{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T14:46:44Z","timestamp":1742914004187,"version":"3.40.3"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030927073"},{"type":"electronic","value":"9783030927080"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-92708-0_14","type":"book-chapter","created":{"date-parts":[[2022,1,3]],"date-time":"2022-01-03T23:02:43Z","timestamp":1641250963000},"page":"222-237","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Collection of the Main Anti-Virus Detection and Bypass Techniques"],"prefix":"10.1007","author":[{"given":"J\u00e9r\u00e9my","family":"Donadio","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guillaume","family":"Guerard","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Soufian Ben","family":"Amor","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,1,4]]},"reference":[{"issue":"5","key":"14_CR1","doi-asserted-by":"publisher","first-page":"713","DOI":"10.7326\/M20-7191","volume":"174","author":"H Akselrod","year":"2021","unstructured":"Akselrod, H.: Crisis standards of care: cyber attack during a pandemic. Ann. Intern. Med. 174(5), 713\u2013714 (2021)","journal-title":"Ann. Intern. Med."},{"key":"14_CR2","series-title":"Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","doi-asserted-by":"publisher","first-page":"204","DOI":"10.1007\/978-3-642-33448-1_28","volume-title":"Global Security, Safety and Sustainability & e-Democracy","author":"M Alazab","year":"2012","unstructured":"Alazab, M., Venkatraman, S., Watters, P., Alazab, M., Alazab, A.: Cybercrime: the case of obfuscated malware. In: Georgiadis, C.K., Jahankhani, H., Pimenidis, E., Bashroush, R., Al-Nemrat, A. (eds.) e-Democracy\/ICGS3 -2011. LNICST, vol. 99, pp. 204\u2013211. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-33448-1_28"},{"key":"14_CR3","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.comcom.2020.03.007","volume":"155","author":"T Alladi","year":"2020","unstructured":"Alladi, T., Chamola, V., Zeadally, S.: Industrial control systems: cyberattack trends and countermeasures. Comput. Commun. 155, 1\u20138 (2020)","journal-title":"Comput. Commun."},{"key":"14_CR4","unstructured":"Anderson, H.S., Kharkar, A., Filar, B., Roth, P.: Evading Machine Learning Malware Detection. Black Hat (2017)"},{"key":"14_CR5","doi-asserted-by":"publisher","first-page":"6249","DOI":"10.1109\/ACCESS.2019.2963724","volume":"8","author":"\u00d6A Aslan","year":"2020","unstructured":"Aslan, \u00d6.A., Samet, R.: A comprehensive review on malware detection approaches. IEEE Access 8, 6249\u20136271 (2020)","journal-title":"IEEE Access"},{"issue":"2","key":"14_CR6","first-page":"48","volume":"6","author":"S Aurangzeb","year":"2017","unstructured":"Aurangzeb, S., Aleem, M., Iqbal, M.A., Islam, M.A., et al.: Ransomware: a survey and trends. J. Inf. Assur. Secur. 6(2), 48\u201358 (2017)","journal-title":"J. Inf. Assur. Secur."},{"key":"14_CR7","unstructured":"Calderon, P., Miavril, V., Pr\u00e9sent, P.: Contournement d\u2019analyse dynamique de code viral"},{"issue":"4","key":"14_CR8","first-page":"161","volume":"30","author":"MV Fontanilla","year":"2020","unstructured":"Fontanilla, M.V.: Cybercrime pandemic. Eubios J. Asian Int. Bioethics 30(4), 161\u2013165 (2020)","journal-title":"Eubios J. Asian Int. Bioethics"},{"key":"14_CR9","doi-asserted-by":"crossref","unstructured":"Gandotra, E., Bansal, D., Sofat, S.: Malware analysis and classification: a survey. J. Inf. Secur. 2014 (2014)","DOI":"10.4236\/jis.2014.52006"},{"key":"14_CR10","unstructured":"Idika, N., Mathur, A.P.: A survey of malware detection techniques. Purdue Univ. 48, 2007-2 (2007)"},{"key":"14_CR11","doi-asserted-by":"crossref","unstructured":"Islam, R., Tian, R., Batten, L., Versteeg, S.: Classification of malware based on string and function feature selection. In: 2010 Second Cybercrime and Trustworthy Computing Workshop, pp. 9\u201317. IEEE (2010)","DOI":"10.1109\/CTC.2010.11"},{"issue":"2","key":"14_CR12","doi-asserted-by":"publisher","first-page":"646","DOI":"10.1016\/j.jnca.2012.10.004","volume":"36","author":"R Islam","year":"2013","unstructured":"Islam, R., Tian, R., Batten, L.M., Versteeg, S.: Classification of malware based on integrated static and dynamic features. J. Netw. Comput. Appl. 36(2), 646\u2013656 (2013)","journal-title":"J. Netw. Comput. Appl."},{"key":"14_CR13","doi-asserted-by":"crossref","unstructured":"King, S.T., Chen, P.M.: SubVirt: implementing malware with virtual machines. In: 2006 IEEE Symposium on Security and Privacy (S&P 2006), 14-pp. IEEE (2006)","DOI":"10.1109\/SP.2006.38"},{"key":"14_CR14","doi-asserted-by":"publisher","unstructured":"King, S., Chen, P.: SubVirt: implementing malware with virtual machines. In: 2006 IEEE Symposium on Security and Privacy (S&P 2006), p. 14 pp.-327 (2006). https:\/\/doi.org\/10.1109\/SP.2006.38","DOI":"10.1109\/SP.2006.38"},{"key":"14_CR15","unstructured":"Lagadec, P.: Dynamic malware analysis for dummies. In: Symposium Sur la S\u00e9curit\u00e9 des Technologies de l\u2019information et des Communications, SSTIC (2008)"},{"issue":"1","key":"14_CR16","first-page":"67","volume":"27","author":"JH Lee","year":"2017","unstructured":"Lee, J.H., Han, J., Lee, M.W., Choi, J.M., Baek, H., Lee, S.J.: A study on API wrapping in Themida and unpacking technique. J. Korea Inst. Inf. Secur. Cryptol. 27(1), 67\u201377 (2017)","journal-title":"J. Korea Inst. Inf. Secur. Cryptol."},{"key":"14_CR17","doi-asserted-by":"crossref","unstructured":"Liu, W., Ren, P., Liu, K., Duan, H.X.: Behavior-based malware analysis and detection. In: 2011 First International Workshop on Complexity and Data Mining, pp. 39\u201342. IEEE (2011)","DOI":"10.1109\/IWCDM.2011.17"},{"key":"14_CR18","unstructured":"Ludwig, M.A.: The Giant Black Book of Computer Viruses. American Eagle Publications, Show Low (1998)"},{"key":"14_CR19","doi-asserted-by":"crossref","unstructured":"Macdonald, S., Jarvis, L., Lavis, S.M.: Cyberterrorism today? Findings from a follow-on survey of researchers. Stud. Confl. Terror., 1\u201326 (2019)","DOI":"10.1080\/1057610X.2019.1696444"},{"key":"14_CR20","doi-asserted-by":"publisher","first-page":"267","DOI":"10.1007\/978-1-4842-6193-4_10","volume-title":"Malware Analysis and Detection Engineering","author":"A Mohanta","year":"2020","unstructured":"Mohanta, A., Saldanha, A.: Code injection, process hollowing, and API hooking. In: Malware Analysis and Detection Engineering, pp. 267\u2013329. Apress, Berkeley (2020). https:\/\/doi.org\/10.1007\/978-1-4842-6193-4_10"},{"key":"14_CR21","doi-asserted-by":"crossref","unstructured":"Moser, A., Kruegel, C., Kirda, E.: Limits of static analysis for malware detection. In: Twenty-Third Annual Computer Security Applications Conference (ACSAC 2007), pp. 421\u2013430. IEEE (2007)","DOI":"10.1109\/ACSAC.2007.21"},{"key":"14_CR22","unstructured":"Nasi, E.: Bypass antivirus dynamic analysis. Limitations of the AV model and how to exploit them (2014)"},{"key":"14_CR23","unstructured":"Oberhumer, M.F.: UPX the ultimate packer for executables (2004). http:\/\/upx.sourceforge.net\/"},{"key":"14_CR24","doi-asserted-by":"crossref","unstructured":"Osorio, F.C.C., Qiu, H., Arrott, A.: Segmented sandboxing-a novel approach to malware polymorphism detection. In: 2015 10th International Conference on Malicious and Unwanted Software (MALWARE), pp. 59\u201368. IEEE (2015)","DOI":"10.1109\/MALWARE.2015.7413685"},{"key":"14_CR25","doi-asserted-by":"crossref","unstructured":"Pl\u0117ta, T., Tvaronavi\u010dien\u0117, M., Casa, S.D., Agafonov, K.: Cyber-attacks to critical energy infrastructure and management issues: overview of selected cases (2020)","DOI":"10.9770\/IRD.2020.2.3(7)"},{"key":"14_CR26","doi-asserted-by":"crossref","unstructured":"Ramadan, R.A., Aboshosha, B.W., Alshudukhi, J.S., Alzahrani, A.J., El-Sayed, A., Dessouky, M.M.: Cybersecurity and countermeasures at the time of pandemic. J. Adv. Transp. 2021 (2021)","DOI":"10.1155\/2021\/6627264"},{"issue":"1","key":"14_CR27","doi-asserted-by":"publisher","first-page":"179","DOI":"10.1145\/2103621.2103678","volume":"47","author":"D Ray","year":"2012","unstructured":"Ray, D., Ligatti, J.: Defining code-injection attacks. ACM SIGPLAN Not. 47(1), 179\u2013190 (2012)","journal-title":"ACM SIGPLAN Not."},{"key":"14_CR28","unstructured":"Scott, J.: Signature based malware detection is dead. Institute for Critical Infrastructure Technology (2017)"},{"key":"14_CR29","doi-asserted-by":"publisher","first-page":"804","DOI":"10.1016\/j.procs.2015.02.149","volume":"46","author":"P Shijo","year":"2015","unstructured":"Shijo, P., Salim, A.: Integrated static and dynamic analysis for malware detection. Procedia Comput. Sci. 46, 804\u2013811 (2015)","journal-title":"Procedia Comput. Sci."},{"key":"14_CR30","volume-title":"Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software","author":"M Sikorski","year":"2012","unstructured":"Sikorski, M., Honig, A.: Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software. No Starch Press, San Francisco (2012)"},{"key":"14_CR31","unstructured":"Singer, P.W., Friedman, A.: Cybersecurity: What Everyone Needs to Know. OUP, New York (2014)"},{"issue":"2","key":"14_CR32","first-page":"20","volume":"8","author":"R Tahir","year":"2018","unstructured":"Tahir, R.: A study on malware and malware detection techniques. Int. J. Educ. Manage. Eng. 8(2), 20 (2018)","journal-title":"Int. J. Educ. Manage. Eng."}],"container-title":["Lecture Notes in Computer Science","Network and System Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-92708-0_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,15]],"date-time":"2024-09-15T16:28:03Z","timestamp":1726417683000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-92708-0_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030927073","9783030927080"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-92708-0_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"4 January 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"NSS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Network and System Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Tianjin","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 October 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 October 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"nss2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/nsclab.org\/nss2021\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"62","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"16","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"8","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"26% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4.2","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.75","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}