{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,8]],"date-time":"2026-03-08T16:21:14Z","timestamp":1772986874826,"version":"3.50.1"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2025,2,1]],"date-time":"2025-02-01T00:00:00Z","timestamp":1738368000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2025,2]]},"DOI":"10.1109\/tse.2025.3531210","type":"journal-article","created":{"date-parts":[[2025,1,20]],"date-time":"2025-01-20T18:49:38Z","timestamp":1737398978000},"page":"621-637","source":"Crossref","is-referenced-by-count":3,"title":["Mecha: A Neural-Symbolic Open-Set Homogeneous Decision Fusion Approach for Zero-Day Malware Similarity Detection"],"prefix":"10.1109","volume":"51","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2950-7158","authenticated-orcid":false,"given":"Christopher","family":"Molloy","sequence":"first","affiliation":[{"name":"School of Computing, Queen’s University, Kingston, ON, Canada"}]},{"given":"Jeremy","family":"Banks","sequence":"additional","affiliation":[{"name":"School of Computing, Queen’s University, Kingston, ON, Canada"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4513-200X","authenticated-orcid":false,"given":"Steven H. H.","family":"Ding","sequence":"additional","affiliation":[{"name":"School of Computing, Queen’s University, Kingston, ON, Canada"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5709-7611","authenticated-orcid":false,"given":"Furkan","family":"Alaca","sequence":"additional","affiliation":[{"name":"School of Computing, Queen’s University, Kingston, ON, Canada"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4051-9942","authenticated-orcid":false,"given":"Philippe","family":"Charland","sequence":"additional","affiliation":[{"name":"Mission Critical Cyber Security Section, Defence R&D Canada - Valcartier, Quebec, QC, Canada"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1103-2465","authenticated-orcid":false,"given":"Andrew","family":"Walenstein","sequence":"additional","affiliation":[{"name":"Security Research and Development, BlackBerry, Waterloo, ON, Canada"}]}],"member":"263","reference":[{"key":"ref1","first-page":"744","article-title":"Survey on malware evasion techniques: State of the art and challenges","volume-title":"Proc. 14th Int. Conf. Adv. Commun. Technol. (ICACT)","author":"Marpaung","year":"2012"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2021.3067061"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3162625"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.11.001"},{"key":"ref5","first-page":"2005","article-title":"Symantec internet security threat report: Trends for july 2004-december 2004","volume":"30","author":"Turner","year":"2005"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/iccnc.2016.7440587"},{"key":"ref7","article-title":"A few-shot meta-learning based siamese neural network using entropy features for ransomware classification","volume-title":"Comput. Secur.","volume":"117","author":"Zhu","year":"2022"},{"issue":"21","key":"ref8","article-title":"Similarity-based malware classification using graph neural networks","volume-title":"Appl. Sci.","volume":"12","author":"Chen","year":"2022"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICASID.2009.5276989"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/1852666.1852716"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/icassp.2013.6638293"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1835804.1835820"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM54844.2022.00143"},{"key":"ref14","first-page":"1863","article-title":"Malware image classification using one-shot learning with siamese networks","volume":"159","author":"Hsiao","year":"2019"},{"key":"ref15","article-title":"A few-shot malware classification approach for unknown family recognition using malware feature visualization","volume":"122","author":"Conti","year":"2022"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2006.06.015"},{"key":"ref17","article-title":"Combing through the fuzz: Using fuzzy hashing and deep learning to counter malware detection evasion techniques","author":"Lazo","year":"2021"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2021.301220"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CSR54599.2022.9850345"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/spw.2019.00015"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2889473"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3105556"},{"key":"ref23","first-page":"815","article-title":"FaceNet: A unified embedding for face recognition and clustering","volume-title":"IEEE Conf. Comput. Vis. Pattern Recognit.","author":"Schroff","year":"2015"},{"key":"ref24","article-title":"Malware detection by eating a whole EXE","author":"Raff","year":"2017"},{"key":"ref25","article-title":"ADAM: A method for stochastic optimization","author":"Kingma","year":"2014"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/79.543975"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1038\/35022643"},{"key":"ref28","article-title":"Navigability of complex networks","author":"Bogu\u00f1\u00e1","year":"2007"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.is.2013.10.006"},{"key":"ref30","article-title":"MalwareBazaar"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1504\/ijapr.2016.079050"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1006\/jcss.1997.1504"},{"key":"ref33","volume-title":"Classification and Regression Trees","author":"Breiman","year":"1984"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.29172\/7c2a6982-6d72-4cd8-bba6-2fccb06a7011"},{"key":"ref35","article-title":"Deep convolutional malware classifiers can learn from raw executables and labels only","author":"Kr\u010d\u00e1l"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3423096"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3446905"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3442588"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3371924"},{"key":"ref40","article-title":"The rise of machine learning for detection and classification of malware:","volume-title":"developments, trends and challenges","volume":"153","author":"Gibert","year":"2020"},{"key":"ref41","article-title":"Siamese neural networks for one-shot image recognition","author":"Koch"},{"key":"ref42","first-page":"737","article-title":"Signature verification using a \u201csiamese\u201d time delay neural network","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"6","author":"Bromley","year":"1993"},{"issue":"2","key":"ref43","first-page":"42","article-title":"Image based malware classification with multimodal deep learning","volume":"10","author":"Demirezen","year":"2021"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3605775"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2011.6107902"},{"key":"ref46","article-title":"The Internet of Things - How the next evolution of the internet is changing everything","author":"Evans","year":"2021"},{"key":"ref47","article-title":"NERO: Neural algorithmic reasoning for zero-day attack detection in the IoT: A hybrid approach","volume-title":"Comput. & Secur.","volume":"142","author":"M.","year":"2024"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/32\/10885779\/10847580.pdf?arnumber=10847580","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,19]],"date-time":"2025-02-19T18:45:40Z","timestamp":1739990740000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10847580\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2]]},"references-count":47,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tse.2025.3531210","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,2]]}}}