{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T00:19:29Z","timestamp":1740097169240,"version":"3.37.3"},"publisher-location":"Cham","reference-count":34,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319192093"},{"type":"electronic","value":"9783319192109"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-19210-9_10","type":"book-chapter","created":{"date-parts":[[2015,5,22]],"date-time":"2015-05-22T07:59:50Z","timestamp":1432281590000},"page":"139-155","source":"Crossref","is-referenced-by-count":4,"title":["Malware Biodiversity Using Static Analysis"],"prefix":"10.1007","author":[{"given":"Jeremy D.","family":"Seideman","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bilal","family":"Khan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Antonio Cesar","family":"Vargas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2015,5,22]]},"reference":[{"doi-asserted-by":"crossref","unstructured":"Annachhatre, C., Austin, T., Stamp, M.: Hidden markov models for malware classification. J. Comput. Virol. Hacking Tech., 1\u201315 (2014). \n                  http:\/\/dx.doi.org\/10.1007\/s11416-014-0215-x","key":"10_CR1","DOI":"10.1007\/s11416-014-0215-x"},{"unstructured":"Arora, A., Krishnan, R., Telang, R., Yang, Y.: Impact of vulnerability disclosure and patch availability - an empirical analysis. In. Third Workshop on the Economics of Information Security (2004). \n                  http:\/\/citeseerx.ist.psu.edu\/viewdoc\/summary?doi=10.1.1.81.9350","key":"10_CR2"},{"key":"10_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1007\/978-3-540-74320-0_10","volume-title":"Recent Advances in Intrusion Detection","author":"M Bailey","year":"2007","unstructured":"Bailey, M., Oberheide, J., Andersen, J., Mao, Z.M., Jahanian, F., Nazario, J.: Automated classification and analysis of internet malware. In: Kruegel, C., Lippmann, R., Clark, A. (eds.) RAID 2007. LNCS, vol. 4637, pp. 178\u2013197. Springer, Heidelberg (2007). \n                  http:\/\/dx.doi.org\/10.1007\/978-3-540-74320-0_10"},{"unstructured":"Bayer, U., Comparetti, P.M., Hlauschek, C., Kr\u00fcgel, C., Kirda, E.: Scalable, behavior-based malware clustering. In: Proceedings of NDSS 2009 (2009). \n                  http:\/\/www.isoc.org\/isoc\/conferences\/ndss\/09\/pdf\/11.pdf","key":"10_CR4"},{"key":"10_CR5","volume-title":"Biology","author":"NA Campbell","year":"1996","unstructured":"Campbell, N.A.: Biology, 4th edn. The Benjamin\/Cummings Publishing Company Inc., New York (1996)","edition":"4"},{"unstructured":"Cencini, A., Yu, K., Chan, T.: Software Vulnerabilities: Full-, Responsible-, and Non-Disclosure (2005). \n                  http:\/\/www.cs.washington.edu\/education\/courses\/csep590\/05au\/whitepaper_turnin\/software_vulnerabilities_by_cencini_yu_chan.pdf","key":"10_CR6"},{"key":"10_CR7","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1016\/0167-4048(87)90122-2","volume":"6","author":"F Cohen","year":"1987","unstructured":"Cohen, F.: Computer virus: theory and experiments. Comput. Secur. 6, 22\u201335 (1987). \n                  http:\/\/www.cs.washington.edu\/education\/courses\/csep590\/05au\/whitepaper_turnin\/software_vulnerabilities_by_cencini_yu_chan.pdf","journal-title":"Comput. Secur."},{"unstructured":"Darmetko, C., Jilcott, S., Everett, J.: Inferring accurate histories of malware evolution from structural evidence. In: The Twenty-Sixth International FLAIRS Conference (2013)","key":"10_CR8"},{"unstructured":"Dot Products (2009). \n                  http:\/\/nlp.stanford.edu\/IR-book\/html\/htmledition\/dot-products-1.html","key":"10_CR9"},{"issue":"3\u20134","key":"10_CR10","doi-asserted-by":"publisher","first-page":"55","DOI":"10.1007\/s11416-005-0008-3","volume":"1","author":"E Filiol","year":"2006","unstructured":"Filiol, E., Helenius, M., Zanero, S.: Open problems in computer virology. J. Comput. Virol. 1(3\u20134), 55\u201366 (2006). \n                  http:\/\/dx.doi.org\/10.1007\/s11416-005-0008-3","journal-title":"J. Comput. Virol."},{"unstructured":"Gheorghescu, M.: An automated virus classification system. In: Virus Bulletin Conference, pp. 294\u2013300, Oct 2005","key":"10_CR11"},{"doi-asserted-by":"crossref","unstructured":"Ibrahim, A., Abdelhalim, M.B., Hussein, H., Fahmy, A.: Analysis of x86 instruction set usage for Windows 7 applications. In: 2010 2nd International Conference on Computer Technology and Development (ICCTD), pp. 511\u2013516 (2010)","key":"10_CR12","DOI":"10.1109\/ICCTD.2010.5645851"},{"unstructured":"Intel Corporation: Intel\n                  \n                    \n                  \n                  $${\\textregistered }$$\n                 64 and IA-32 Architectures Software Developer Manuals (2013). \n                  http:\/\/www.intel.com\/content\/www\/us\/en\/processors\/architectures-software-developer-manuals.html\/","key":"10_CR13"},{"issue":"3","key":"10_CR14","doi-asserted-by":"publisher","first-page":"251","DOI":"10.1007\/s11416-008-0086-0","volume":"4","author":"G Jacob","year":"2008","unstructured":"Jacob, G., Debar, H., Filiol, E.: Behavioral detection of malware: from a survey towards an established taxonomy. J. Comput. Virol. 4(3), 251\u2013266 (2008)","journal-title":"J. Comput. Virol."},{"unstructured":"Jang, J., Woo, M., Brumley, D.: Towards automatic software lineage inference. In: Proceedings of the 22nd USENIX Conference on Security, pp. 81\u201396. USENIX Association (2013)","key":"10_CR15"},{"issue":"1\u20132","key":"10_CR16","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1007\/s11416-005-0002-9","volume":"1","author":"ME Karim","year":"2005","unstructured":"Karim, M.E., Walenstein, A., Lakhotia, A., Parida, L.: Malware phylogeny generation using permutations of code. J. Comput. Virol. 1(1\u20132), 13\u201323 (2005)","journal-title":"J. Comput. Virol."},{"key":"10_CR17","first-page":"2721","volume":"7","author":"JZ Kolter","year":"2006","unstructured":"Kolter, J.Z., Maloof, M.A.: Learning to detect and classify malicious executables in the wild. J. Mach. Learn. Res. 7, 2721\u20132744 (2006). \n                  http:\/\/www.jmlr.org\/papers\/v7\/kolter06a.html","journal-title":"J. Mach. Learn. Res."},{"unstructured":"Lee, T., Mody, J.J.: Behavioral classification. In: Proceedings of EICAR 2006, pp. 1\u201317, May 2006","key":"10_CR18"},{"unstructured":"Li, Z., Sanghi, M., Chen, Y., Kao, M.Y., Chavez, B.: Hamsa: fast signature generation for zero-day polymorphic worms with provable attack resilience. In: Proceedings of the 2006 IEEE Symposium on Security and Privacy. pp. 32\u201347 (2006). \n                  http:\/\/doi.ieeecomputersociety.org\/10.1109\/SP.2006.18","key":"10_CR19"},{"key":"10_CR20","volume-title":"Inquiry into Life (Customized for Brooklyn College)","author":"SS Mader","year":"1999","unstructured":"Mader, S.S.: Inquiry into Life (Customized for Brooklyn College), 9th edn. The McGraw-Hill Companies Inc., Primis Custom Publishing, New York (1999)","edition":"9"},{"unstructured":"Newsome, J., Karp, B., Song, D.X.: Polygraph: automatically generating signatures for polymorphic worms. In: Proceedings of the 2005 IEEE Symposium on Security and Privacy, pp. 226\u2013241 (2005). \n                  http:\/\/doi.ieeecomputersociety.org\/10.1109\/SP.2005.15","key":"10_CR21"},{"unstructured":"Annual Report Panda Labs - 2013 Summary (2013). \n                  http:\/\/press.pandasecurity.com\/wp-content\/uploads\/2010\/05\/PandaLabs-Annual-Report_2013.pdf","key":"10_CR22"},{"key":"10_CR23","volume-title":"Evolutionary Biology","author":"SN Salthe","year":"1972","unstructured":"Salthe, S.N.: Evolutionary Biology. Holt, Rinehart and Winston Inc., New York (1972)"},{"unstructured":"Seewald, A.K.: Towards autmating malware classification and characterization. In: Proceedings of Sicherheit 2008, pp. 291\u2013302 (2008). \n                  http:\/\/alex.seewald.at\/files\/2008-01.pdf","key":"10_CR24"},{"doi-asserted-by":"crossref","unstructured":"Seideman, J., Khan, B., Ben Brahim, G.: Determining vulnerability resolution time by examining malware proliferation rates. In: 2013 9th International Wireless Communications and Mobile Computing Conference (IWCMC), pp. 1678\u20131682 (2013)","key":"10_CR25","DOI":"10.1109\/IWCMC.2013.6583808"},{"issue":"4","key":"10_CR26","first-page":"35","volume":"24","author":"A Singhal","year":"2001","unstructured":"Singhal, A.: Modern information retrieval: a brief overview. IEEE Data Eng. Bull. 24(4), 35\u201343 (2001)","journal-title":"IEEE Data Eng. Bull."},{"issue":"3","key":"10_CR27","doi-asserted-by":"publisher","first-page":"249","DOI":"10.1162\/artl.1994.1.3.249","volume":"1","author":"EH Spafford","year":"1994","unstructured":"Spafford, E.H.: Computer viruses as artificial life. Artif. Life 1(3), 249\u2013265 (1994)","journal-title":"Artif. Life"},{"unstructured":"Threat explorer - spyware and adware, dialers, hack tools, hoaxes and other risks (2012). \n                  http:\/\/www.symantec.com\/security_response\/threatexplorer\/","key":"10_CR28"},{"unstructured":"UPX: the Ultimate Packer for eXecutables - Homepage (2010). \n                  http:\/\/upx.sourceforge.net\/","key":"10_CR29"},{"unstructured":"VirusTotal (2008). \n                  http:\/\/www.virustotal.com","key":"10_CR30"},{"unstructured":"VX heavens (2010). \n                  http:\/\/vxheaven.org\/","key":"10_CR31"},{"issue":"4","key":"10_CR32","doi-asserted-by":"publisher","first-page":"279","DOI":"10.1007\/s11416-007-0074-9","volume":"4","author":"G Wagener","year":"2008","unstructured":"Wagener, G., State, R., Dulaunoy, A.: Malware behaviour analysis. J. Comput. Virol. 4(4), 279\u2013287 (2008)","journal-title":"J. Comput. Virol."},{"issue":"3","key":"10_CR33","doi-asserted-by":"publisher","first-page":"211","DOI":"10.1007\/s11416-006-0028-7","volume":"2","author":"W Wong","year":"2006","unstructured":"Wong, W., Stamp, M.: Hunting for metamorphic engines. J. Comput. Virol. 2(3), 211\u2013229 (2006). \n                  http:\/\/dx.doi.org\/10.1007\/s11416-006-0028-7","journal-title":"J. Comput. Virol."},{"key":"10_CR34","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"86","DOI":"10.1007\/978-3-642-10427-5_9","volume-title":"Artificial Life: Borrowing from Biology","author":"OG Woodberry","year":"2009","unstructured":"Woodberry, O.G., Korb, K.B., Nicholson, A.E.: Testing punctuated equilibrium theory using evolutionary activity statistics. In: Korb, K., Randall, M., Hendtlass, T. (eds.) ACAL 2009. LNCS, vol. 5865, pp. 86\u201395. Springer, Heidelberg (2009)"}],"container-title":["Communications in Computer and Information Science","Future Network Systems and Security"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-19210-9_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,29]],"date-time":"2019-05-29T21:43:42Z","timestamp":1559166222000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-19210-9_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319192093","9783319192109"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-19210-9_10","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2015]]}}}