{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T21:52:11Z","timestamp":1781301131553,"version":"3.54.1"},"reference-count":101,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2025,4,22]],"date-time":"2025-04-22T00:00:00Z","timestamp":1745280000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,4,22]],"date-time":"2025-04-22T00:00:00Z","timestamp":1745280000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100001809","name":"the National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["61806219"],"award-info":[{"award-number":["61806219"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Big Data"],"abstract":"<jats:title>Abstract<\/jats:title>\n          <jats:p>The defense of malware remains an important research hotspot in the field of cyberspace security. Recognizing its profound research significance, our defense against malware is still an important research hotspot in the field of cyberspace security. According to several recent surveys, global infrastructure is increasingly attacked by cyber crimes, and the damage of various malicious attacks to countries and even individuals cannot be underestimated, even on the rise. There is an urgent need to adopt advanced tools for early detection of malware and its variants to help researchers take early steps to defend against it. Its broad approach will help the early malware to detect and identify the behavioral patterns of large amounts of malicious data, and the discipline of artificial intelligence offers broad research potential. The results of these tests will help researchers make decisions and early detection, effectively defense against malware. This work compares and reports a classification of malware detection work based on deep learning algorithms.<\/jats:p>\n          <jats:p>The 2011\u20132025 articles were considered, and the latest work focused on the literature for the 2018\u20132025 years; after screening, 72 articles were selected for the initial study. Future researchers will benefit from this review by better understanding current deep learning models in the field of malware detection. The review includes common methods such as convolutional neural networks, recurrent neural networks and generative adversarial networks, focusing on feature extraction techniques such as sequence features, image visualization and data enhancement. The survey summarizes the metrics used to report the accuracy. In addition, it highlights prominent publishers, journals and conferences as platforms for the evaluation of academic works. Taken together, this will help researchers at the current stage gain insight into the unresolved challenges or barriers faced by previous researchers. Among these, the most common problem is the lack of broader and consistent datasets, followed by the need for existing models for further improvement.<\/jats:p>","DOI":"10.1186\/s40537-025-01157-y","type":"journal-article","created":{"date-parts":[[2025,4,22]],"date-time":"2025-04-22T11:50:18Z","timestamp":1745322618000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":49,"title":["Application of deep learning in malware detection: a review"],"prefix":"10.1186","volume":"12","author":[{"given":"Yafei","family":"Song","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dandan","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jian","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanan","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peng","family":"Ding","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,4,22]]},"reference":[{"key":"1157_CR1","doi-asserted-by":"crossref","unstructured":"SU J W, VASCONCELLOS D V, PRASAD S, et al. 2018 Lightweight classification of IoT malware based on image recognition[C]\/\/HIRONORI K. 2018 IEEE 42nd annual computer software and applications conference(COMPSAC). Piscataway: IEEE, 664\u20139.","DOI":"10.1109\/COMPSAC.2018.10315"},{"issue":"5","key":"1157_CR2","first-page":"1938","volume":"8","author":"S Mohurle","year":"2017","unstructured":"Mohurle S, Patil M. A brief study of wannacry threat: ransomware attack 2017. Int J Adv Res Comput Sci. 2017;8(5):1938\u201340.","journal-title":"Int J Adv Res Comput Sci"},{"key":"1157_CR3","first-page":"84","volume":"1","author":"K Shaukat","year":"2017","unstructured":"Shaukat K, Rubab A, Shehzadi I, et al. A socio-technological analysis of cyber crime and cyber security in Pakistan. Transylv Rev. 2017;1:84.","journal-title":"Transylv Rev"},{"key":"1157_CR4","doi-asserted-by":"crossref","unstructured":"Shaukat K, Alam T M, Hameed I A, et al. A review on security challenges in internet of things (IoT)[C]\/\/2021 26th international conference on automation and computing (ICAC). IEEE, 2021: 1\u20136.","DOI":"10.23919\/ICAC50006.2021.9594183"},{"issue":"8","key":"1157_CR5","doi-asserted-by":"publisher","first-page":"4117","DOI":"10.3390\/s23084117","volume":"23","author":"U Tariq","year":"2023","unstructured":"Tariq U, Ahmed I, Bashir AK, et al. A critical cybersecurity analysis and future research directions for the internet of things: a comprehensive review. Sensors. 2023;23(8):4117.","journal-title":"Sensors"},{"key":"1157_CR6","unstructured":"Kaspersky. IT threat evolution Q3 2023[R\/OL]. (2023\u201312\u201301)[2024\u201305\u201311]. https:\/\/securelist.com\/ksb-2023-statistics\/111156\/."},{"issue":"4","key":"1157_CR7","first-page":"30","volume":"5","author":"B Ma","year":"2020","unstructured":"Ma B, Zhang Z, Chen Y, Wu JX. The defense method for code-injection attacks based on instruction set randomization. J Cyber secur. 2020;5(4):30\u201343.","journal-title":"J Cyber secur"},{"issue":"5","key":"1157_CR8","first-page":"1179","volume":"29","author":"SHAO Sihao","year":"2018","unstructured":"Sihao SHAO, Qing GAO, Sen MA, et al. Progress in research on buffer overflow vulnerability analysis technologies. J Softw. 2018;29(5):1179\u201398.","journal-title":"J Softw"},{"issue":"1","key":"1157_CR9","first-page":"180","volume":"32","author":"LIU Qiang","year":"2006","unstructured":"Qiang LIU, Yapin DENG, Zheng XU, et al. Research on hidden trojan horse detection technology. Comput Eng. 2006;32(1):180\u20132.","journal-title":"Comput Eng"},{"issue":"10","key":"1157_CR10","first-page":"2429","volume":"48","author":"F Xiao-Meng","year":"2022","unstructured":"Xiao-Meng F, Qiu-Ye S, Bing-Yu W, Jia-Wen G. The coordinated cyber physical power attack strategy based on worm propagation and false data injection. Acta Automatica Sinica. 2022;48(10):2429\u201341.","journal-title":"Acta Automatica Sinica"},{"issue":"4","key":"1157_CR11","first-page":"230","volume":"9","author":"B Yadav","year":"2021","unstructured":"Yadav B, Tokekar S. Recent innovations and comparison of deep learning techniques in malware classification: a review. Int J Inf Secur Sci. 2021;9(4):230\u201347.","journal-title":"Int J Inf Secur Sci"},{"key":"1157_CR12","doi-asserted-by":"crossref","unstructured":"Shaukat K, Alam T M, Luo S, et al. 2021 A review of time-series anomaly detection techniques: a step to future perspectives[C]\/\/Advances in Information and Communication: proceedings of the 2021 future of information and communication conference (FICC), Volume 1. Springer International Publishing, 865\u201377.","DOI":"10.1007\/978-3-030-73100-7_60"},{"key":"1157_CR13","doi-asserted-by":"crossref","unstructured":"Sung A H, Xu J, Chavez P, et al. 2004 Static analyzer of vicious executables (save)[C]\/\/20th annual computer security applications conference. IEEE, 326\u201334.","DOI":"10.1109\/CSAC.2004.37"},{"key":"1157_CR14","doi-asserted-by":"crossref","unstructured":"Nataraj L, Karthikeyan S, Jacob G, et al. 2011 Malware images: visualization and automatic classification[C]\/\/Proceedings of the 8th international symposium on visualization for cyber security. 1\u20137.","DOI":"10.1145\/2016904.2016908"},{"key":"1157_CR15","first-page":"100130","volume":"12","author":"SK Smmarwar","year":"2024","unstructured":"Smmarwar SK, Gupta GP, Kumar S. Android malware detection and identification frameworks by leveraging the machine and deep learning techniques: a comprehensive review. Telemat Inf Rep. 2024;12:100130.","journal-title":"Telemat Inf Rep"},{"issue":"10","key":"1157_CR16","doi-asserted-by":"publisher","first-page":"2509","DOI":"10.3390\/en13102509","volume":"13","author":"K Shaukat","year":"2020","unstructured":"Shaukat K, Luo S, Varadharajan V, et al. Performance comparison and current challenges of using machine learning techniques in cybersecurity. Energies. 2020;13(10):2509.","journal-title":"Energies"},{"key":"1157_CR17","doi-asserted-by":"publisher","first-page":"222310","DOI":"10.1109\/ACCESS.2020.3041951","volume":"8","author":"K Shaukat","year":"2020","unstructured":"Shaukat K, Luo S, Varadharajan V, et al. A survey on machine learning techniques for cyber security in the last decade. IEEE Access. 2020;8:222310\u201354.","journal-title":"IEEE Access"},{"key":"1157_CR18","doi-asserted-by":"crossref","unstructured":"Smmarwar S K, Gupta G P, Kumar S. 2022 A study on data sharing using blockchain system and its challenges and applications. Advances in malware and data-driven network security, 199\u2013218.","DOI":"10.4018\/978-1-7998-7789-9.ch011"},{"key":"1157_CR19","doi-asserted-by":"crossref","unstructured":"Smmarwar S K, Gupta G P, Kumar S. 2022 Research trends for malware and intrusion detection on network systems: a topic modelling approach. Advances in malware and data-driven network security, 19\u201340.","DOI":"10.4018\/978-1-7998-7789-9.ch002"},{"key":"1157_CR20","unstructured":"Beelmann A. 2006 Review of systematic reviews in the social sciences. A practical guide."},{"key":"1157_CR21","first-page":"212","volume":"36","author":"P Shen","year":"2022","unstructured":"Shen P, Liu F, Sang H. Research on malicious code detection. J Chongqing University of Technol (Natural Science). 2022;36:212\u20138.","journal-title":"J Chongqing University of Technol (Natural Science)."},{"issue":"12","key":"1157_CR22","first-page":"2628","volume":"43","author":"WANG Zhi-wen","year":"2022","unstructured":"Zhi-wen WANG, Guang-qi LIU, Xiao-hui HAN, Wen-bo ZUO, Xiao-ming WU, Lian-hai WANG. Survey on machine-learning-based malware identification research. J Chinese Comput Syst. 2022;43(12):2628\u201337.","journal-title":"J Chinese Comput Syst"},{"issue":"13","key":"1157_CR23","first-page":"79","volume":"19","author":"G Qinyi","year":"2023","unstructured":"Qinyi G. Review of research on malicious code detection technologies. Comput Knowl Technol. 2023;19(13):79\u201381+93.","journal-title":"Comput Knowl Technol"},{"issue":"05","key":"1157_CR24","first-page":"9","volume":"21","author":"Ll Hao","year":"2022","unstructured":"Hao Ll, Li-ping QlAN. Overview of research on malicious code visualization detection technology. Softw Guide. 2022;21(05):9\u201316.","journal-title":"Softw Guide"},{"issue":"05","key":"1157_CR25","first-page":"1","volume":"9","author":"WANG Jinwei","year":"2023","unstructured":"Jinwei WANG, Zhengjia CHEN, Xue XIE. Review of malware detection and classification visualization techniques. Chin J Netw Inf Secur. 2023;9(05):1\u201320.","journal-title":"Chin J Netw Inf Secur"},{"key":"1157_CR26","doi-asserted-by":"publisher","first-page":"100529","DOI":"10.1016\/j.cosrev.2022.100529","volume":"47","author":"M Gopinath","year":"2023","unstructured":"Gopinath M, Sethuraman SC. A comprehensive survey on deep learning based malware detection techniques. Comput Sci Rev. 2023;47:100529.","journal-title":"Comput Sci Rev"},{"key":"1157_CR27","doi-asserted-by":"publisher","first-page":"109032","DOI":"10.1016\/j.comnet.2022.109032","volume":"212","author":"M Macas","year":"2022","unstructured":"Macas M, Wu C, Fuertes W. A survey on deep learning for cybersecurity: progress, challenges, and opportunities. Comput Netw. 2022;212:109032.","journal-title":"Comput Netw"},{"key":"1157_CR28","doi-asserted-by":"publisher","first-page":"107801","DOI":"10.1016\/j.engappai.2023.107801","volume":"131","author":"K Shaukat","year":"2024","unstructured":"Shaukat K, Luo S, Varadharajan V. A novel machine learning approach for detecting first-time-appeared malware. Eng Appl Artif Intell. 2024;131:107801.","journal-title":"Eng Appl Artif Intell"},{"key":"1157_CR29","doi-asserted-by":"publisher","first-page":"106030","DOI":"10.1016\/j.engappai.2023.106030","volume":"122","author":"K Shaukat","year":"2023","unstructured":"Shaukat K, Luo S, Varadharajan V. A novel deep learning-based approach for malware detection. Eng Appl Artif Intell. 2023;122:106030.","journal-title":"Eng Appl Artif Intell"},{"key":"1157_CR30","unstructured":"Zhang Weikang. 2018 Research on static detection technology based on malicious code API. Xidian University."},{"key":"1157_CR31","doi-asserted-by":"crossref","unstructured":"Coull S E, Gardner C. 2019 Activation analysis of a byte-based deep neural network for malware classification[C]\/\/2019 IEEE security and privacy workshops (SPW) , San Francisco, CA, USA, 21-7","DOI":"10.1109\/SPW.2019.00017"},{"issue":"2","key":"1157_CR32","doi-asserted-by":"publisher","first-page":"252","DOI":"10.1016\/j.jksuci.2017.01.003","volume":"31","author":"A Kumar","year":"2019","unstructured":"Kumar A, Kuppusamy KS, Aghila G. A learning model to detect maliciousness of portable executable using integrated feature set. J King Saud University-Comput Inf Sci. 2019;31(2):252\u201365.","journal-title":"J King Saud University-Comput Inf Sci"},{"issue":"5","key":"1157_CR33","doi-asserted-by":"publisher","first-page":"8977","DOI":"10.1109\/JIOT.2019.2925929","volume":"6","author":"H Alasmary","year":"2019","unstructured":"Alasmary H, Khormali A, Anwar A, et al. Analyzing and detecting emerging internet of things malware: a graph-based approach. IEEE Internet Things J. 2019;6(5):8977\u201388.","journal-title":"IEEE Internet Things J"},{"key":"1157_CR34","doi-asserted-by":"publisher","first-page":"230","DOI":"10.1016\/j.future.2019.11.034","volume":"105","author":"R Taheri","year":"2020","unstructured":"Taheri R, Ghahramani M, Javidan R, et al. Similarity-based android malware detection using hamming distance of static binary features. Futur Gener Comput Syst. 2020;105:230\u201347.","journal-title":"Futur Gener Comput Syst"},{"key":"1157_CR35","doi-asserted-by":"crossref","unstructured":"Rezaei T, Hamze A. 2020 An efficient approach for malware detection using PE header specifications[C]\/\/2020 6th International conference on web research (ICWR). IEEE, 234\u2013239.","DOI":"10.1109\/ICWR49608.2020.9122312"},{"key":"1157_CR36","doi-asserted-by":"crossref","unstructured":"Mohaisen A, Alrawi O, Park J, et al. 2019 Network-based analysis and classification of malware using behavioral artifacts ordering. arXiv preprint arXiv:1901.01185.","DOI":"10.4108\/eai.13-7-2018.156002"},{"key":"1157_CR37","doi-asserted-by":"publisher","first-page":"101760","DOI":"10.1016\/j.cose.2020.101760","volume":"92","author":"E Amer","year":"2020","unstructured":"Amer E, Zelinka I. A dynamic Windows malware detection and prediction method based on contextual understanding of API call sequence. Comput Secur. 2020;92:101760.","journal-title":"Comput Secur"},{"key":"1157_CR38","unstructured":"Anderson B, McGrew D. 2020 Accurate TLS fingerprinting using destination context and knowledge bases. arXiv preprint arXiv:2009.01939."},{"issue":"12","key":"1157_CR39","first-page":"38","volume":"21","author":"LI Pengchao","year":"2021","unstructured":"Pengchao LI, Yanfei LIU. Research on forensics technology of malicious code based on deleted PE file header. Netinfo Secur. 2021;21(12):38\u201343.","journal-title":"Netinfo Secur"},{"key":"1157_CR40","doi-asserted-by":"crossref","unstructured":"Bridges R, Jim\u00e9nez J H, Nichols J, et al. 2018 Towards malware detection via cpu power consumption: data collection design and analytics[C]\/\/2018 17th IEEE International conference on trust, security and privacy in computing and communications\/12th IEEE International conference on big data science and engineering (TrustCom\/BigDataSE). IEEE, 1680\u20134.","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00250"},{"key":"1157_CR41","doi-asserted-by":"crossref","unstructured":"Sayadi H, Patel N, Sasan A, et al. 2018 Ensemble learning for effective run-time hardware-based malware detection: a comprehensive analysis and classification[C]\/\/Proceedings of the 55th annual design automation conference. 1\u20136.","DOI":"10.1145\/3195970.3196047"},{"key":"1157_CR42","unstructured":"Pan Fei. 2019 Research on authentication and malicious node detection based on physical features. University of Electronic Science and Technology of China."},{"issue":"1","key":"1157_CR43","first-page":"106","volume":"19","author":"DAI Chao","year":"2018","unstructured":"Chao DAI, Jian-ming PANG, Yi-chi ZHANG, et al. Survey on malware detection based on semantic features. J Inf Eng University. 2018;19(1):106\u201313.","journal-title":"J Inf Eng University"},{"issue":"2","key":"1157_CR44","doi-asserted-by":"publisher","first-page":"286","DOI":"10.12263\/DZXB.20180711","volume":"49","author":"LIANG Guang-hui","year":"2021","unstructured":"Guang-hui LIANG, Liang BAI, Jian-min PANG, Zheng SHAN, Feng YUE, Lei ZHANG. A malware detection method based on hybrid learning. Acta Electonica Sinica. 2021;49(2):286\u201391. https:\/\/doi.org\/10.12263\/DZXB.20180711.","journal-title":"Acta Electonica Sinica"},{"issue":"9","key":"1157_CR45","doi-asserted-by":"publisher","first-page":"e0273804","DOI":"10.1371\/journal.pone.0273804","volume":"17","author":"Y Liu","year":"2022","unstructured":"Liu Y, Yang P, Jia P, et al. MalFuzz: coverage-guided fuzzing on deep learning-based malware classification model. PLoS ONE. 2022;17(9):e0273804.","journal-title":"PLoS ONE"},{"key":"1157_CR46","doi-asserted-by":"crossref","unstructured":"Naik N, Jenkins P, Savage N, et al. 2020 Fuzzy-import hashing: a malware analysis approach[C]\/\/2020 IEEE International conference on fuzzy systems (FUZZ-IEEE). IEEE, 1\u20138.","DOI":"10.1109\/FUZZ48607.2020.9177636"},{"issue":"2","key":"1157_CR47","first-page":"9","volume":"20","author":"S Kim","year":"2019","unstructured":"Kim S, Lee S. Automatic malware detection rule generation and verification system. J Internet Comput Services. 2019;20(2):9\u201319.","journal-title":"J Internet Comput Services"},{"key":"1157_CR48","doi-asserted-by":"crossref","unstructured":"Shaukat K, Luo S, Chen S, et al. Cyber threat detection using machine learning techniques: a performance evaluation perspective[C]\/\/2020 international conference on cyber warfare and security (ICCWS). IEEE, 2020: 1\u20136.","DOI":"10.1109\/ICCWS48432.2020.9292388"},{"issue":"11","key":"1157_CR49","doi-asserted-by":"publisher","first-page":"e3789","DOI":"10.1002\/ett.3789","volume":"31","author":"DL Vu","year":"2020","unstructured":"Vu DL, Nguyen TK, Nguyen TV, et al. HIT4Mal: hybrid image transformation for malware classification. Trans Emerg Telecom Technol. 2020;31(11):e3789.","journal-title":"Trans Emerg Telecom Technol"},{"key":"1157_CR50","doi-asserted-by":"publisher","first-page":"100059","DOI":"10.1016\/j.iot.2019.100059","volume":"7","author":"M Hasan","year":"2019","unstructured":"Hasan M, Islam MM, Zarif MII, et al. Attack and anomaly detection in IoT sensors in IoT sites using machine learning approaches. Internet of Things. 2019;7:100059.","journal-title":"Internet of Things"},{"key":"1157_CR51","doi-asserted-by":"publisher","first-page":"101748","DOI":"10.1016\/j.cose.2020.101748","volume":"92","author":"D Vasan","year":"2020","unstructured":"Vasan D, Alazab M, Wassan S, et al. Image-based malware classification using ensemble of CNN architectures (IMCEC). Comput Secur. 2020;92:101748.","journal-title":"Comput Secur"},{"key":"1157_CR52","doi-asserted-by":"publisher","first-page":"229","DOI":"10.1007\/s11416-020-00354-y","volume":"16","author":"M Jain","year":"2020","unstructured":"Jain M, Andreopoulos W, Stamp M. Convolutional neural networks and extreme learning machines for malware classification. J Comput Virology and Hacking Tech. 2020;16:229\u201344.","journal-title":"J Comput Virology and Hacking Tech"},{"key":"1157_CR53","doi-asserted-by":"publisher","first-page":"102852","DOI":"10.1016\/j.seta.2022.102852","volume":"54","author":"SK Smmarwar","year":"2022","unstructured":"Smmarwar SK, Gupta GP, Kumar S, et al. An optimized and efficient android malware detection framework for future sustainable computing. Sustainable Energy Technol Assess. 2022;54:102852.","journal-title":"Sustainable Energy Technol Assess"},{"key":"1157_CR54","doi-asserted-by":"crossref","unstructured":"Smmarwar S K, Gupta G P, Kumar S. 2022 A hybrid feature selection approach-based android malware detection framework using machine learning techniques[M]\/\/Cyber security, privacy and networking: proceedings of ICSPN 2021. Singapore: Springer Nature Singapore; p. 347\u201356.","DOI":"10.1007\/978-981-16-8664-1_30"},{"issue":"1","key":"1157_CR55","first-page":"40","volume":"6","author":"LIU Yue","year":"2021","unstructured":"Yue LIU, Baoxu LIU, Zihao ZHAO, Chaoge LIU, Xiaoxi WANG, Xianda WU. Powershell malware detection method based on features combination. J Cyber Secur. 2021;6(1):40\u201353.","journal-title":"J Cyber Secur"},{"key":"1157_CR56","doi-asserted-by":"crossref","unstructured":"Kalash M, Rochan M, Mohammed N, et al. 2018 Malware classification with deep convolutional neural networks[C]\/\/2018 9th IFIP international conference on new technologies, mobility and security (NTMS). IEEE, 1\u20135.","DOI":"10.1109\/NTMS.2018.8328749"},{"issue":"1","key":"1157_CR57","doi-asserted-by":"publisher","first-page":"332","DOI":"10.1002\/int.22302","volume":"36","author":"Q Xiang","year":"2021","unstructured":"Xiang Q, Wang XD, Song YF, et al. One-dimensional convolutional neural networks for high-resolution range profile recognition via adaptively feature recalibrating and automatically channel pruning. Int J Intell Syst. 2021;36(1):332\u201361.","journal-title":"Int J Intell Syst"},{"issue":"12","key":"1157_CR58","doi-asserted-by":"publisher","first-page":"1997","DOI":"10.1049\/rsn2.12312","volume":"16","author":"Q Xiang","year":"2022","unstructured":"Xiang Q, Wang XD, Lai J, et al. Multi-scale group-fusion convolutional neural network for high-resolution range profile target recognition. IET Radar Sonar Navig. 2022;16(12):1997\u20132016.","journal-title":"IET Radar Sonar Navig"},{"issue":"1","key":"1157_CR59","first-page":"050","volume":"5","author":"K Shaukat","year":"2020","unstructured":"Shaukat K, Iqbal F, Alam TM, et al. The impact of artificial intelligence and robotics on the future employment opportunities. Trends Comput Sci Inf Technol. 2020;5(1):050\u20134.","journal-title":"Trends Comput Sci Inf Technol"},{"key":"1157_CR60","doi-asserted-by":"crossref","unstructured":"Kornish D, Geary J, Sansing V, et al. 2018 Malware classification using deep convolutional neural networks[C]\/\/2018 IEEE Applied imagery pattern recognition workshop (AIPR). IEEE, 1\u20136.","DOI":"10.1109\/AIPR.2018.8707429"},{"key":"1157_CR61","doi-asserted-by":"publisher","first-page":"871","DOI":"10.1016\/j.cose.2018.04.005","volume":"77","author":"S Ni","year":"2018","unstructured":"Ni S, Qian Q, Zhang R. Malware identification using visualization images and deep learning. Comput Secur. 2018;77:871\u201385.","journal-title":"Comput Secur"},{"issue":"06","key":"1157_CR62","first-page":"1","volume":"41","author":"S Gaoning","year":"2022","unstructured":"Gaoning S, Zhixiang C, Hui W, Heng C. A family detection method for malicious code based onsqueezed-and-excitation networks. Cyber Secur Data Gov. 2022;41(06):1\u20139.","journal-title":"Cyber Secur Data Gov"},{"issue":"5","key":"1157_CR63","first-page":"1534","volume":"39","author":"C Kun","year":"2022","unstructured":"Kun C, Liang W, Dan Ma, et al. Research on application of depthwise separable convolution in android malware classification. Application Res Comput. 2022;39(5):1534\u201340.","journal-title":"Application Res Comput"},{"key":"1157_CR64","doi-asserted-by":"crossref","unstructured":"Singh A, Handa A, Kumar N, et al. 2019 Malware classification using image representation[C]\/\/Cyber security cryptography and machine learning: third international symposium, CSCML 2019, Beer-Sheva, Israel, June 27\u201328, 2019, Proceedings 3. Springer International Publishing, 75\u201392.","DOI":"10.1007\/978-3-030-20951-3_6"},{"issue":"4","key":"1157_CR65","doi-asserted-by":"publisher","first-page":"2609","DOI":"10.1007\/s11277-019-06540-6","volume":"108","author":"H Naeem","year":"2019","unstructured":"Naeem H. Detection of malicious activities in internet of things environment based on binary visualization and machine intelligence. Wirel Pers Commun. 2019;108(4):2609\u201329.","journal-title":"Wirel Pers Commun"},{"key":"1157_CR66","doi-asserted-by":"publisher","first-page":"102154","DOI":"10.1016\/j.adhoc.2020.102154","volume":"105","author":"H Naeem","year":"2020","unstructured":"Naeem H, Ullah F, Naeem MR, et al. Malware detection in industrial internet of things based on hybrid image visualization and deep learning model. Ad Hoc Netw. 2020;105:102154.","journal-title":"Ad Hoc Netw"},{"issue":"4","key":"1157_CR67","first-page":"1142","volume":"41","author":"JIANG Kaolin","year":"2021","unstructured":"Kaolin JIANG, Wei BAI, Lei ZHANG, Jun CHEN, Zhisong PAN, Shize GUO. Malicious code detection based on multi-channel image deep learning. J Comput Applications. 2021;41(4):1142\u20137.","journal-title":"J Comput Applications"},{"issue":"5","key":"1157_CR68","first-page":"881","volume":"15","author":"WANG Runzheng","year":"2021","unstructured":"Runzheng WANG, Jian GAO, Xin TONG, Mengqi YANG. Research on malicious code family classification combining attention mechanism. J Front Comput Sci Technol. 2021;15(5):881\u201392.","journal-title":"J Front Comput Sci Technol"},{"issue":"18","key":"1157_CR69","first-page":"130","volume":"57","author":"REN Zhuojun","year":"2021","unstructured":"Zhuojun REN, Guang CHEN, Wenke LU. Research on visualization method of malware opcodes. Comput Eng Appl. 2021;57(18):130\u20134.","journal-title":"Comput Eng Appl"},{"issue":"10","key":"1157_CR70","doi-asserted-by":"publisher","first-page":"308","DOI":"10.11896\/jsjkx.210200166","volume":"48","author":"LI Yi-meng","year":"2021","unstructured":"Yi-meng LI, Cheng-hai LI, Ya-fei SONG, Jian WANG. Method of malware family classification based on attention-DenseNet-BC model mechanism. Comput Sci. 2021;48(10):308\u201314. https:\/\/doi.org\/10.11896\/jsjkx.210200166.","journal-title":"Comput Sci"},{"issue":"1","key":"1157_CR71","doi-asserted-by":"publisher","first-page":"57","DOI":"10.12263\/DZXB.20211701","volume":"51","author":"WANG Shuo","year":"2023","unstructured":"Shuo WANG, Jian WANG, Ya-nan WANG, Ya-fei SONG. A fast malicious code detection method based on feature fusion. Acta Electonica Sinica. 2023;51(1):57\u201366. https:\/\/doi.org\/10.12263\/DZXB.20211701.","journal-title":"Acta Electonica Sinica"},{"issue":"5","key":"1157_CR72","first-page":"1359","volume":"51","author":"ZHANG Dan-dan","year":"2023","unstructured":"Dan-dan ZHANG, Ya-fei SONG, Shu LIU. MalMKNet: a multi-scale convolutional neural network used for malware classification. Acta Electonica Sinica. 2023;51(5):1359\u201369.","journal-title":"Acta Electonica Sinica"},{"key":"1157_CR73","doi-asserted-by":"publisher","first-page":"203","DOI":"10.1016\/j.aej.2024.10.055","volume":"111","author":"D Zhang","year":"2025","unstructured":"Zhang D, Song Y, Xiang Q, et al. IMCMK-CNN: a lightweight convolutional neural network with multi-scale kernels for image-based malware classification. Alex Eng J. 2025;111:203\u201320.","journal-title":"Alex Eng J"},{"key":"1157_CR74","first-page":"1688","volume":"9","author":"B Pooja","year":"2020","unstructured":"Pooja B, Kumar GS. Detection of malware using deep learning techniques. Int J Sci Technol Res. 2020;9:1688\u201391.","journal-title":"Int J Sci Technol Res"},{"issue":"22","key":"1157_CR75","first-page":"131","volume":"57","author":"CHEN Xiaohan","year":"2021","unstructured":"Xiaohan CHEN, Shuning WEI, Zhengze QIN. Malware family classification based on deep learning visualization. Comput Eng Appl. 2021;57(22):131\u20138.","journal-title":"Comput Eng Appl"},{"issue":"5","key":"1157_CR76","first-page":"1527","volume":"43","author":"JIANG Ruilin","year":"2023","unstructured":"Ruilin JIANG, Renchao QIN. Multi-neural network malicious code detection model based on depthwise separable convolution. J Comput Applications. 2023;43(5):1527\u201333.","journal-title":"J Comput Applications"},{"key":"1157_CR77","doi-asserted-by":"publisher","first-page":"108410","DOI":"10.1016\/j.compeleceng.2022.108410","volume":"104","author":"SK Smmarwar","year":"2022","unstructured":"Smmarwar SK, Gupta GP, Kumar S. Deep malware detection framework for IoT-based smart agriculture. Comput Electr Eng. 2022;104:108410.","journal-title":"Comput Electr Eng"},{"key":"1157_CR78","doi-asserted-by":"publisher","first-page":"108731","DOI":"10.1016\/j.compeleceng.2023.108731","volume":"108","author":"SK Smmarwar","year":"2023","unstructured":"Smmarwar SK, Gupta GP, Kumar S. AI-empowered malware detection system for industrial internet of things. Comput Electr Eng. 2023;108:108731.","journal-title":"Comput Electr Eng"},{"key":"1157_CR79","doi-asserted-by":"crossref","unstructured":"Smmarwar S K, Gupta G P, Kumar S. 2023 Malware detection framework based on iterative neighborhood component analysis for internet of medical things[C]\/\/International conference on biomedical engineering science and technology. Cham: Springer Nature Switzerland, 98\u2013106.","DOI":"10.1007\/978-3-031-54547-4_8"},{"key":"1157_CR80","doi-asserted-by":"crossref","unstructured":"Smmarwar S K, Gupta G P, Kumar S. 2021 Design of a fused triple convolutional neural network for malware detection: a visual classification approach[C]\/\/Advances in computing and data sciences: 5th international conference, ICACDS 2021, Nashik, India, April 23\u201324, 2021, Revised selected papers, Part I 5. Springer International Publishing, 279-89","DOI":"10.1007\/978-3-030-81462-5_26"},{"issue":"03","key":"1157_CR81","first-page":"327","volume":"38","author":"T Yongwang","year":"2021","unstructured":"Yongwang T, Xin L. A malicious code detection method based on Bi-LSTM and self-attention. Comput Applications and Softw. 2021;38(03):327\u201333.","journal-title":"Comput Applications and Softw"},{"issue":"2","key":"1157_CR82","first-page":"282","volume":"48","author":"SHEN Yuan","year":"2022","unstructured":"Yuan SHEN, Hanbing YAN, Chunhe XIA, et al. Malicious code clone detection technology based on deep learning. J Beijing University Aeronaut Astronaut. 2022;48(2):282\u201390.","journal-title":"J Beijing University Aeronaut Astronaut"},{"issue":"1","key":"1157_CR83","first-page":"240","volume":"39","author":"Z Jue","year":"2022","unstructured":"Jue Z, Yuyi Ou. Malware classification method based on convolutional neural network and multi-feature fusion. Application Res Comput. 2022;39(1):240\u20134.","journal-title":"Application Res Comput"},{"issue":"1","key":"1157_CR84","first-page":"8","volume":"68","author":"GAO Yuhang","year":"2022","unstructured":"Yuhang GAO, Guojun PENG, Xiuzhang YANG, et al. powershell malicious code family classification based on deep learning. J Wuhan Univ (Nat Sci Ed). 2022;68(1):8\u201316.","journal-title":"J Wuhan Univ (Nat Sci Ed)"},{"issue":"3","key":"1157_CR85","first-page":"45","volume":"46","author":"YANG Hongyu","year":"2019","unstructured":"Hongyu YANG, Yuzhuo NA. Android malware detection model. J Xidian Univ. 2019;46(3):45\u201351.","journal-title":"J Xidian Univ"},{"issue":"2","key":"1157_CR86","first-page":"549","volume":"38","author":"Li Fan","year":"2021","unstructured":"Fan Li, Junkai Yi. Code vector deep learning-based malicious android application detection approach. Application Res Comput. 2021;38(2):549\u201352, 58.","journal-title":"Application Res Comput"},{"issue":"06","key":"1157_CR87","first-page":"2526","volume":"34","author":"Wu Yue-Ming","year":"2023","unstructured":"Yue-Ming Wu, Meng Ql, De-Qing Z, et al. Obfuscation-resilient android malware detection based on graph convolutional networks. J Softw. 2023;34(06):2526\u201342.","journal-title":"J Softw"},{"key":"1157_CR88","doi-asserted-by":"crossref","unstructured":"Smmarwar S K, Gupta G P, Kumar S. 2023 XAI-AMD-DL: an explainable AI approach for android malware detection system using deep learning[C]\/\/2023 IEEE world conference on applied intelligence and computing (AIC). IEEE, 423\u20138.","DOI":"10.1109\/AIC57670.2023.10263974"},{"key":"1157_CR89","first-page":"173","volume-title":"Analysis of feature selection methods for android malware detection using machine learning techniques[M]\/\/big data analytics in fog-enabled IoT networks","author":"SK Smmarwar","year":"2023","unstructured":"Smmarwar SK, Gupta GP, Kumar S. Analysis of feature selection methods for android malware detection using machine learning techniques[M]\/\/big data analytics in fog-enabled IoT networks. Florida: CRC Press; 2023. p. 173\u201396."},{"issue":"5","key":"1157_CR90","first-page":"60","volume":"4","author":"ZHAO Zhongbin","year":"2022","unstructured":"Zhongbin ZHAO, Manchun CAI, Tianliang LU. Network malicious traffic detection incorporating multi-head attention mechanism. Front Data Comput. 2022;4(5):60\u20137.","journal-title":"Front Data Comput"},{"issue":"08","key":"1157_CR91","first-page":"35","volume":"40","author":"Yu Yuanzhe","year":"2021","unstructured":"Yuanzhe Yu, Jinshuang W, Xia Z. A malicious PDF detection method based on feature agglomeration and convolutional neural network. Cyber Secur Data Gov. 2021;40(08):35\u201341.","journal-title":"Cyber Secur Data Gov"},{"key":"1157_CR92","doi-asserted-by":"publisher","first-page":"105461","DOI":"10.1016\/j.engappai.2022.105461","volume":"116","author":"K Shaukat","year":"2022","unstructured":"Shaukat K, Luo S, Varadharajan V. A novel method for improving the robustness of deep learning-based malware detectors against adversarial attacks. Eng Appl Artif Intell. 2022;116:105461.","journal-title":"Eng Appl Artif Intell"},{"issue":"7","key":"1157_CR93","doi-asserted-by":"publisher","first-page":"3187","DOI":"10.1109\/TII.2018.2822680","volume":"14","author":"Z Cui","year":"2018","unstructured":"Cui Z, Xue F, Cai X, et al. Detection of malicious code variants based on deep learning. IEEE Trans Industr Inf. 2018;14(7):3187\u201396.","journal-title":"IEEE Trans Industr Inf"},{"key":"1157_CR94","doi-asserted-by":"publisher","first-page":"1863","DOI":"10.1016\/j.procs.2019.09.358","volume":"159","author":"SC Hsiao","year":"2019","unstructured":"Hsiao SC, Kao DY, Liu ZY, et al. Malware image classification using one-shot learning with siamese networks. Procedia Comput Sci. 2019;159:1863\u201371.","journal-title":"Procedia Comput Sci"},{"issue":"9","key":"1157_CR95","first-page":"169","volume":"43","author":"LIU Yanhua","year":"2022","unstructured":"Yanhua LIU, Jiaqi LI, Zhengui OU, Xiaoling GAO, Ximeng LIU, Weizhi MENG, Baoxu LIU. Adversarial training driven malicious code detection enhancement method. J Commun. 2022;43(9):169\u201380.","journal-title":"J Commun"},{"key":"1157_CR96","doi-asserted-by":"crossref","unstructured":"Kim J Y, Bu S J, Cho S B. 2017 Malware detection using deep transferred generative adversarial networks[C]\/\/Neural information processing: 24th international conference, ICONIP 2017, Guangzhou, China, November 14-18, 2017, Proceedings, Part I 24. Springer International Publishing, 556-64","DOI":"10.1007\/978-3-319-70087-8_58"},{"key":"1157_CR97","doi-asserted-by":"crossref","unstructured":"Lu Y, Li J. 2019 Generative adversarial network for improving deep learning based malware classification[C]\/\/2019 winter simulation conference (WSC). IEEE, 584\u201393.","DOI":"10.1109\/WSC40007.2019.9004932"},{"issue":"11","key":"1157_CR98","first-page":"3034","volume":"42","author":"ZHU Xiao-hui","year":"2021","unstructured":"Xiao-hui ZHU, Li-ping QIAN, Wei FU. Method based on generative adversarial network enhanced malicious code. Comput Eng Design. 2021;42(11):3034\u201342.","journal-title":"Comput Eng Design"},{"issue":"05","key":"1157_CR99","first-page":"826","volume":"44","author":"WANG Dong","year":"2022","unstructured":"Dong WANG, Ke YANG, Jia-xing XUAN, Yu-tong HAN, Li-hua ZHAO, Xu-ren WANG. Realization of malicious code family classification based on semi-supervised generative adversarial network. Comput Eng Sci. 2022;44(05):826\u201333.","journal-title":"Comput Eng Sci"},{"key":"1157_CR100","first-page":"103063","volume":"64","author":"S Kumar","year":"2022","unstructured":"Kumar S, Janet B. DTMIC: deep transfer learning for malware image classification. J Inf Secur and Applications. 2022;64:103063.","journal-title":"J Inf Secur and Applications"},{"key":"1157_CR101","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1016\/j.jpdc.2022.10.001","volume":"172","author":"F Rustam","year":"2023","unstructured":"Rustam F, Ashraf I, Jurcut AD, et al. Malware detection using image representation of malware data and transfer learning. J Parallel Distributed Comput. 2023;172:32\u201350.","journal-title":"J Parallel Distributed Comput"}],"container-title":["Journal of Big Data"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s40537-025-01157-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s40537-025-01157-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s40537-025-01157-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,22]],"date-time":"2025-04-22T12:03:47Z","timestamp":1745323427000},"score":1,"resource":{"primary":{"URL":"https:\/\/journalofbigdata.springeropen.com\/articles\/10.1186\/s40537-025-01157-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,22]]},"references-count":101,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,12]]}},"alternative-id":["1157"],"URL":"https:\/\/doi.org\/10.1186\/s40537-025-01157-y","relation":{},"ISSN":["2196-1115"],"issn-type":[{"value":"2196-1115","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,4,22]]},"assertion":[{"value":"13 November 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 April 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 April 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The data utilized in this paper does not encompass any matters pertaining to morality or ethics. Prior to engaging in the study, all participants provided their informed consent, and the authors were granted the liberty to withdraw from the study at any juncture without facing any penalty. Furthermore, the authors were entitled to pose any questions pertaining to the study and obtain unambiguous responses.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing Interests"}}],"article-number":"99"}}