{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T07:07:17Z","timestamp":1780643237071,"version":"3.54.1"},"publisher-location":"Singapore","reference-count":19,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819580330","type":"print"},{"value":"9789819580347","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-95-8034-7_5","type":"book-chapter","created":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T22:53:28Z","timestamp":1778108008000},"page":"85-102","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Improving Scalable Clustering for IoT Malware via Code Region Extraction"],"prefix":"10.1007","author":[{"given":"Kosuke","family":"Nikawa","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chansu","family":"Han","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Akira","family":"Tanaka","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kazuki","family":"Iwamoto","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Takeshi","family":"Takahashi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jun\u2019ichi","family":"Takeuchi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,5,1]]},"reference":[{"key":"5_CR1","doi-asserted-by":"crossref","unstructured":"Akabane, S., Okamoto, T.: Identification of library functions statically linked to stripped IOT malware. Computer Security Symposium (2020). (In Japanese)","DOI":"10.1016\/j.procs.2020.09.053"},{"key":"5_CR2","unstructured":"Antonakakis, M., et al.: Understanding the mirai botnet. In: 26th USENIX Security Symposium (USENIX Security 17), pp. 1093\u20131110. USENIX Association (2017)"},{"key":"5_CR3","doi-asserted-by":"crossref","unstructured":"Bailey, M., Oberheide, J., Andersen, J., Mao, Z.M., Jahanian, F., Nazario, J.: Automated classification and analysis of internet malware. In: Recent Advances in Intrusion Detection, pp. 178\u2013197. Springer, Berlin Heidelberg, Berlin, Heidelberg (2007)","DOI":"10.1007\/978-3-540-74320-0_10"},{"issue":"5","key":"5_CR4","doi-asserted-by":"publisher","first-page":"1895","DOI":"10.1109\/TIT.2007.894669","volume":"53","author":"M Cebrian","year":"2007","unstructured":"Cebrian, M., Alfonseca, M., Ortega, A.: The normalized compression distance is resistant to noise. IEEE Trans. Inf. Theory 53(5), 1895\u20131900 (2007)","journal-title":"IEEE Trans. Inf. Theory"},{"key":"5_CR5","doi-asserted-by":"crossref","unstructured":"Cozzi, E., Vervier, P.A., Dell\u2019Amico, M., Shen, Y., Bilge, L., Balzarotti, D.: The tangled genealogy of IOT malware. In: Proceedings of the 36th Annual Computer Security Applications Conference, pp. 1\u201316. ACSAC \u201920, Association for Computing Machinery (2020)","DOI":"10.1145\/3427228.3427256"},{"key":"5_CR6","doi-asserted-by":"publisher","first-page":"8240","DOI":"10.1109\/ACCESS.2023.3238711","volume":"11","author":"T He","year":"2023","unstructured":"He, T., et al.: Scalable and fast algorithm for constructing phylogenetic trees with application to IOT malware clustering. IEEE Access 11, 8240\u20138253 (2023)","journal-title":"IEEE Access"},{"key":"5_CR7","unstructured":"Hex-Rays: Ida f.l.i.r.t. technology: in-depth. https:\/\/www.hex-rays.com\/products\/ida\/tech\/flirt\/in_depth\/."},{"key":"5_CR8","doi-asserted-by":"crossref","unstructured":"Karim, M., Walenstein, A., Lakhotia, A., Parida, L.: Malware phylogeny generation using permutations of code. J. Comput. Virology 1, 13\u201323 (11 2005)","DOI":"10.1007\/s11416-005-0002-9"},{"key":"5_CR9","unstructured":"Kato, S., Tanabe, R., Yoshioka, K., Matsumoto, T.: Adaptive observation of emerging cyber attacks targeting various IOT devices. In: IFIP\/IEEE International Symposium on Integrated Network Management (2021)"},{"key":"5_CR10","doi-asserted-by":"publisher","first-page":"18855","DOI":"10.1109\/ACCESS.2023.3247344","volume":"11","author":"H Lee","year":"2023","unstructured":"Lee, H., Kim, S., Baek, D., Kim, D., Hwang, D.: Robust iot malware detection and classification using opcode category features on machine learning. IEEE Access 11, 18855\u201318867 (2023)","journal-title":"IEEE Access"},{"key":"5_CR11","unstructured":"Misu, T., Iwamoto, K., Takada, K., Yoshioka, K.: IOT malware static analysis for automated extraction of disabling information. Symposium on Cryptography and Information Security (2021)."},{"key":"5_CR12","doi-asserted-by":"crossref","unstructured":"Pa, Y., Suzuki, S., Yoshioka, K., Matsumoto, T., Kasama, T., Rossow, C.: Iotpot: a novel honeypot for revealing current IOT threats, Journal of Information Processing (2016)","DOI":"10.2197\/ipsjjip.24.522"},{"key":"5_CR13","doi-asserted-by":"crossref","unstructured":"Rissanen, J.: Modeling by shortest data description. Automatica (1978)","DOI":"10.1016\/0005-1098(78)90005-5"},{"key":"5_CR14","unstructured":"Rosenberg, A., Hirschberg, J.: V-measure: a conditional entropy-based external cluster evaluation measure. In: Proceedings of the 2007 Joint Conference on Empirical Methods in Natural Language Processing and Computational Natural Language Learning, pp. 410\u2013420 (01 2007)"},{"key":"5_CR15","unstructured":"Saitou, N., Nei, M.: The neighbor-joining method: a new method for reconstructing phylogenetic trees. Molecular Bio. Evol. 4(4), 406\u2013425 (07 1987)"},{"key":"5_CR16","unstructured":"Salomon, D.: Data Compression: the complete reference fourth edition. Springer (2007)"},{"key":"5_CR17","doi-asserted-by":"crossref","unstructured":"Sebasti\u00e1n, M., et al.: Avclass: a tool for massive malware labeling. In: Research in Attacks, Intrusions, and Defenses, pp. 230\u2013253. Springer International Publishing (2016)","DOI":"10.1007\/978-3-319-45719-2_11"},{"key":"5_CR18","unstructured":"threat post: bashlite family of malware infects 1 million IOT devices. https:\/\/threatpost.com\/bashlite-family-of-malware-infects-1-million-iot-devices\/120230\/"},{"key":"5_CR19","unstructured":"Yone, T.: Phylogenetic tree estimation for large-scale malware datasets. Master\u2019s thesis, Kyushu University (2016)"}],"container-title":["Lecture Notes in Computer Science","Information Security and Cryptology \u2013 ICISC 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-95-8034-7_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T06:55:04Z","timestamp":1780642504000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-95-8034-7_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9789819580330","9789819580347"],"references-count":19,"URL":"https:\/\/doi.org\/10.1007\/978-981-95-8034-7_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"1 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICISC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information Security and Cryptology","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Seoul","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Korea (Republic of)","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 November 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 November 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icisc2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.icisc.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}