{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,8]],"date-time":"2026-02-08T15:07:46Z","timestamp":1770563266531,"version":"3.49.0"},"publisher-location":"Dordrecht","reference-count":16,"publisher":"Springer Netherlands","isbn-type":[{"value":"9789400729100","type":"print"},{"value":"9789400729117","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-94-007-2911-7_60","type":"book-chapter","created":{"date-parts":[[2011,12,6]],"date-time":"2011-12-06T10:47:44Z","timestamp":1323168464000},"page":"613-626","source":"Crossref","is-referenced-by-count":10,"title":["Malware Classification Methods Using API Sequence Characteristics"],"prefix":"10.1007","author":[{"given":"Kyoung-Soo","family":"Han","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"In-Kyoung","family":"Kim","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eul Gyu","family":"Im","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2011,12,7]]},"reference":[{"key":"60_CR1","volume-title":"Programming microsoft windows","author":"C Petzold","year":"1998","unstructured":"Petzold C (1998) Programming microsoft windows, 5th edn. Microsoft Press, London","edition":"5"},{"key":"60_CR2","unstructured":"Wang M, Zhang C, Yu J (2006) Native API based windows anomaly intrusion detection method using SVM. In: Proceedings of IEEE international conference on sensor networks, ubiquitous, and trustworthy computing, vol 1, pp 514\u2013519"},{"key":"60_CR3","volume-title":"Rootkits: subverting the windows kernel","author":"G Hoglund","year":"2005","unstructured":"Hoglund G, Butler J (2005) Rootkits: subverting the windows kernel. Addison-Wesley, Reading"},{"issue":"2","key":"60_CR4","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1109\/MSP.2007.45","volume":"5","author":"C Willems","year":"2007","unstructured":"Willems C, Holz T, Freiling F (2007) Toward automated dynamic malware analysis using CWSandbox. IEEE Secur Privacy 5(2):32\u201339","journal-title":"IEEE Secur Privacy"},{"issue":"3","key":"60_CR5","first-page":"17","volume":"16","author":"N Park","year":"2006","unstructured":"Park N, Kim Y, Noh B (2006) A behavior based detection for malicious code using obfuscation technique. J KIISC 16(3):17\u201328","journal-title":"J KIISC"},{"key":"60_CR6","doi-asserted-by":"crossref","unstructured":"Fredrikson M, Jha S, Christodorescu M, Sailer R, Yan X (2010) Synthesizing near-optimal malware specifications from suspicious behaviors. In: Proceedings of the 2010 IEEE symposium on security and privacy, pp 45\u201360","DOI":"10.1109\/SP.2010.11"},{"key":"60_CR7","unstructured":"Miao Q, Wang Y, Cao Y, Zhang X, Liu Z (2010) APICapture\u2014a tool for monitoring the behavior of malware. In: Proceedings of the 3rd international conference on advanced computer theory and engineering, pp 390\u2013394"},{"key":"60_CR8","doi-asserted-by":"crossref","unstructured":"Nair VP, Jain H, Golecha YK, Gaur MS, Laxmi V (2010) MEDUSA: metamorphic malware dynamic analysis using signature from API. In: Proceedings of the 3rd international conference on security of information and networks, pp 263\u2013269","DOI":"10.1145\/1854099.1854152"},{"key":"60_CR9","doi-asserted-by":"crossref","unstructured":"Lee J, Jeong K, Lee H (2010) Detecting metamorphic malwares using code graphs. In: Proceedings of the 2010 ACM symposium on applied computing, pp 1970\u20131977","DOI":"10.1145\/1774088.1774505"},{"key":"60_CR10","doi-asserted-by":"crossref","unstructured":"Cesare S, Xiang Y (2010) A fast flowgraph based classification system for packed and polymorphic malware on the endhost. In: Proceedings of the 24th IEEE international conference on advanced information networking and applications, pp 721\u2013728","DOI":"10.1109\/AINA.2010.121"},{"key":"60_CR11","doi-asserted-by":"crossref","unstructured":"Zhang Q, Reeves DS (2007) MetaAware: identifying metamorphic malware. In: Proceedings of the 23rd annual computer security applications conference, pp 411\u2013420","DOI":"10.1109\/ACSAC.2007.9"},{"key":"60_CR12","doi-asserted-by":"crossref","unstructured":"Karnik A, Goswami S, RGuha R (2007) Detecting obfuscated viruses using cosine similarity analysis. In: Proceedings of the 1th Asia international conference on modelling and simulation, pp 165\u2013170","DOI":"10.1109\/AMS.2007.31"},{"key":"60_CR13","unstructured":"Cha SK, Moraru I, Jang J, Truelove J, Brumley D, Andersen DG (2010) SplitScreen: enabling efficient, distributed malware detection. In: Proceedings of the 7th USENIX conference on networked systems design and implementation"},{"key":"60_CR14","unstructured":"ClamAV, Available at http:\/\/www.clamav.net\/"},{"key":"60_CR15","unstructured":"VX Heavens, Available at http:\/\/vx.netlux.org\/"},{"issue":"2","key":"60_CR16","first-page":"319","volume":"8","author":"KS Han","year":"2011","unstructured":"Han KS, Kim IK, Im EG (2011) Malware family classification method using API sequential characteristic. J JSE 8(2):319\u2013335","journal-title":"J JSE"}],"container-title":["Lecture Notes in Electrical Engineering","Proceedings of the International Conference on IT Convergence and Security 2011"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-94-007-2911-7_60","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,11]],"date-time":"2023-06-11T13:42:39Z","timestamp":1686490959000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-94-007-2911-7_60"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,12,7]]},"ISBN":["9789400729100","9789400729117"],"references-count":16,"URL":"https:\/\/doi.org\/10.1007\/978-94-007-2911-7_60","relation":{},"ISSN":["1876-1100","1876-1119"],"issn-type":[{"value":"1876-1100","type":"print"},{"value":"1876-1119","type":"electronic"}],"subject":[],"published":{"date-parts":[[2011,12,7]]}}}