{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T15:42:23Z","timestamp":1784821343222,"version":"3.55.0"},"reference-count":44,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"European Union\u2019s Horizon Europe Research and Innovation Program through the Project European Lighthouse on Secure and Safe AI","award":["101070617"],"award-info":[{"award-number":["101070617"]}]},{"name":"European Union-NextGenerationEU through the Project SERICS"},{"name":"Ministero dell\u2019Universit\u00e1 e della Ricerca (MUR) National Recovery and Resilience Plan","award":["PE00000014"],"award-info":[{"award-number":["PE00000014"]}]},{"name":"Fondazione di Sardegna under the Project \u201cTrustML: Towards Machine Learning That Humans Can Trust\u201d","award":["CUP: F73C22001320007"],"award-info":[{"award-number":["CUP: F73C22001320007"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/tifs.2024.3409083","type":"journal-article","created":{"date-parts":[[2024,6,6]],"date-time":"2024-06-06T17:23:22Z","timestamp":1717694602000},"page":"6155-6167","source":"Crossref","is-referenced-by-count":41,"title":["Nebula: Self-Attention for Dynamic Malware Analysis"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3290-5341","authenticated-orcid":false,"given":"Dmitrijs","family":"Trizna","sequence":"first","affiliation":[{"name":"Microsoft Corporation, Prague, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5104-1476","authenticated-orcid":false,"given":"Luca","family":"Demetrio","sequence":"additional","affiliation":[{"name":"Department of Informatics, Bioengineering, Robotics, and Systems Engineering, University of Genoa, Genoa, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7752-509X","authenticated-orcid":false,"given":"Battista","family":"Biggio","sequence":"additional","affiliation":[{"name":"Department of Electrical and Electronic Engineering, University of Cagliari, Cagliari, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4103-9190","authenticated-orcid":false,"given":"Fabio","family":"Roli","sequence":"additional","affiliation":[{"name":"Department of Informatics, Bioengineering, Robotics, and Systems Engineering, University of Genoa, Genoa, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSREW.2018.00-24"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3560830.3563726"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359835"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3152360"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00096"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00010"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.3390\/jcp1030021"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5474"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1146\/annurev.neuro.26.041002.131047"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref12","volume-title":"Improving language understanding by generative pre-training","author":"Radford","year":"2018"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1810.04805"},{"key":"ref14","article-title":"eXpose: A character-level convolutional neural network with embeddings for detecting malicious URLs, file paths and registry keys","author":"Saxe","year":"2017"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00018"},{"key":"ref16","first-page":"3319","article-title":"Axiomatic attribution for deep networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Sundararajan"},{"key":"ref17","article-title":"A new algorithm for data compression","author":"Gage","year":"1994","journal-title":"C Users J."},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2012.14"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-3007"},{"key":"ref20","article-title":"Avast-CTU public CAPE dataset","author":"Bosansky","year":"2022"},{"key":"ref21","volume-title":"Mill.jl and JsonGrinder.jl: Automated differentiable feature extraction for learning from raw JSON data","author":"Mandlik","year":"2021"},{"key":"ref22","volume-title":"Verizon Data Breach Investigation Report (DBIR)","year":"2022"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102846"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-22695-3_30"},{"key":"ref25","first-page":"2727","article-title":"RE-Mind: A first look inside the mind of a reverse engineer","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Security)","author":"Mantovani"},{"key":"ref26","volume-title":"Natural Language Processing With Python: Analyzing Text With the Natural Language Toolkit","author":"Bird","year":"2009"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3473039"},{"key":"ref28","article-title":"Shell language processing: Unix command parsing for machine learning","volume-title":"Proc. Conf. Appl. Mach. Learn. Inf. Secur. (CAMLIS)","author":"Trizna"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P16-1162"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/d18-2012"},{"key":"ref31","volume-title":"Speakeasy: Portable, Modular, Binary Emulator Designed to Emulate Windows Kernel and User Mode Malware","year":"2021"},{"key":"ref32","volume-title":"Scaling laws for neural language models","author":"Kaplan","year":"2020"},{"key":"ref33","volume-title":"Cape Sandbox V2.1 Book","author":"Brukhovetskyy","year":"2022"},{"key":"ref34","volume-title":"Cuckoo Sandbox","year":"2023"},{"key":"ref35","volume-title":"Malicious Code DataSet","year":"2019"},{"key":"ref36","article-title":"AdamW: Decoupled weight decay regularization","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Loshchilov"},{"key":"ref37","volume-title":"Emotet Malware","year":"2024"},{"key":"ref38","volume-title":"\u2018Operation tovar\u2019 targets \u2018gameover\u2019 ZeuS botnet, CryptoLocker scourge","author":"Krebs","year":"2014"},{"key":"ref39","first-page":"4765","article-title":"A unified approach to interpreting model predictions","volume-title":"Proc. NeurIPS","author":"Lundberg"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23644-0_18"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102371"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3494110.3528242"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3231621"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_23"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10319981\/10551436.pdf?arnumber=10551436","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,16]],"date-time":"2025-06-16T18:56:36Z","timestamp":1750100196000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10551436\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":44,"URL":"https:\/\/doi.org\/10.1109\/tifs.2024.3409083","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}