{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T07:05:39Z","timestamp":1750316739018,"version":"3.40.3"},"publisher-location":"Cham","reference-count":37,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030299613"},{"type":"electronic","value":"9783030299620"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-29962-0_3","type":"book-chapter","created":{"date-parts":[[2019,9,14]],"date-time":"2019-09-14T23:03:29Z","timestamp":1568502209000},"page":"47-67","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":16,"title":["BinEye: Towards Efficient Binary Authorship Characterization Using Deep\u00a0Learning"],"prefix":"10.1007","author":[{"given":"Saed","family":"Alrabaee","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"ElMouatez Billah","family":"Karbab","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lingyu","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,9,15]]},"reference":[{"issue":"2","key":"3_CR1","first-page":"8","volume":"21","author":"S Alrabaee","year":"2018","unstructured":"Alrabaee, S., Shirani, P., Wang, L., Debbabi, M.: Fossil: a resilient and efficient system for identifying foss functions in malware binaries. ACM Trans. Priv. Secur. (TOPS) 21(2), 8 (2018)","journal-title":"ACM Trans. Priv. Secur. (TOPS)"},{"key":"3_CR2","unstructured":"Techniqal report, Resource 207: Kaspersky Lab Research proves that Stuxnet and Flame developers are connected. http:\/\/www.kaspersky.com\/about\/news\/virus\/2012\/"},{"key":"3_CR3","unstructured":"Big Game Hunting: Nation-state malware research, BlackHat (2015). https:\/\/www.blackhat.com\/docs\/us-15\/materials\/us-15-MarquisBoire-Big-Game-Hunting-The-Peculiarities-Of-Nation-State-Malware-Research.pdf"},{"key":"3_CR4","unstructured":"Citizen Lab. University of Toronto, Canada (2015). https:\/\/citizenlab.org\/"},{"key":"3_CR5","unstructured":"Caliskan-Islam, A., et al.: De-anonymizing programmers via code stylometry. In: USENIX (2015)"},{"key":"3_CR6","doi-asserted-by":"publisher","first-page":"470","DOI":"10.4018\/978-1-60566-836-9.ch020","volume-title":"Handbook of Research on Computational Forensics, Digital Crime, and Investigation","author":"Georgia Frantzeskou","year":"2010","unstructured":"Frantzeskou, G.: Source code authorship analysis for supporting the cybercrime investigation process, pp. 470\u2013495 (2004)"},{"key":"3_CR7","doi-asserted-by":"publisher","first-page":"S94","DOI":"10.1016\/j.diin.2014.03.012","volume":"11","author":"S Alrabaee","year":"2014","unstructured":"Alrabaee, S., Saleem, N., Preda, S., Wang, L., Debbabi, M.: Oba2: an onion approach to binary code authorship attribution. Digit. Invest. 11, S94\u2013S103 (2014)","journal-title":"Digit. Invest."},{"key":"3_CR8","doi-asserted-by":"publisher","first-page":"S3","DOI":"10.1016\/j.diin.2019.01.028","volume":"28","author":"S Alrabaee","year":"2019","unstructured":"Alrabaee, S., Wang, L., Debbabi, M.: On the feasibility of binary authorship characterization. Digit. Invest. 28, S3\u2013S11 (2019)","journal-title":"Digit. Invest."},{"key":"3_CR9","unstructured":"Caliskan-Islam, A., et al.: When coding style survives compilation: de-anonymizing programmers from executable binaries, arXiv preprint arXiv:1512.08546 (2015)"},{"key":"3_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"172","DOI":"10.1007\/978-3-642-23822-2_10","volume-title":"Computer Security \u2013 ESORICS 2011","author":"N Rosenblum","year":"2011","unstructured":"Rosenblum, N., Zhu, X., Miller, B.P.: Who wrote this code? Identifying the authors of program binaries. In: Atluri, V., Diaz, C. (eds.) ESORICS 2011. LNCS, vol. 6879, pp. 172\u2013189. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-23822-2_10"},{"key":"3_CR11","doi-asserted-by":"crossref","unstructured":"Kirat, D., Nataraj, L., Vigna, G., Manjunath, B.: Sigmal: a static signal processing based malware triage. In: Proceedings of the 29th Annual Computer Security Applications Conference, pp. 89\u201398. ACM (2013)","DOI":"10.1145\/2523649.2523682"},{"issue":"3","key":"3_CR12","doi-asserted-by":"publisher","first-page":"145","DOI":"10.1023\/A:1011139631724","volume":"42","author":"A Oliva","year":"2001","unstructured":"Oliva, A., Torralba, A.: Modeling the shape of the scene: a holistic representation of the spatial envelope. Int. J. Comput. Vis. 42(3), 145\u2013175 (2001)","journal-title":"Int. J. Comput. Vis."},{"issue":"9","key":"3_CR13","doi-asserted-by":"publisher","first-page":"1901","DOI":"10.1109\/TPAMI.2015.2491929","volume":"38","author":"Y Wei","year":"2016","unstructured":"Wei, Y., et al.: HCP: a flexible CNN framework for multi-label image classification. IEEE Trans. Pattern Anal. Mach. Intell. 38(9), 1901\u20131907 (2016)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"3_CR14","unstructured":"HexRays: IDA Pro (2011). https:\/\/www.hex-rays.com\/products\/ida\/index.shtml. Accessed Feb 2016"},{"key":"3_CR15","doi-asserted-by":"crossref","unstructured":"Andriesse, D., Slowinska, A., Bos, H.: Compiler-agnostic function detection in binaries. In: IEEE Euro S&P (2017)","DOI":"10.1109\/EuroSP.2017.11"},{"issue":"1","key":"3_CR16","doi-asserted-by":"publisher","first-page":"51","DOI":"10.1145\/360402.360419","volume":"2","author":"F Farnstrom","year":"2000","unstructured":"Farnstrom, F., Lewis, J., Elkan, C.: Scalability for clustering algorithms revisited. ACM SIGKDD Explor. Newsl. 2(1), 51\u201357 (2000)","journal-title":"ACM SIGKDD Explor. Newsl."},{"key":"3_CR17","unstructured":"PEfile (2012). http:\/\/code.google.com\/p\/pefile\/. Accessed Nov 2016"},{"key":"3_CR18","doi-asserted-by":"crossref","unstructured":"Nataraj, L., Karthikeyan, S., Jacob, G., Manjunath, B.: Malware images: visualization and automatic classification. In: Proceedings of the 8th International Symposium on Visualization for Cyber Security, p. 4. ACM (2011)","DOI":"10.1145\/2016904.2016908"},{"issue":"7","key":"3_CR19","doi-asserted-by":"publisher","first-page":"1169","DOI":"10.1109\/29.1644","volume":"36","author":"JG Daugman","year":"1988","unstructured":"Daugman, J.G.: Complete discrete 2-D gabor transforms by neural networks for image analysis and compression. IEEE Trans. Acoust. Speech Signal Process. 36(7), 1169\u20131179 (1988)","journal-title":"IEEE Trans. Acoust. Speech Signal Process."},{"key":"3_CR20","doi-asserted-by":"publisher","first-page":"S48","DOI":"10.1016\/j.diin.2018.01.007","volume":"24","author":"EB Karbab","year":"2018","unstructured":"Karbab, E.B., Debbabi, M., Derhab, A., Mouheb, D.: MalDozer: automatic framework for android malware detection using deep learning. Digit. Invest. 24, S48\u2013S59 (2018)","journal-title":"Digit. Invest."},{"key":"3_CR21","doi-asserted-by":"crossref","unstructured":"Huang, G., Liu, Z., Weinberger, K.Q., van der Maaten, L.: Densely connected convolutional networks, arXiv preprint arXiv:1608.06993 (2016)","DOI":"10.1109\/CVPR.2017.243"},{"key":"3_CR22","doi-asserted-by":"crossref","unstructured":"Kim, Y.: Convolutional neural networks for sentence classification, CoRR (2014)","DOI":"10.3115\/v1\/D14-1181"},{"key":"3_CR23","unstructured":"Mikolov, T., Sutskever, I., et al.: Distributed representations of words and phrases and their compositionality. In: NIPS Neural Information Processing Systems (2013)"},{"key":"3_CR24","doi-asserted-by":"crossref","unstructured":"Pennington, J., Socher, R., et al.: GloVe: global vectors for word representation. In: Conference on Empirical Methods in Natural Language Processing (2014)","DOI":"10.3115\/v1\/D14-1162"},{"key":"3_CR25","unstructured":"Hamerly, G., Elkan, C., et al.: Learning the k in k-means. In: NIPS, vol. 3, pp. 281\u2013288 (2003)"},{"key":"3_CR26","unstructured":"The Scalable Native Graph Database (2015). http:\/\/neo4j.com\/"},{"key":"3_CR27","unstructured":"The Gephi plugin for nneo4j (2015). https:\/\/marketplace.gephi.org\/plugin\/neo4j-graph-database-support\/"},{"key":"3_CR28","unstructured":"The GitHub repository (2016). https:\/\/github.com\/"},{"key":"3_CR29","unstructured":"The Google Code Jam (2008\u20132015). http:\/\/code.google.com\/codejam\/"},{"key":"3_CR30","unstructured":"The materials supplement for the paper. Who Wrote This Code? Identifying the Authors of Program Binaries. http:\/\/pages.cs.wisc.edu\/~dnater\/esorics-supp\/"},{"key":"3_CR31","unstructured":"Programmer De-anonymization from Binary Executables (2015). https:\/\/github.com\/calaylin\/bda"},{"key":"3_CR32","unstructured":"Hex-Ray decompiler (2015). https:\/\/www.hex-rays.com\/products\/decompiler\/"},{"key":"3_CR33","unstructured":"Refactoring tool (2016). https:\/\/www.devexpress.com\/Products\/CodeRush\/. Accessed Feb 2017"},{"key":"3_CR34","unstructured":"C++ refactoring tools for visual studio (2016). http:\/\/www.wholetomato.com\/. Accessed Feb 2016"},{"key":"3_CR35","unstructured":"Tigress is a diversifying virtualizer\/obfuscator for the C language (2016). http:\/\/tigress.cs.arizona.edu\/"},{"key":"3_CR36","doi-asserted-by":"crossref","unstructured":"Junod, P., Rinaldini, J., Wehrli, J., Michielin, J.: Obfuscator-LLVM: software protection for the masses. In: Proceedings of the 1st International Workshop on Software Protection, pp. 3\u20139. IEEE Press (2015)","DOI":"10.1109\/SPRO.2015.10"},{"key":"3_CR37","unstructured":"Branco, R.R., Barbosa, G.N., Neto, P.D.: Scientific but not academical overview of malware anti-debugging, anti-disassembly and Anti-VM technologies (2012)"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2019"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-29962-0_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,15]],"date-time":"2024-09-15T00:10:22Z","timestamp":1726359022000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-29962-0_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030299613","9783030299620"],"references-count":37,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-29962-0_3","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"15 September 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Luxembourg","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Luxembourg","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 September 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 September 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/conf.laas.fr\/esorics\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"344","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"67","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3,2","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"11","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}