{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,31]],"date-time":"2026-01-31T09:06:40Z","timestamp":1769850400886,"version":"3.49.0"},"reference-count":25,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2015,12,30]],"date-time":"2015-12-30T00:00:00Z","timestamp":1451433600000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Comput Virol Hack Tech"],"published-print":{"date-parts":[[2016,11]]},"DOI":"10.1007\/s11416-015-0260-0","type":"journal-article","created":{"date-parts":[[2015,12,30]],"date-time":"2015-12-30T13:53:08Z","timestamp":1451483588000},"page":"235-242","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":19,"title":["On normalized compression distance and large malware"],"prefix":"10.1007","volume":"12","author":[{"given":"Rebecca Schuller","family":"Borbely","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2015,12,30]]},"reference":[{"key":"260_CR1","doi-asserted-by":"crossref","unstructured":"Bailey, M., Oberheide, J., Andersen, J., Mao, Z.M., Jahanian, F., Nazario, J.: Automated classification and analysis of internet malware. In: Recent advances in intrusion detection, pp. 178\u2013197. Springer (2007)","DOI":"10.1007\/978-3-540-74320-0_10"},{"key":"260_CR2","unstructured":"Bloom, C.: PPMZ: High compression markov predictive coder. http:\/\/www.cbloom.com\/src\/ppmz.html . Accessed: 2015\u201304-14"},{"issue":"4","key":"260_CR3","doi-asserted-by":"crossref","first-page":"367","DOI":"10.4310\/CIS.2005.v5.n4.a1","volume":"5","author":"M Cebrian","year":"2005","unstructured":"Cebrian, M., Alfonseca, M., Ortega, A., et al.: Common pitfalls using the normalized compression distance: what to watch out for in a compressor. Commun. Inf. Syst. 5(4), 367\u2013384 (2005)","journal-title":"Commun. Inf. Syst."},{"issue":"7","key":"260_CR4","doi-asserted-by":"crossref","first-page":"1545","DOI":"10.1109\/TIT.2004.830793","volume":"50","author":"X Chen","year":"2004","unstructured":"Chen, X., Francia, B., Li, M., Mckinnon, B., Seker, A.: Shared information and program plagiarism detection. IEEE Trans. Inf. Theory 50(7), 1545\u20131551 (2004)","journal-title":"IEEE Trans. Inf. Theory"},{"key":"260_CR5","unstructured":"Cilibrasi, R., Cruz, A.L., de Rooij, S., Keijzer, M.: Complearn. http:\/\/www.complearn.org . Accessed: 2015\u201304-15"},{"key":"260_CR6","doi-asserted-by":"crossref","unstructured":"Cilibrasi, R., Vitanyi, P., De Wolf, R.: Algorithmic clustering of music. In: Web Delivering of Music, 2004. WEDELMUSIC 2004. Proceedings of the Fourth International Conference on, pp. 110\u2013117. IEEE (2004)","DOI":"10.1109\/WDM.2004.1358107"},{"issue":"4","key":"260_CR7","doi-asserted-by":"crossref","first-page":"1523","DOI":"10.1109\/TIT.2005.844059","volume":"51","author":"R Cilibrasi","year":"2005","unstructured":"Cilibrasi, R., Vit\u00e1nyi, P.M.: Clustering by compression. IEEE Trans. Inf. Theory 51(4), 1523\u20131545 (2005)","journal-title":"IEEE Trans. Inf. Theory"},{"key":"260_CR8","doi-asserted-by":"crossref","unstructured":"Cover, T., Hart, P.: Nearest neighbor pattern classification. IEEE Trans. Inf. Theory 13(1), 21\u201327 (1967)","DOI":"10.1109\/TIT.1967.1053964"},{"issue":"4","key":"260_CR9","doi-asserted-by":"crossref","first-page":"287","DOI":"10.4103\/0971-3026.43838","volume":"18","author":"RV Dandu","year":"2008","unstructured":"Dandu, R.V.: Storage media for computers in radiology. Indian J. Radiol. Imaging 18(4), 287 (2008)","journal-title":"Indian J. Radiol. Imaging"},{"key":"260_CR10","unstructured":"Gailly, J.L., Adler, M.: zlib: A massively spiffy yet delicately unobtrusive compression library. http:\/\/www.zlib.net . Accessed: 2015\u201304-14"},{"key":"260_CR11","doi-asserted-by":"crossref","unstructured":"Heath, M., Bowyer, K., Kopans, D., Kegelmeyer Jr, P., Moore, R., Chang, K., Munishkumaran, S.: Current status of the digital database for screening mammography. In: Digital mammography, pp. 457\u2013460. Springer (1998)","DOI":"10.1007\/978-94-011-5318-8_75"},{"key":"260_CR12","unstructured":"Heath, M., Bowyer, K., Kopans, D., Moore, R., Kegelmeyer, P.: The digital database for screening mammography. In: Proceedings of the 5th International Workshop on Digital Mammography, pp. 212\u2013218 (2000)"},{"issue":"6","key":"260_CR13","doi-asserted-by":"crossref","first-page":"341","DOI":"10.1145\/360825.360861","volume":"18","author":"DS Hirschberg","year":"1975","unstructured":"Hirschberg, D.S.: A linear space algorithm for computing maximal common subsequences. Commun. ACM 18(6), 341\u2013343 (1975)","journal-title":"Commun. ACM"},{"issue":"12","key":"260_CR14","doi-asserted-by":"crossref","first-page":"3250","DOI":"10.1109\/TIT.2004.838101","volume":"50","author":"M Li","year":"2004","unstructured":"Li, M., Chen, X., Li, X., Ma, B., Vit\u00e1nyi, P.M.: The similarity metric. IEEE Trans. Inf. Theory 50(12), 3250\u20133264 (2004)","journal-title":"IEEE Trans. Inf. Theory"},{"key":"260_CR15","unstructured":"Microsoft malware classification challenge (BIG 2015). https:\/\/www.kaggle.com\/c\/malware-classification\/data . Accessed: 2015\u201310-27"},{"key":"260_CR16","unstructured":"Pavlov, I.: 7-zip. http:\/\/www.7-zip.org . Accessed 14 Apr 2015"},{"key":"260_CR17","unstructured":"Seward, J.: bzip2: Home. http:\/\/www.bzip.org . Accessed 14 Apr 2015"},{"key":"260_CR18","unstructured":"Thom, D., Heidemann, G.: The normalized compression distance as a distance measure in entity identification (2010)"},{"key":"260_CR19","doi-asserted-by":"crossref","unstructured":"Tran, N.: The normalized compression distance and image distinguishability. In: Electronic Imaging 2007, pp. 64,921D\u201364,921D. International Society for Optics and Photonics (2007)","DOI":"10.1117\/12.704334"},{"key":"260_CR20","first-page":"21","volume":"25","author":"JJ V\u00e4yrynen","year":"2010","unstructured":"V\u00e4yrynen, J.J., Tapiovaara, T., Kettunen, K., Dobrinkat, M.: Normalized compression distance as an automatic mt evaluation metric. Proc. MT 25, 21\u201322 (2010)","journal-title":"Proc. MT"},{"key":"260_CR21","unstructured":"Walenstein, A., Hayes, M., Lakhotia, A.: Phylogenetic comparisons of malware. In: Virus Bulletin Conference, vol. 39, p. 41 (2007)"},{"issue":"3","key":"260_CR22","doi-asserted-by":"crossref","first-page":"303","DOI":"10.3233\/JCS-2007-15301","volume":"15","author":"S Wehner","year":"2007","unstructured":"Wehner, S.: Analyzing worms and network traffic using compression. J. Computer Secur. 15(3), 303\u2013320 (2007)","journal-title":"J. Computer Secur."},{"key":"260_CR23","unstructured":"Witten, I., Bell, T., Cleary, J.: The calgary corpus. http:\/\/corpus.canterbury.ac.nz\/descriptions\/#calgary . Accessed 15 Apr 2015"},{"key":"260_CR24","unstructured":"Zhou, Y., Jiang, X.: Android malware genome project. http:\/\/www.malgenomeproject.org . Accessed 15 Apr 2015"},{"key":"260_CR25","doi-asserted-by":"crossref","unstructured":"Zhou, Y., Jiang, X.: Dissecting android malware: characterization and evolution. In: IEEE Symposium on Security and Privacy (SP), 2012, pp. 95\u2013109. IEEE (2012)","DOI":"10.1109\/SP.2012.16"}],"container-title":["Journal of Computer Virology and Hacking Techniques"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-015-0260-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11416-015-0260-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-015-0260-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-015-0260-0","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,31]],"date-time":"2022-05-31T05:40:52Z","timestamp":1653975652000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11416-015-0260-0"}},"subtitle":["Towards a useful definition of normalized compression distance for the classification of large files"],"short-title":[],"issued":{"date-parts":[[2015,12,30]]},"references-count":25,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2016,11]]}},"alternative-id":["260"],"URL":"https:\/\/doi.org\/10.1007\/s11416-015-0260-0","relation":{},"ISSN":["2263-8733"],"issn-type":[{"value":"2263-8733","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015,12,30]]}}}