{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,21]],"date-time":"2026-02-21T19:05:23Z","timestamp":1771700723695,"version":"3.50.1"},"reference-count":40,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2014,9,11]],"date-time":"2014-09-11T00:00:00Z","timestamp":1410393600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Comput Virol Hack Tech"],"published-print":{"date-parts":[[2015,5]]},"DOI":"10.1007\/s11416-014-0225-8","type":"journal-article","created":{"date-parts":[[2014,9,10]],"date-time":"2014-09-10T05:54:58Z","timestamp":1410328498000},"page":"89-102","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":17,"title":["Hunting for metamorphic JavaScript malware"],"prefix":"10.1007","volume":"11","author":[{"given":"Mangesh","family":"Musale","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thomas H.","family":"Austin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mark","family":"Stamp","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2014,9,11]]},"reference":[{"issue":"4","key":"225_CR1","doi-asserted-by":"crossref","first-page":"247","DOI":"10.1007\/s11416-011-0152-x","volume":"7","author":"B Anderson","year":"2011","unstructured":"Anderson, B., et al.: Graph-based malware detection using dynamic analysis. J. Comput. Virol. 7(4), 247\u2013258 (2011)","journal-title":"J. Comput. Virol."},{"key":"225_CR2","unstructured":"Apache Cassandra Project. http:\/\/cassandra.apache.org\/"},{"issue":"2","key":"225_CR3","doi-asserted-by":"crossref","first-page":"151","DOI":"10.1007\/s11416-008-0105-1","volume":"5","author":"S Attaluri","year":"2009","unstructured":"Attaluri, S., McGhee, S., Stamp, M.: Profile hidden Markov models and metamorphic virus detection. J. Comput. Virol. 5(2), 151\u2013169 (2009)","journal-title":"J. Comput. Virol."},{"key":"225_CR4","doi-asserted-by":"crossref","unstructured":"Austin, T.H., et al.: Exploring hidden Markov models for virus analysis: a semantic approach. In: Proceedings of 46th Hawaii International Conference on System Sciences (2013)","DOI":"10.1109\/HICSS.2013.217"},{"key":"225_CR5","volume-title":"Computer Viruses and Malware","author":"J Aycock","year":"2006","unstructured":"Aycock, J.: Computer Viruses and Malware. Springer, New York (2006)"},{"issue":"4","key":"225_CR6","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1007\/s11416-013-0185-4","volume":"9","author":"D Baysa","year":"2013","unstructured":"Baysa, D., Low, R.M., Stamp, M.: Structural entropy and metamorphic malware. J. Comput. Virol. Hacking Tech. 9(4), 179\u2013192 (2013)","journal-title":"J. Comput. Virol. Hacking Tech."},{"issue":"7","key":"225_CR7","doi-asserted-by":"crossref","first-page":"1145","DOI":"10.1016\/S0031-3203(96)00142-2","volume":"30","author":"AP Bradley","year":"1997","unstructured":"Bradley, A.P.: The use of the area under the roc curve in the evaluation of machine learning algorithms. J. Pattern Recognit. 30(7), 1145\u20131159 (1997)","journal-title":"J. Pattern Recognit."},{"key":"225_CR8","doi-asserted-by":"crossref","unstructured":"Collberg, C., Thomborson, C., Low, D.: Manufacturing cheap, resilient, and stealthy opaque constructs. In: Symposium on Principles of Programming Languages, pp. 184\u2013196 (1998)","DOI":"10.1145\/268946.268962"},{"key":"225_CR9","unstructured":"Daoud, E., Jebril, I.: Computer virus strategies and detection methods. Int. J. Open Probl. Comput. Sci. Math. 1(2), 29\u201336 (2008). http:\/\/www.emis.de\/journals\/IJOPCM\/files\/IJOPCM(vol.1.2.3.S.08).pdf"},{"key":"225_CR10","unstructured":"DataTables Library. https:\/\/github.com\/DataTables\/DataTables"},{"issue":"4","key":"225_CR11","doi-asserted-by":"crossref","first-page":"402","DOI":"10.1504\/IJMIS.2010.039240","volume":"1","author":"P Desai","year":"2010","unstructured":"Desai, P., Stamp, M.: A highly metamorphic virus generator. Int. J. Multimedia Intell. Secur. 1(4), 402\u2013427 (2010)","journal-title":"Int. J. Multimedia Intell. Secur."},{"issue":"1","key":"225_CR12","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1007\/s11416-013-0193-4","volume":"10","author":"S Deshpande","year":"2014","unstructured":"Deshpande, S., Park, Y., Stamp, M.: Eigenvalue analysis for metamorphic detection. J. Comput. Virol. Hacking Tech. 10(1), 53\u201365 (2014)","journal-title":"J. Comput. Virol. Hacking Tech."},{"issue":"3","key":"225_CR13","doi-asserted-by":"crossref","first-page":"250","DOI":"10.1080\/01611194.2013.797041","volume":"37","author":"A Dhavare","year":"2013","unstructured":"Dhavare, A., Low, R.M., Stamp, M.: Efficient cryptanalysis of homophonic substitution ciphers. Cryptologia 37(3), 250\u2013281 (2013)","journal-title":"Cryptologia"},{"key":"225_CR14","volume-title":"JavaScript: The Definitive Guide","author":"D Flanagan","year":"2011","unstructured":"Flanagan, D.: JavaScript: The Definitive Guide, 6th edn. O\u2019Reilly Media, USA (2011)","edition":"6"},{"key":"225_CR15","unstructured":"Ferrie, P.: Read the transcript. Virus Bull. (2013). https:\/\/www.virusbtn.com\/virusbulletin\/archive\/2013\/05\/vb201305-Transcript"},{"key":"225_CR16","doi-asserted-by":"crossref","first-page":"265","DOI":"10.1080\/0161-119591883944","volume":"19","author":"T Jakobsen","year":"1995","unstructured":"Jakobsen, T.: A fast method for the cryptanalysis of substitution ciphers. Cryptologia 19, 265\u2013274 (1995)","journal-title":"Cryptologia"},{"key":"225_CR17","doi-asserted-by":"crossref","unstructured":"Jidigam, R.K., Austin, T.H., Stamp, M.: Singular value decomposition and metamorphic detection. J. Comput. Virol. Hacking Tech. (2014, to appear)","DOI":"10.1007\/s11416-014-0220-0"},{"key":"225_CR18","unstructured":"Jquery Library. http:\/\/jquery.com\/"},{"key":"225_CR19","doi-asserted-by":"crossref","unstructured":"Lee, J., Austin, T.H., Stamp, M.: Compression-based analysis of metamorphic malware (2014, submitted)","DOI":"10.1504\/IJSN.2015.070426"},{"issue":"3","key":"225_CR20","doi-asserted-by":"crossref","first-page":"201","DOI":"10.1007\/s11416-010-0148-y","volume":"7","author":"D Lin","year":"2011","unstructured":"Lin, D., Stamp, M.: Hunting for undetectable metamorphic viruses. J. Comput. Virol. 7(3), 201\u2013214 (2011)","journal-title":"J. Comput. Virol."},{"key":"225_CR21","doi-asserted-by":"crossref","unstructured":"Musale, M.: Hunting for metamorphic JavaScript malware, Master\u2019s Report, Department of Computer Science, San Jose State University (2014)","DOI":"10.1007\/s11416-014-0225-8"},{"key":"225_CR22","unstructured":"Oxford Dictionaries, transcriptase. http:\/\/www.oxforddictionaries.com\/us\/definition\/american_english\/transcriptase"},{"key":"225_CR23","unstructured":"Provos, N., et al.: All your iFRAMEs point to us. In: Proceedings of USENIX Security \u201908, pp. 1\u201315, (2008)"},{"issue":"8","key":"225_CR24","first-page":"74","volume":"12","author":"B Rad","year":"2012","unstructured":"Rad, B., Masrom, M., Ibrahim, S.: Camouflage in malware: from encryption to metamorphism. Int. J. Comput. Sci. Netw. Secur. 12(8), 74\u201383 (2012)","journal-title":"Int. J. Comput. Sci. Netw. Secur."},{"key":"225_CR25","unstructured":"Rhino documentation. https:\/\/developer.mozilla.org\/en-US\/docs\/Rhino_documentation"},{"issue":"1\u20132","key":"225_CR26","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1007\/s11416-012-0160-5","volume":"8","author":"N Runwal","year":"2012","unstructured":"Runwal, N., Low, R.M., Stamp, M.: Opcode graph similarity and metamorphic detection. J. Comput. Virol. 8(1\u20132), 37\u201352 (2012)","journal-title":"J. Comput. Virol."},{"issue":"3","key":"225_CR27","doi-asserted-by":"crossref","first-page":"159","DOI":"10.1007\/s11416-013-0184-5","volume":"9","author":"G Shanmugam","year":"2013","unstructured":"Shanmugam, G., Low, R.M., Stamp, M.: Simple substitution distance and metamorphic detection. J. Comput. Virol. Hacking Tech. 9(3), 159\u2013170 (2013)","journal-title":"J. Comput. Virol. Hacking Tech."},{"key":"225_CR28","unstructured":"Shlens, J.: A tutorial on principal component analysis. http:\/\/www.cs.cmu.edu\/~elaw\/papers\/pca.pdf"},{"key":"225_CR29","unstructured":"SOPHOS Securtiy Threat Report (2013). http:\/\/www.sophos.com\/en-us\/medialibrary\/PDFs\/other\/sophossecuritythreatreport2013.pdf"},{"key":"225_CR30","doi-asserted-by":"crossref","unstructured":"Sridhara, S.M., Stamp, M.: Metamorphic worm that carries its own morphing engine. J. Comput. Virol. Hacking Tech. 9(2), 49\u201358 (2013)","DOI":"10.1007\/s11416-012-0174-z"},{"key":"225_CR31","unstructured":"Stamp, M.: A revealing introduction to hidden Markov models (2012). http:\/\/www.cs.sjsu.edu\/~stamp\/RUA\/HMM.pdf"},{"key":"225_CR32","unstructured":"Szor, P., Ferrie, P.: Hunting for metamorphic. Symantec Security Response. http:\/\/www.symantec.com\/avcenter\/reference\/hunting.for.metamorphic.pdf"},{"key":"225_CR33","unstructured":"Szor, P.: The Art of Computer Virus Research and Defense. Addison-Wesley Professional (2005)"},{"issue":"1","key":"225_CR34","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s11416-012-0171-2","volume":"9","author":"AH Toderici","year":"2013","unstructured":"Toderici, A.H., Stamp, M.: Chi-squared distance and metamorphic virus detection. J. Comput. Virol. Hacking Tech. 9(1), 1\u201314 (2013)","journal-title":"J. Comput. Virol. Hacking Tech."},{"key":"225_CR35","unstructured":"Transcriptase. http:\/\/spth.virii.lu\/Transcriptase.rar"},{"key":"225_CR36","unstructured":"Walenstein, R., et al.: The design space of metamorphic malware. In: Proceedings of the 2nd International Conference on Information Warfare (2007)"},{"issue":"3","key":"225_CR37","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1007\/s11416-006-0028-7","volume":"2","author":"W Wong","year":"2006","unstructured":"Wong, W., Stamp, M.: Hunting for metamorphic engines. J. Comput. Virol. 2(3), 211\u2013229 (2006)","journal-title":"J. Comput. Virol."},{"key":"225_CR38","unstructured":"Xu, W., Zhang, F., Zhu, S.: The power of obfuscation techniques in malicious JavaScript code: a measurement study (2010). http:\/\/www.cse.psu.edu\/~szhu\/papers\/malware.pdf"},{"key":"225_CR39","unstructured":"YUI Library, http:\/\/yuilibrary.com\/"},{"issue":"3","key":"225_CR40","doi-asserted-by":"crossref","first-page":"199","DOI":"10.1007\/s11416-009-0121-9","volume":"5","author":"PV Zbitskiy","year":"2009","unstructured":"Zbitskiy, P.V.: Code mutation techniques by means of formal grammars and automatons. J. Comput. Virol. 5(3), 199\u2013207 (2009)","journal-title":"J. Comput. Virol."}],"container-title":["Journal of Computer Virology and Hacking Techniques"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-014-0225-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11416-014-0225-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-014-0225-8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,16]],"date-time":"2022-04-16T18:49:52Z","timestamp":1650134992000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11416-014-0225-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,9,11]]},"references-count":40,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2015,5]]}},"alternative-id":["225"],"URL":"https:\/\/doi.org\/10.1007\/s11416-014-0225-8","relation":{},"ISSN":["2263-8733"],"issn-type":[{"value":"2263-8733","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,9,11]]}}}