{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,24]],"date-time":"2025-07-24T10:58:26Z","timestamp":1753354706097,"version":"3.37.3"},"reference-count":24,"publisher":"World Scientific Pub Co Pte Ltd","issue":"07","funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62376240"],"award-info":[{"award-number":["62376240"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"S&T Program of Hebei","award":["226Z0701G","236Z0702G","236Z0304G"],"award-info":[{"award-number":["226Z0701G","236Z0702G","236Z0304G"]}]},{"DOI":"10.13039\/501100003787","name":"Natural Science Foundation of Hebei Province","doi-asserted-by":"publisher","award":["F2022203026","F2022203089"],"award-info":[{"award-number":["F2022203026","F2022203089"]}],"id":[{"id":"10.13039\/501100003787","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Science Research Project of Hebei Education Department","award":["BJK2022029"],"award-info":[{"award-number":["BJK2022029"]}]},{"name":"Innovation Capability Improvement Plan Project of Hebei Province","award":["22567637H"],"award-info":[{"award-number":["22567637H"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Int. J. Soft. Eng. Knowl. Eng."],"published-print":{"date-parts":[[2024,7]]},"abstract":"<jats:p> Timely detection of self-replicating malware in the high market share Windows operating system can effectively prevent personal or corporate financial losses. The form and characteristics of malware are constantly evolving, leading to a concept drift issue that gradually decreases the effectiveness of traditional detection methods. Therefore, we propose WinMDet, a Windows malware detection method based on malicious tendency image and ResNet algorithm. First, to tackle the complexity and difficulty in accurately characterizing malware features, WinMDet retains detailed malware features and encodes them into malicious tendency images to better describe malware across different periods. Secondly, WinMDet utilizes previously generated malicious tendency images to train the initial detection model. Then, to alleviate the issue of malware concept drift, WinMDet employs Local Maximum Mean Discrepancy (LMMD) as the criterion for model transfer, enhancing the initial detection model\u2019s ability to distinguish between malware and benign software. We conducted a comprehensive evaluation of WinMDet using common metrics such as accuracy, precision and recall. The results indicate that WinMDet performs remarkably well in terms of accuracy, exceeding 82%. Additionally, significant improvements were observed in precision and recall, surpassing 82.42% and 82.06%, respectively. After employing our LMMD-based transfer method, the initial detection model improved the detection accuracy of malware in 2021 and 2022 by approximately 4.22% to 8.06%. The false negative rate decreased by at most 4.34%, and the false positive rate decreased by at most 4.61%. <\/jats:p>","DOI":"10.1142\/s0218194024500256","type":"journal-article","created":{"date-parts":[[2024,5,15]],"date-time":"2024-05-15T15:25:33Z","timestamp":1715786733000},"page":"1173-1197","source":"Crossref","is-referenced-by-count":1,"title":["Approach to Detect Windows Malware Based on Malicious Tendency Image and ResNet Algorithm"],"prefix":"10.1142","volume":"34","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9867-8439","authenticated-orcid":false,"given":"Bing","family":"Zhang","sequence":"first","affiliation":[{"name":"School of Information Science and Engineering, Yanshan University, Qinhuangdao 066004, Hebei, P. R. China"},{"name":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao 066004, Hebei, P. R. China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7306-7850","authenticated-orcid":false,"given":"Hongchang","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Information Science and Engineering, Yanshan University, Qinhuangdao 066004, Hebei, P. R. China"},{"name":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao 066004, Hebei, P. R. China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-9320-9382","authenticated-orcid":false,"given":"Rong","family":"Ren","sequence":"additional","affiliation":[{"name":"School of Information Science and Engineering, Yanshan University, Qinhuangdao 066004, Hebei, P. R. China"},{"name":"Hebei Port Group Co., Ltd, Tang Shan 063200, Hebei, P. R. China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhen","family":"Wen","sequence":"additional","affiliation":[{"name":"School of Information Science and Engineering, Yanshan University, Qinhuangdao 066004, Hebei, P. R. China"},{"name":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao 066004, Hebei, P. R. China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7159-1424","authenticated-orcid":false,"given":"Qian","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Information Science and Engineering, Yanshan University, Qinhuangdao 066004, Hebei, P. R. China"},{"name":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao 066004, Hebei, P. R. China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"219","published-online":{"date-parts":[[2024,6,28]]},"reference":[{"doi-asserted-by":"publisher","key":"S0218194024500256BIB006","DOI":"10.1109\/ICCISci.2019.8716381"},{"key":"S0218194024500256BIB007","first-page":"555","volume-title":"Emerging Research in Computing, Information, Communication and Applications","author":"Mithal T.","year":"2016"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB008","DOI":"10.1145\/3128572.3140442"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB009","DOI":"10.1016\/j.cose.2022.102961"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB010","DOI":"10.1109\/CTC.2010.8"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB011","DOI":"10.1609\/aaai.v34i01.5474"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB012","DOI":"10.1016\/j.procs.2015.02.149"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB013","DOI":"10.1145\/2381896.2381910"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB014","DOI":"10.1016\/j.cose.2021.102389"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB015","DOI":"10.1016\/j.future.2017.12.037"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB016","DOI":"10.1109\/TDSC.2020.3032570"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB017","DOI":"10.1016\/j.eswa.2014.02.053"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB018","DOI":"10.1007\/s42452-020-3132-2"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB019","DOI":"10.1109\/TKDE.2009.191"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB020","DOI":"10.1109\/TNNLS.2020.2988928"},{"key":"S0218194024500256BIB021","first-page":"625","volume-title":"Proc. 26th USENIX Security Symposium","author":"Jordaney R.","year":"2017"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB022","DOI":"10.1145\/3065386"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB024","DOI":"10.1109\/CVPR.2016.90"},{"key":"S0218194024500256BIB025","first-page":"268","volume-title":"Workshops at the 32nd AAAI Conf. Artificial Intelligence","author":"Raff E.","year":"2018"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB026","DOI":"10.1016\/j.cose.2021.102547"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB027","DOI":"10.1007\/s12652-020-02196-4"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB030","DOI":"10.1145\/3442520.3442522"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB033","DOI":"10.1016\/j.jpdc.2022.10.001"},{"doi-asserted-by":"publisher","key":"S0218194024500256BIB034","DOI":"10.1007\/s11416-019-00346-7"}],"container-title":["International Journal of Software Engineering and Knowledge Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.worldscientific.com\/doi\/pdf\/10.1142\/S0218194024500256","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,30]],"date-time":"2024-07-30T01:58:34Z","timestamp":1722304714000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.worldscientific.com\/doi\/10.1142\/S0218194024500256"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6,28]]},"references-count":24,"journal-issue":{"issue":"07","published-print":{"date-parts":[[2024,7]]}},"alternative-id":["10.1142\/S0218194024500256"],"URL":"https:\/\/doi.org\/10.1142\/s0218194024500256","relation":{},"ISSN":["0218-1940","1793-6403"],"issn-type":[{"type":"print","value":"0218-1940"},{"type":"electronic","value":"1793-6403"}],"subject":[],"published":{"date-parts":[[2024,6,28]]}}}