{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T17:07:15Z","timestamp":1784653635422,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,4,12]],"date-time":"2026-04-12T00:00:00Z","timestamp":1775952000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,12]]},"DOI":"10.1145\/3793655.3793735","type":"proceedings-article","created":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T16:04:46Z","timestamp":1784649886000},"page":"144-154","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["MalCVE: Malware Detection and CVE Association Using Large Language Models"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-6161-8511","authenticated-orcid":false,"given":"Eduard Andrei","family":"Cristea","sequence":"first","affiliation":[{"name":"Norwegian University of Science and Technology, Trondheim, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-0349-1046","authenticated-orcid":false,"given":"Petter","family":"Molnes","sequence":"additional","affiliation":[{"name":"Norwegian University of Science and Technology, Trondheim, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7958-391X","authenticated-orcid":false,"given":"Jingyue","family":"Li","sequence":"additional","affiliation":[{"name":"Norwegian University of Science and Technology, Trondheim, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,7,21]]},"reference":[{"key":"e_1_3_3_2_2_2","unstructured":"[n. d.]. Endpoint Cloud & Identity Protection Products | CrowdStrike. https:\/\/www.crowdstrike.com\/en-us\/pricing\/ [Online; accessed 2025-06-15]."},{"key":"e_1_3_3_2_3_2","unstructured":"[n. d.]. joyce8\/MalDICT: Malware datasets tagged by behavior platform vulnerability and packer. https:\/\/github.com\/joyce8\/MalDICT [Online; accessed 2025-05-27]."},{"key":"e_1_3_3_2_4_2","unstructured":"[n. d.]. lumina. https:\/\/hex-rays.com\/lumina [Online; accessed 2025-05-19]."},{"key":"e_1_3_3_2_5_2","unstructured":"2024. The survey on the dual nature of xAI challenges in intrusion detection and their potential for AI innovation | Artificial Intelligence Review. https:\/\/link.springer.com\/article\/10.1007\/s10462-024-10972-3#citeas [Online; accessed 2025-06-15]."},{"key":"e_1_3_3_2_6_2","unstructured":"2025. FLIRT | Hex-Rays Docs. https:\/\/docs.hex-rays.com\/user-guide\/signatures\/flirt [Online; accessed 2025-05-19]."},{"key":"e_1_3_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4614-8265-9_921"},{"key":"e_1_3_3_2_8_2","unstructured":"Lee Benfield. [n. d.]. leibnitz27\/cfr: This is the public repository for the CFR Java decompiler. https:\/\/github.com\/leibnitz27\/cfr [Online; accessed 2025-05-21]."},{"key":"e_1_3_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOMWKSHPS61880.2024.10620804"},{"key":"e_1_3_3_2_10_2","unstructured":"Xueying Du Geng Zheng Kaixin Wang Jiayi Feng Wentai Deng Mingwei Liu Bihuan Chen Xin Peng Tao Ma and Yiling Lou. 2024. Vul-RAG: Enhancing LLM-based Vulnerability Detection via Knowledge-level RAG. arxiv:https:\/\/arXiv.org\/abs\/2406.11147\u00a0[cs.SE] https:\/\/arxiv.org\/abs\/2406.11147"},{"key":"e_1_3_3_2_11_2","unstructured":"javaparser.org. [n. d.]. JavaParser - Home. https:\/\/javaparser.org\/ [Online; accessed 2025-06-21]."},{"key":"e_1_3_3_2_12_2","unstructured":"Robert\u00a0J. Joyce Edward Raff Charles Nicholas and James Holt. 2023. MalDICT: Benchmark Datasets on Malware Behaviors Platforms Exploitation and Packers. arxiv:https:\/\/arXiv.org\/abs\/2310.11706\u00a0[cs.CR] https:\/\/arxiv.org\/abs\/2310.11706"},{"key":"e_1_3_3_2_13_2","unstructured":"Kaspersky. 2020. Ransomware WannaCry: All you need to know. URL: https:\/\/www.kaspersky.com\/resource-center\/threats\/ransomware-wannacry."},{"key":"e_1_3_3_2_14_2","unstructured":"Kaspersky. 2025. IDA Pro plugin developed at Kaspersky wins 2024 IDA Plugin Contest. https:\/\/www.kaspersky.com\/about\/press-releases\/ida-pro-plugin-developed-at-kaspersky-wins-2024-ida-plugin-contest [Online; accessed 2025-05-19]."},{"key":"e_1_3_3_2_15_2","unstructured":"Patrick Lewis Ethan Perez Aleksandra Piktus Fabio Petroni Vladimir Karpukhin Naman Goyal Heinrich K\u00fcttler Mike Lewis Wen tau Yih Tim Rockt\u00e4schel Sebastian Riedel and Douwe Kiela. 2021. Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks. arxiv:https:\/\/arXiv.org\/abs\/2005.11401\u00a0[cs.CL] https:\/\/arxiv.org\/abs\/2005.11401"},{"key":"e_1_3_3_2_16_2","unstructured":"Rick Merritt. 2025. What Is Retrieval-Augmented Generation aka RAG | NVIDIA Blogs. https:\/\/blogs.nvidia.com\/blog\/what-is-retrieval-augmented-generation\/ [Online; accessed 2025-03-27]."},{"key":"e_1_3_3_2_17_2","unstructured":"Milvus. [n. d.]. Basic Vector Search | Milvus Documentation. https:\/\/milvus.io\/docs\/single-vector-search.md#overview [Online; accessed 2025-06-03]."},{"key":"e_1_3_3_2_18_2","volume-title":"Ransomware Report 2025 \u2013 Critical Insights for Business Leaders","author":"Morgan Steve","year":"2025","unstructured":"Steve Morgan. 2025. Ransomware Report 2025 \u2013 Critical Insights for Business Leaders. Technical Report. Cybersecurity Ventures; hosted on Elastio. [Online]. Available: https:\/\/elastio.com\/2025-ransomware-report-announcement."},{"key":"e_1_3_3_2_19_2","unstructured":"NIST. 2012. NVD - CVE-2012-1723. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2012-1723 [Online; accessed 2025-06-13]."},{"key":"e_1_3_3_2_20_2","unstructured":"NIST. 2012. NVD - cve-2012-4681. https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2012-4681 [Online; accessed 2025-06-01]."},{"key":"e_1_3_3_2_21_2","unstructured":"Bernardo Quintero. 2024. From Assistant to Analyst: The Power of Gemini 1.5 Pro for Malware Analysis | Google Cloud Blog. [Online; accessed 2025-05-21] https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/gemini-for-malware-analysis."},{"key":"e_1_3_3_2_22_2","unstructured":"Bernardo Quintero Alex Berry Ilfak Guilfanov and Vijay Bolina. 2024. Scaling Up Malware Analysis with Gemini 1.5 Flash | Google Cloud Blog. https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/scaling-up-malware-analysis-with-gemini [Online; accessed 2025-05-22]."},{"key":"e_1_3_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1109\/SMC52423.2021.9659287"},{"key":"e_1_3_3_2_24_2","unstructured":"Mike Strobel. [n. d.]. Java Decompiler \u00b7 mstrobel\/procyon Wiki. https:\/\/github.com\/mstrobel\/procyon\/wiki\/Java-Decompiler [Online; accessed 2025-05-21]."},{"key":"e_1_3_3_2_25_2","unstructured":"vendr.com. [n. d.]. VirusTotal Software Pricing & Plans 2025: See Your Cost. https:\/\/www.vendr.com\/marketplace\/virustotal [Online; accessed 2025-05-19]."},{"key":"e_1_3_3_2_26_2","unstructured":"Brandon\u00a0J Walton Mst\u00a0Eshita Khatun James\u00a0M Ghawaly and Aisha Ali-Gombe. 2025. Exploring Large Language Models for Semantic Analysis and Categorization of Android Malware. arxiv:https:\/\/arXiv.org\/abs\/2501.04848\u00a0[cs.CR] https:\/\/arxiv.org\/abs\/2501.04848"},{"key":"e_1_3_3_2_27_2","doi-asserted-by":"publisher","unstructured":"Wenbo\u00a0Zhang Xiang\u00a0Li Tingting\u00a0Zhu. 2023. (PDF) Efficient Ransomware Detection via Portable Executable File Image Analysis By LLaMA-7b. 10.21203\/rs.3.rs-3679775\/v1[Online; accessed 2025-02-03].","DOI":"10.21203\/rs.3.rs-3679775\/v1"},{"key":"e_1_3_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1145\/3605801.3606036"},{"key":"e_1_3_3_2_29_2","unstructured":"Xin Zhou Sicong Cao Xiaobing Sun and David Lo. 2024. Large Language Model for Vulnerability Detection and Repair: Literature Review and the Road Ahead. arxiv:https:\/\/arXiv.org\/abs\/2404.02525\u00a0[cs.SE] https:\/\/arxiv.org\/abs\/2404.02525"}],"event":{"name":"FORGE '26: IEEE\/ACM Third International Conference on AI Foundation Models and Software Engineering","location":"Rio de Janeiro , Brazil","acronym":"FORGE '26","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the 2026 IEEE\/ACM Third International Conference on AI Foundation Models and Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3793655.3793735","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T16:49:24Z","timestamp":1784652564000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3793655.3793735"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,12]]},"references-count":28,"alternative-id":["10.1145\/3793655.3793735","10.1145\/3793655"],"URL":"https:\/\/doi.org\/10.1145\/3793655.3793735","relation":{},"subject":[],"published":{"date-parts":[[2026,4,12]]},"assertion":[{"value":"2026-07-21","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}