{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T15:26:33Z","timestamp":1725549993218},"publisher-location":"Berlin, Heidelberg","reference-count":20,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540291138"},{"type":"electronic","value":"9783540319986"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2005]]},"DOI":"10.1007\/11560326_38","type":"book-chapter","created":{"date-parts":[[2005,9,27]],"date-time":"2005-09-27T14:29:26Z","timestamp":1127831366000},"page":"448-453","source":"Crossref","is-referenced-by-count":1,"title":["Massive Data Mining for Polymorphic Code Detection"],"prefix":"10.1007","author":[{"given":"Udo","family":"Payer","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peter","family":"Teufl","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stefan","family":"Kraxberger","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mario","family":"Lamberger","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"38_CR1","unstructured":"AlephOne: Smashing the stack for fun and profit. Phrack Magazine 49(14) (1996)"},{"key":"38_CR2","unstructured":"Biles, S.: Detecting the Unknown with Snort and the Statistical Packet Anomaly Detection Engine (SPADE). retrieved on (2005), \n                    \n                      http:\/\/www.computersecurityonline.com\/spade\/SPADE.pdf"},{"key":"38_CR3","unstructured":"Bishop, C.M.: Neural networks for pattern recognition. The Clarendon Press Oxford University Press, New York (1995) With a foreword by Geoffrey Hinton"},{"key":"38_CR4","unstructured":"CLET team: Polymorphic shellcode engine. Phrack Magazine 61(9) (2003)"},{"key":"38_CR5","volume-title":"Pattern classification","author":"R. Duda","year":"2001","unstructured":"Duda, R., Hart, P., Stork, D.: Pattern classification, 2nd edn. Wiley-Interscience, New York (2001)","edition":"2"},{"key":"38_CR6","unstructured":"Helsinki\u00a0University of\u00a0Technology. Som toolbox for matlab (2005), \n                    \n                      http:\/\/www.cis.hut.fi\/projects\/somtoolbox\/"},{"key":"38_CR7","unstructured":"K2. Admutate 0.8.4. (2004), Retrieved \n                    \n                      http:\/\/www.ktwo.ca"},{"key":"38_CR8","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-56927-2","volume-title":"Self-Organizing Maps","author":"T. Kohonen","year":"2001","unstructured":"Kohonen, T.: Self-Organizing Maps. Springer, Heidelberg (2001)"},{"key":"38_CR9","unstructured":"Kraxberger, S., Payer, U.: Markov Model for Polymorphic Shellcode Detection. In: INC 2005 (2005) (accepted)"},{"key":"38_CR10","unstructured":"Mathworks. Neural network toolbox (2004), \n                    \n                      http:\/\/www.mathworks.com\/products\/neuralnet\/"},{"key":"38_CR11","unstructured":"NASM SourceForge Project (2005), \n                    \n                      http:\/\/nasm.sourceforge.net"},{"key":"38_CR12","doi-asserted-by":"crossref","unstructured":"Pasupulati, A.C., Levitt, J., Wu, K., Li, S.F., Kuo, S.H., Fan, J.C.: Buttercup: on network-based detection of polymorphic buffer overflow vulnerabilities. In: Network Operations and Management Symposium, NOMS 2004. IEEE\/IFIP, vol.\u00a01, pp. 235\u2013248 (2004)","DOI":"10.1109\/NOMS.2004.1317662"},{"key":"38_CR13","doi-asserted-by":"crossref","unstructured":"Payer, U., Teufl, P., Lamberger, M.: Hybrid Engine for Polymorphic Shellcode Detection. In: accepted at DIMVA (2005)","DOI":"10.1007\/11506881_2"},{"key":"38_CR14","unstructured":"Payer, U., Teufl, P., Lamberger, M.: Traffic classification using Self-Organizing Maps. In: accepted at INC 2005 (2005)"},{"key":"38_CR15","unstructured":"Roweis, S.: Levenberg-marquardt optimization (2005), \n                    \n                      http:\/\/www.cs.toronto.edu\/~roweis\/notes\/lm.pdf"},{"key":"38_CR16","unstructured":"Ruiu, D.: Snort preprocessor - Multi-architecture mutated NOP sled detector (2005), \n                    \n                      http:\/\/cansecwest.com\/spp_fnord.c"},{"key":"38_CR17","unstructured":"Sedalo, M.: Polymorphic Shellcode Engine (2004), \n                    \n                      http:\/\/www.shellcode.com.ar"},{"key":"38_CR18","unstructured":"Snort. Open Source Network Intrusion Detection System (2005), \n                    \n                      http:\/\/www.snort.org"},{"key":"38_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"274","DOI":"10.1007\/3-540-36084-0_15","volume-title":"Recent Advances in Intrusion Detection","author":"T. Toth","year":"2002","unstructured":"Toth, T., Kruegel, C.: Accurate buffer overflow detection via abstract payload execution. In: Wespi, A., Vigna, G., Deri, L. (eds.) RAID 2002. LNCS, vol.\u00a02516, pp. 274\u2013291. Springer, Heidelberg (2002)"},{"key":"38_CR20","unstructured":"Weisstein, E.W.: Markov Chain. From MathWorld\u2013A Wolfram Web Resource, \n                    \n                      http:\/\/mathworld.wolfram.com\/MarkovChain.html"}],"container-title":["Lecture Notes in Computer Science","Computer Network Security"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/11560326_38.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,27]],"date-time":"2021-04-27T07:12:58Z","timestamp":1619507578000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/11560326_38"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2005]]},"ISBN":["9783540291138","9783540319986"],"references-count":20,"URL":"https:\/\/doi.org\/10.1007\/11560326_38","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2005]]}}}