Demo Data from EDBT 2026 / reviewers in the wild / expert
Christian Ryan
dblp:233/7053
· DBLP profile ↗
1ranked-venue papers
1as first author
1since 2021 · last 2021
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 first-author · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Malware analysis · 100% | |
| Databases, data mining, and information retrieval
1 paper |
Knowledge graphs · 100% |
Topics — the 2 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Malware analysis
malware intelligence |
0.5 | 1 | 2021 | An Ontology-driven Knowledge Graph for Android Malware · CCS 2021 |
Malware analysis
android malware |
0.1 | 1 | 2021 | An Ontology-driven Knowledge Graph for Android Malware · CCS 2021 |
Methods — techniques the papers use, named apart from their topics
triple extraction · 1.0ontology engineering · 1.0
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2021 | An Ontology-driven Knowledge Graph for Android MalwareabstractWe present MalONT2.0 -- an ontology for malware threat intelligence [4]. New classes (attack patterns, infrastructural resources to enable attacks, malware analysis to incorporate static analysis, and dynamic analysis of binaries) and relations have been added following a broadened scope of core competency questions. MalONT2.0 allows researchers to extensively capture all requisite classes and relations that gather semantic and syntactic characteristics of an android malware attack. This ontology forms the basis for the malware threat intelligence knowledge graph, MalKG, which we exemplify using three different, non-overlapping demonstrations. Malware features have been extracted from openCTI reports on android threat intelligence shared on the Internet and written in the form of unstructured text. Some of these sources are blogs, threat intelligence reports, tweets, and news articles. The smallest unit of information that captures malware features is written as triples comprising head and tail entities, each connected with a relation. In the poster and demonstration, we discuss MalONT2.0 and MalKG. Christian Ryan, Sharmishtha Dutta, Youngja Park, Nidhi Rastogi |
CCS | 1 |