{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T02:52:06Z","timestamp":1781059926915,"version":"3.54.1"},"reference-count":33,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U24B20182"],"award-info":[{"award-number":["U24B20182"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100017366","name":"Key Research and Development Program of Zhejiang","doi-asserted-by":"publisher","award":["2024C01164"],"award-info":[{"award-number":["2024C01164"]}],"id":[{"id":"10.13039\/100017366","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3597221","type":"journal-article","created":{"date-parts":[[2025,8,8]],"date-time":"2025-08-08T18:38:49Z","timestamp":1754678329000},"page":"8555-8569","source":"Crossref","is-referenced-by-count":1,"title":["AV-Agent: A Bottom-Up Interpretable Malware Classifier Based on Large Language Models"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9592-3283","authenticated-orcid":false,"given":"Rui","family":"Zheng","sequence":"first","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5804-3279","authenticated-orcid":false,"given":"Zhibo","family":"Wang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1969-2591","authenticated-orcid":false,"given":"Kui","family":"Ren","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6198-7481","authenticated-orcid":false,"given":"Chun","family":"Chen","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Malware Statistics & Trends Report","year":"2024"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2347736.2347755"},{"key":"ref3","article-title":"A survey of machine learning methods and challenges for windows malware classification","author":"Raff","year":"2020","journal-title":"arXiv:2006.09271"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243792"},{"key":"ref5","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2020.24310","article-title":"When malware is packin\u2019 heat; limits of machine learning classifiers based on static analysis features","volume-title":"Proc. Netw. Distrib. Syst. Secur. Symp.","author":"Aghakhani"},{"key":"ref6","first-page":"1877","article-title":"Language models are few-shot learners","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Brown"},{"key":"ref7","article-title":"A survey of large language models","author":"Zhao","year":"2023","journal-title":"arXiv:2303.18223"},{"key":"ref8","article-title":"LongRoPE: Extending LLM context window beyond 2 million tokens","author":"Ding","year":"2024","journal-title":"arXiv:2402.13753"},{"key":"ref9","article-title":"Attention is all you need","author":"Vaswani","year":"2017","journal-title":"arXiv:1706.03762"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/dsn.2019.00020"},{"key":"ref11","first-page":"4765","article-title":"A unified approach to interpreting model predictions","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Lundberg"},{"key":"ref12","first-page":"268","article-title":"Malware detection by eating a whole EXE","volume-title":"Proc. Workshops 32nd AAAI Conf. Artif. Intell.","author":"Raff"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2022.109044"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2023.03.132"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616589"},{"key":"ref16","article-title":"Deep convolutional malware classifiers can learn from raw executables and labels only","volume-title":"Proc. 6th Int. Conf. Learn. Represent.","author":"Krc\u00e1l"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i11.17131"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2016904.2016908"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2015.7413680"},{"key":"ref20","first-page":"1145","article-title":"Humans vs. machines in malware classification","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Aonzo"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484759"},{"key":"ref22","article-title":"Prompt engineering-assisted malware dynamic analysis using GPT-4","author":"Yan","year":"2023","journal-title":"arXiv:2312.08317"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SPW67851.2025.00017"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639117"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3649828"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3728887"},{"key":"ref27","article-title":"LLM-based continuous intrusion detection framework for next-gen networks","author":"Adjewa","year":"2024","journal-title":"arXiv:2411.03354"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103999"},{"key":"ref29","volume-title":"Microsoft Security Copilot"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/sp54263.2024.00210"},{"key":"ref31","article-title":"A survey on LLM-as-a-judge","author":"Gu","year":"2024","journal-title":"arXiv:2411.15594"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3605764.3623985"},{"key":"ref33","first-page":"1831","article-title":"Formalizing and benchmarking prompt injection attacks and defenses","volume-title":"Proc. 33rd USENIX Secur. Symp.","author":"Liu"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/11121558.pdf?arnumber=11121558","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,18]],"date-time":"2025-08-18T19:41:55Z","timestamp":1755546115000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11121558\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":33,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3597221","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}