version":"3.54.0"},"reference-count":73,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100020950","name":"National Science and Technology Council (NSTC) of Taiwan","doi-asserted-by":"publisher","award":["111-2628-E-A49-006-MY2"],"award-info":[{"award-number":["111-2628-E-A49-006-MY2"]}],"id":[{"id":"10.13039\/501100020950","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100020950","name":"National Science and Technology Council (NSTC) of Taiwan","doi-asserted-by":"publisher","award":["112-2634-F-A49-001-MBK"],"award-info":[{"award-number":["112-2634-F-A49-001-MBK"]}],"id":[{"id":"10.13039\/501100020950","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100020950","name":"National Science and Technology Council (NSTC) of Taiwan","doi-asserted-by":"publisher","award":["112-2218-E-A49-023"],"award-info":[{"award-number":["112-2218-E-A49-023"]}],"id":[{"id":"10.13039\/501100020950","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Taiwan Academic Cybersecurity Center (TACC) Project at the National Yang Ming Chiao Tung University"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/tifs.2023.3283913","type":"journal-article","created":{"date-parts":[[2023,6,7]],"date-time":"2023-06-07T17:26:09Z","timestamp":1686158769000},"page":"4128-4143","source":"Crossref","is-referenced-by-count":21,"title":["Guided Malware Sample Analysis Based on Graph Neural Networks"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0888-0984","authenticated-orcid":false,"given":"Yi-Hsien","family":"Chen","sequence":"first","affiliation":[{"name":"Department of Electrical Engineering, National Taiwan University, Taipei, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Si-Chen","family":"Lin","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering, National Taiwan University, Taipei, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Szu-Chun","family":"Huang","sequence":"additional","affiliation":[{"name":"Department of Computer Science, National Yang Ming Chiao Tung University, Hsinchu, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9011-5025","authenticated-orcid":false,"given":"Chin-Laung","family":"Lei","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering, National Taiwan University, Taipei, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5503-9541","authenticated-orcid":false,"given":"Chun-Ying","family":"Huang","sequence":"additional","affiliation":[{"name":"Department of Computer Science, National Yang Ming Chiao Tung University, Hsinchu, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-03192-3_17"},{"key":"ref57","article-title":"A structured self-attentive sentence embedding","author":"lin","year":"2017","journal-title":"arXiv 1703 03130"},{"key":"ref12","article-title":"EMBER: An open dataset for training static PE malware machine learning models","author":"anderson","year":"2018","journal-title":"arXiv 1804 04637"},{"key":"ref56","year":"2022","journal-title":"RADAR"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2623330.2623732"},{"key":"ref59","article-title":"DeeperGCN: All you need to train deeper GCNs","author":"li","year":"2020","journal-title":"arXiv 2006 07739"},{"key":"ref14","article-title":"Efficient estimation of word representations in vector space","author":"mikolov","year":"2013","journal-title":"arXiv 1301 3781 [cs]"},{"key":"ref58","article-title":"On the bottleneck of graph neural networks and its practical implications","author":"alon","year":"2020","journal-title":"arXiv 2006 05205"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3008900"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.47"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2018.04.024"},{"key":"ref55","year":"2022","journal-title":"Ghidra"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101748"},{"key":"ref54","year":"2022","journal-title":"Ida pro"},{"key":"ref17","first-page":"2539","article-title":"Weisfeiler-Lehman graph kernels","volume":"12","author":"shervashidze","year":"2011","journal-title":"J Mach Learn Res"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939754"},{"key":"ref19","first-page":"2702","article-title":"Discriminative embeddings of latent variable models for structured data","volume":"48","author":"dai","year":"2016","journal-title":"Proc 33rd Int Conf Mach Learn"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1093\/acprof:oso\/9780198528173.001.0001"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3098954.3098995"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2016.28"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/DSC54232.2022.9888878"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3153844"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3168285"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102872"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC54236.2022.00237"},{"key":"ref41","article-title":"Gated graph sequence neural networks","author":"li","year":"2015","journal-title":"arXiv 1511 05493"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2023.23005"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom53373.2021.00084"},{"key":"ref49","first-page":"9240","article-title":"GNNExplainer: Generating explanations for graph neural networks","volume":"32","author":"ying","year":"2019","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2018.8328749"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2017.8323963"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-018-0323-0"},{"key":"ref4","article-title":"A survey of machine learning methods and challenges for windows malware classification","author":"raff","year":"2020","journal-title":"arXiv 2006 09271"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.102526"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-016-0283-1"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140442"},{"key":"ref40","article-title":"Graph attention networks","author":"veli?kovi?","year":"2017","journal-title":"arXiv 1710 10903"},{"key":"ref35","article-title":"Explaining vulnerabilities of deep learning to adversarial malware binaries","author":"demetrio","year":"2019","journal-title":"arXiv 1901 03583"},{"key":"ref34","year":"2017","journal-title":"The Undocumented Microsoft “Rich” Header"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3082173"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN48605.2020.9207322"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/DSA52907.2021.00087"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3219862"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00017"},{"key":"ref32","first-page":"1","article-title":"Deep convolutional malware classifiers can learn from raw executables and labels only","author":"kr?\u00e1l","year":"2018","journal-title":"Proc 6th Int Conf Learn Represent"},{"key":"ref2","year":"2021","journal-title":"Cyber Threat Intelligence for Navigating Today’s Business Reality"},{"key":"ref1","year":"2022","journal-title":"Malware Statistics And Trends Report"},{"key":"ref39","article-title":"Semi-supervised classification with graph convolutional networks","author":"kipf","year":"2016","journal-title":"arXiv 1609 02907"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00003"},{"key":"ref71","author":"zhang","year":"2020","journal-title":"Deep Analysis—The Eking Variant of Phobos Ransomware"},{"key":"ref70","author":"berry","year":"2017","journal-title":"WannaCry Malware Profile"},{"key":"ref73","year":"2022","journal-title":"A Deep-Dive Analysis of Azorult Stealer"},{"key":"ref72","year":"2019","journal-title":"A Deep Dive Into Phobos Ransomware"},{"key":"ref24","author":"johns","year":"2017","journal-title":"Representation Learning for Malware Classification"},{"key":"ref68","article-title":"Malware detection by eating a whole EXE","author":"raff","year":"2017","journal-title":"arXiv 1710 09435"},{"key":"ref23","first-page":"309","article-title":"SAFE: Self-attentive function embeddings for binary similarity","author":"massarelli","year":"2019","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment"},{"key":"ref67","first-page":"2579","article-title":"Visualizing data using t-SNE","volume":"9","author":"van der maaten","year":"2008","journal-title":"J Mach Learn Res"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1002\/zamm.19290090105"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-016-0278-y"},{"key":"ref69","author":"anderson","year":"2022","journal-title":"Elastic Malware Benchmark for Empowering Researchers"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3375395.3387641"},{"key":"ref64","year":"2022","journal-title":"Desktop Operating System Market Share"},{"key":"ref63","first-page":"729","article-title":"TESSERACT: Eliminating experimental bias in malware classification across space and time","author":"pendlebury","year":"2019","journal-title":"Proc 28th USENIX Secur Symp"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3290353"},{"key":"ref66","year":"2022","journal-title":"Detect-It-Easy"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029824"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24310"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517315"},{"key":"ref27","first-page":"21","article-title":"On the resemblance and containment of documents","author":"broder","year":"1997","journal-title":"Proc Compress Complex Sequences"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5747"},{"key":"ref62","article-title":"Layer normalization","author":"lei ba","year":"2016","journal-title":"arXiv 1607 06450"},{"key":"ref61","article-title":"SkipNode: On alleviating performance degradation for deep graph convolutional networks","author":"lu","year":"2021","journal-title":"arXiv 2112 11628"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9970396\/10145856.pdf?arnumber=10145856","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,7]],"date-time":"2023-08-07T17:57:55Z","timestamp":1691431075000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10145856\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":73,"URL":"https:\/\/doi.org\/10.1109\/tifs.2023.3283913","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}