{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T05:06:06Z","timestamp":1783487166420,"version":"3.55.0"},"publisher-location":"Berlin, Heidelberg","reference-count":17,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540705413","type":"print"},{"value":"9783540705420","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1007\/978-3-540-70542-0_5","type":"book-chapter","created":{"date-parts":[[2008,8,12]],"date-time":"2008-08-12T16:07:43Z","timestamp":1218557263000},"page":"88-107","source":"Crossref","is-referenced-by-count":61,"title":["Embedded Malware Detection Using Markov n-Grams"],"prefix":"10.1007","author":[{"given":"M. Zubair","family":"Shafiq","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Syed Ali","family":"Khayam","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Muddassar","family":"Farooq","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"5_CR1","unstructured":"Symantec Internet Security Threat Report XI: Trends for July \u2013 December 2007 (September 2007)"},{"key":"5_CR2","series-title":"Advances in Information Security","doi-asserted-by":"publisher","first-page":"231","DOI":"10.1007\/978-0-387-44599-1_11","volume-title":"Towards Stealthy Malware Detection","author":"S.J. Stolfo","year":"2007","unstructured":"Stolfo, S.J., Wang, K., Li, W.J.: Towards Stealthy Malware Detection. Advances in Information Security, vol.\u00a027, pp. 231\u2013249. Springer, Heidelberg (2007)"},{"key":"5_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73614-1_14","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"W.J. Li","year":"2007","unstructured":"Li, W.J., Stolfo, S.J., Stavrou, A., Androulaki, E., Keromytis, A.D.: A Study of Malcode-Bearing Documents. In: H\u00e4mmerli, B.M., Sommer, R. (eds.) DIMVA 2007. LNCS, vol.\u00a04579. Springer, Heidelberg (2007)"},{"key":"5_CR4","unstructured":"Leyden, J.: Trojan exploits unpatchedWord vulnerability. The Register (May 2006)"},{"key":"5_CR5","unstructured":"Evers, J.: Zero-day attacks continue to hit Microsoft. News.com (September 2006)"},{"key":"5_CR6","unstructured":"Kierznowski, D.: Backdooring PDF Files (September 2006)"},{"key":"5_CR7","doi-asserted-by":"publisher","first-page":"842","DOI":"10.1126\/science.267.5199.843","volume":"267","author":"M. Damashek","year":"1995","unstructured":"Damashek, M.: Gauging Similarity with n-Grams: Language-Independent Categorization of Text. Science\u00a0267, 842\u2013848 (1995)","journal-title":"Science"},{"key":"5_CR8","unstructured":"Friedl, S.: Steve Friedl\u2019s Unixwiz.net Tech Tips: Analysis of the new \u2018Code Red II\u2019 Variant, http:\/\/www.unixwiz.net\/techtips\/CodeRedII.html"},{"key":"5_CR9","doi-asserted-by":"crossref","unstructured":"Lakhina, A., Crovella, M., Diot, C.: Mining anomalies using traffic feature distributions. ACM SIGCOMM (September 2005)","DOI":"10.1145\/1080091.1080118"},{"key":"5_CR10","doi-asserted-by":"crossref","DOI":"10.1002\/0471200611","volume-title":"Elements of Information Theory","author":"T.M. Cover","year":"1991","unstructured":"Cover, T.M., Thomas, J.A.: Elements of Information Theory. Wiley-Interscience, Chichester (1991)"},{"key":"5_CR11","unstructured":"VX Heavens Virus Collection, VX Heavens, http:\/\/vx.netlux.org\/vl.php"},{"key":"5_CR12","unstructured":"McAfee Anti-virus and Internet security, McAfee, CA"},{"key":"5_CR13","unstructured":"Kaspersky Antivirus, Kaspersky Lab HQ, Moscow, Russia"},{"key":"5_CR14","unstructured":"AVG Anti-Virus and Internet Security, GRISOFT Inc., FL, USA"},{"key":"5_CR15","unstructured":"Huang, Y.: Vulnerabilities in Portable Executable (PE) File Format For Win32 Architecture, TR, Exurity Inc., Canada (2006)"},{"key":"5_CR16","unstructured":"Fawcett, T.: ROC Graphs: Notes and Practical Considerations for Researchers, TR, HP Labs, CA, USA (2003-2004)"},{"key":"5_CR17","doi-asserted-by":"crossref","unstructured":"Wagner, D., Soto, P.: Mimicry Attacks on Host-Based Intrusion Detection Systems. ACM CCS (November 2002)","DOI":"10.1145\/586110.586145"}],"container-title":["Lecture Notes in Computer Science","Detection of Intrusions and Malware, and Vulnerability Assessment"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-70542-0_5.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,19]],"date-time":"2020-11-19T05:07:33Z","timestamp":1605762453000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-70542-0_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"ISBN":["9783540705413","9783540705420"],"references-count":17,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-70542-0_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[]}}