{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,3]],"date-time":"2025-07-03T00:40:05Z","timestamp":1751503205441,"version":"3.41.0"},"reference-count":62,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2018,3,26]],"date-time":"2018-03-26T00:00:00Z","timestamp":1522022400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"FH St. P\u00f6lten - University of Applied Sciences"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Comput Virol Hack Tech"],"published-print":{"date-parts":[[2018,11]]},"DOI":"10.1007\/s11416-018-0318-x","type":"journal-article","created":{"date-parts":[[2018,3,26]],"date-time":"2018-03-26T11:22:07Z","timestamp":1522063327000},"page":"291-311","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["SEQUIN: a grammar inference framework for analyzing malicious system behavior"],"prefix":"10.1007","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6536-6706","authenticated-orcid":false,"given":"Robert","family":"Luh","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gregor","family":"Schramm","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Markus","family":"Wagner","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Helge","family":"Janicke","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sebastian","family":"Schrittwieser","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,3,26]]},"reference":[{"key":"318_CR1","volume-title":"Learning Shallow Context-Free Languages Under Simple Distributions","author":"PW Adriaans","year":"1999","unstructured":"Adriaans, P.W., et al.: Learning Shallow Context-Free Languages Under Simple Distributions. Institute for Logic, Language and Computation (ILLC), University of Amsterdam, Amsterdam (1999)"},{"key":"318_CR2","volume-title":"Compilers, Principles, Techniques","author":"AV Aho","year":"1986","unstructured":"Aho, A.V., Sethi, R., Ullman, J.D.: Compilers, Principles, Techniques. Addison Wesley, Boston (1986)"},{"key":"318_CR3","doi-asserted-by":"crossref","unstructured":"Angelov, K.: Incremental parsing with parallel multiple context-free grammars. In: Proceedings of the 12th Conference of the European Chapter of the Association for Computational Linguistics, pp. 69\u201376. Association for Computational Linguistics (2009)","DOI":"10.3115\/1609067.1609074"},{"key":"318_CR4","doi-asserted-by":"crossref","unstructured":"Ates, K., Zhang K.: Constructing VEGGIE: machine learning for context-sensitive graph grammars. In: 19th IEEE International Conference on Tools with Artificial Intelligence, 2007. ICTAI 2007, vol.\u00a02, pp. 456\u2013463. IEEE (2007)","DOI":"10.1109\/ICTAI.2007.59"},{"key":"318_CR5","doi-asserted-by":"crossref","unstructured":"Ates, K., Kukluk, J., Holder, L., Cook, D., Zhang, K.: Graph grammar induction on structural data for visual programming. In: 18th IEEE International Conference on Tools with Artificial Intelligence, 2006. ICTAI\u201906, pp. 232\u2013242. IEEE (2006)","DOI":"10.1109\/ICTAI.2006.61"},{"key":"318_CR6","unstructured":"Benteler, F.: Layout-graphgrammatiken f\u00fcr die darstellung von hierarchisch strukturierten graphen am beispiel von wellendigitalstrukturen. (2002)"},{"key":"318_CR7","doi-asserted-by":"crossref","unstructured":"Bilge, L., Dumitras, T.: Before we knew it: an empirical study of zero-day attacks in the real world. In: Proceedings of the 2012 ACM Conference on Computer and Communications Security, pp. 833\u2013844. ACM (2012)","DOI":"10.1145\/2382196.2382284"},{"key":"318_CR8","doi-asserted-by":"crossref","unstructured":"Briscoe, E.J.: Language as a complex adaptive system: co-evolution of language and of the language acquisition device. In: Proceedings of Eighth Computational Linguistics in the Netherlands Conference (1998)","DOI":"10.3115\/979617.979671"},{"issue":"1","key":"318_CR9","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1109\/MCG.2009.6","volume":"29","author":"M Chen","year":"2009","unstructured":"Chen, M., Ebert, D., Hagen, H., Laramee, R.S., Van Liere, R., Ma, K.-L., Ribarsky, W., Scheuermann, G., Silver, D.: Data, information, and knowledge in visualization. Comput. Graph. Appl. 29(1), 12\u201319 (2009). https:\/\/doi.org\/10.1109\/MCG.2009.6 . ISSN 0272-1716","journal-title":"Comput. Graph. Appl."},{"key":"318_CR10","doi-asserted-by":"crossref","unstructured":"Clark, A.: Unsupervised induction of stochastic context-free grammars using distributional clustering. In: Proceedings of the 2001 Workshop on Computational Natural Language Learning, Vol. 7, p.\u00a013. Association for Computational Linguistics (2001)","DOI":"10.3115\/1117822.1117831"},{"key":"318_CR11","doi-asserted-by":"publisher","unstructured":"Collins, C., Viegas, F.B., Wattenberg, M.: Parallel tag clouds to explore and analyze faceted text corpora. In: Sympossium on Visual Analytics Science and Technology, pp. 91\u201398 (2009). https:\/\/doi.org\/10.1109\/VAST.2009.5333443","DOI":"10.1109\/VAST.2009.5333443"},{"issue":"4","key":"318_CR12","doi-asserted-by":"publisher","first-page":"807","DOI":"10.1109\/TC.2013.13","volume":"63","author":"G Creech","year":"2014","unstructured":"Creech, G., Hu, J.: A semantic approach to host-based intrusion detection systems using contiguousand discontiguous system call patterns. IEEE Trans. Comput. 63(4), 807\u2013819 (2014)","journal-title":"IEEE Trans. Comput."},{"key":"318_CR13","doi-asserted-by":"crossref","unstructured":"D\u00e9jean, H.: ALLiS: a symbolic learning system for natural language learning. In: Proceedings of the 2nd Workshop on Learning Language in Logic and the 4th Conference on Computational Natural Language Learning, vol. 7, pp. 95\u201398. Association for Computational Linguistics (2000)","DOI":"10.3115\/1117601.1117622"},{"key":"318_CR14","doi-asserted-by":"crossref","unstructured":"Dornhackl, H., Kadletz, K., Luh, R., Tavolato, P.: Defining malicious behavior. In: Ninth International Conference on Availability Reliability and Security (ARES), pp. 273\u2013278. IEEE (2014)","DOI":"10.1109\/ARES.2014.43"},{"issue":"1","key":"318_CR15","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10462-010-9199-1","volume":"36","author":"A DUlizia","year":"2011","unstructured":"DUlizia, A., Ferri, F., Grifoni, P.: A survey of grammatical inference methods for natural language learning. Artif. Intell. Rev. 36(1), 1\u201327 (2011)","journal-title":"Artif. Intell. Rev."},{"key":"318_CR16","doi-asserted-by":"crossref","DOI":"10.1201\/9780429246593","volume-title":"An Introduction to the Bootstrap","author":"B Efron","year":"1994","unstructured":"Efron, B., Tibshirani, R.J.: An Introduction to the Bootstrap. CRC Press, Boca Raton (1994)"},{"key":"318_CR17","unstructured":"Eiland, E.E., Evans, S.C., Markham, T.S., Impson, J.D.: MDL compress system and method for signature inference and masquerade intrusion detection, December\u00a04 (2012) https:\/\/www.google.com\/patents\/US8327443 . US Patent 8,327,443"},{"issue":"1","key":"318_CR18","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1007\/s11416-006-0026-9","volume":"3","author":"E Filiol","year":"2007","unstructured":"Filiol, E., Jacob, G., Le Liard, M.: Evaluation methodology and theoretical model for antiviral behavioural detection strategies. J. Comput. Virol. 3(1), 23\u201337 (2007)","journal-title":"J. Comput. Virol."},{"key":"318_CR19","unstructured":"Gotz, D., Stavropoulos, H., Sun, J., Wang, F.: ICDA: a platform for intelligent care delivery analytics. In: AMIA Annual Sympossium Proceedings, vol. 2012, pp. 264\u2013273, (2012). ISSN 1942-597X http:\/\/www.ncbi.nlm.nih.gov\/pmc\/articles\/PMC3540495\/"},{"key":"318_CR20","doi-asserted-by":"crossref","unstructured":"Gr\u00fcnwald, P.D.: A Tutorial Introduction to the Minimum Description Length Principle. In: Advances in Minimum Description Length: Theory and Applications. MIT Press (2005)","DOI":"10.7551\/mitpress\/1114.001.0001"},{"issue":"9","key":"318_CR21","doi-asserted-by":"publisher","first-page":"1243","DOI":"10.1109\/32.6168","volume":"14","author":"D Hoffman","year":"1988","unstructured":"Hoffman, D., Richard, S.: Trace specifications: methodology and models. IEEE Trans. Softw. Eng. 14(9), 1243\u20131252 (1988)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"318_CR22","doi-asserted-by":"crossref","unstructured":"Jacob, G., Debar, H., Filiol, E.: Malware behavioral detection by attribute-automata using abstraction from platform and language. In: International Workshop on Recent Advances in Intrusion Detection, pp. 81\u2013100. Springer (2009)","DOI":"10.1007\/978-3-642-04342-0_5"},{"key":"318_CR23","unstructured":"Johnson, Jeff.: Designing with the Mind in Mind: Simple Guide to Understanding User Interface Design Guidelines. Morgan Kaufmann, Amsterdam ; Boston, 2 edition, (2014). ISBN 978-0-12-407914-4"},{"key":"318_CR24","unstructured":"Joo, S.W., Chellappa, R.: Attribute grammar-based event recognition and anomaly detection. In: Conference on Computer Vision and Pattern Recognition Workshop, 2006. CVPRW\u201906, pp. 107\u2013107. IEEE (2006)"},{"issue":"1","key":"318_CR25","doi-asserted-by":"publisher","first-page":"59","DOI":"10.1109\/2945.841121","volume":"6","author":"DA Keim","year":"2000","unstructured":"Keim, D.A.: Designing pixel-oriented visualization techniques: theory and applications. IEEE Trans. Vis. Comput. Graph. 6(1), 59\u201378 (2000). https:\/\/doi.org\/10.1109\/2945.841121 . ISSN 1077-2626","journal-title":"IEEE Trans. Vis. Comput. Graph."},{"issue":"1\u20132","key":"318_CR26","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1002\/nav.3800020109","volume":"2","author":"HW Kuhn","year":"1955","unstructured":"Kuhn, H.W.: The Hungarian method for the assignment problem. Naval Res. Logist. Q. 2(1\u20132), 83\u201397 (1955)","journal-title":"Naval Res. Logist. Q."},{"key":"318_CR27","first-page":"1","volume":"13","author":"R Luh","year":"2016","unstructured":"Luh, R., Marschalek, S., Kaiser, M., Janicke, H., Schrittwieser, S.: Semantics-aware detection of targeted attacks: a survey. J. Comput. Virol. Hack. Tech. 13, 1\u201339 (2016)","journal-title":"J. Comput. Virol. Hack. Tech."},{"key":"318_CR28","doi-asserted-by":"crossref","unstructured":"Luh, R., Schrittwieser, S., Marschalek, S.: TAON: An ontology-based approach to mitigating targeted attacks. In: Proceedings of the 18th International Conference on Information Integration and Web-Based Applications & Services. ACM (2016)","DOI":"10.1145\/3011141.3011157"},{"key":"318_CR29","doi-asserted-by":"publisher","unstructured":"Luh, R., Schramm, G., Wagner, M., Schrittwieser, S.: Sequitur-based inference and analysis framework for malicious system behavior. In: Proceedings of the 3rd International Conference on Information Systems Security and Privacy (ICISSP 2017), pp. 632\u2013643, (2017). ISBN 978-989-758-209-7. https:\/\/doi.org\/10.5220\/0006250206320643","DOI":"10.5220\/0006250206320643"},{"key":"318_CR30","doi-asserted-by":"crossref","unstructured":"Luh, R., Schrittwieser, S., Marschalek, S., Janicke, H.: Design of an anomaly-based threat detection & explication system. In: Proceedings of the 3rd International Conference on Information Systems Security & Privacy. SCITEPRESS (2017)","DOI":"10.5220\/0006205203970402"},{"key":"318_CR31","doi-asserted-by":"crossref","unstructured":"Marschalek, S., Luh, R., Kaiser, M., Schrittwieser, S.: Classifying malicious system behavior using event propagation trees. In: Proceedings of the 17th International Conference on Information Integration and Web-Based Applications & Services. Association for Computational Linguistics (2015)","DOI":"10.1145\/2837185.2837199"},{"key":"318_CR32","doi-asserted-by":"crossref","unstructured":"McClosky, D., Charniak, E., Johnson, M.: Effective self-training for parsing. In: Proceedings of the Main Conference on Human Language Technology Conference of the North American Chapter of the Association of Computational Linguistics, pp. 152\u2013159. Association for Computational Linguistics (2006)","DOI":"10.3115\/1220835.1220855"},{"key":"318_CR33","doi-asserted-by":"publisher","first-page":"286","DOI":"10.1016\/j.cag.2013.11.002","volume":"38","author":"S Miksch","year":"2014","unstructured":"Miksch, S., Aigner, W.: A matter of time: applying a data-users-tasks design triangle to visual analytics of time-oriented data. Comput. Graph. 38, 286\u2013290 (2014). https:\/\/doi.org\/10.1016\/j.cag.2013.11.002","journal-title":"Comput. Graph."},{"key":"318_CR34","volume-title":"An Introduction to Kolmogorov Complexity and Its Applications","author":"L Ming","year":"1997","unstructured":"Ming, L., Vit\u00e1nyi, P.: An Introduction to Kolmogorov Complexity and Its Applications. Springer, Heidelberg (1997)"},{"key":"318_CR35","unstructured":"Munsey, C.: Economic Espionage: Competing For Trade By Stealing Industrial Secrets. (2013) https:\/\/leb.fbi.gov\/2013\/october-november\/economic-espionage-competing-for-trade-by-stealing-industrial-secrets . Accessed 15 Sept 2015"},{"key":"318_CR36","doi-asserted-by":"crossref","unstructured":"Nakamura, K., Ishiwata, T.: Synthesizing context free grammars from sample strings based on inductive CYK algorithm. In: International Colloquium on Grammatical Inference, pp. 186\u2013195. Springer (2000)","DOI":"10.1007\/978-3-540-45257-7_15"},{"key":"318_CR37","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1613\/jair.374","volume":"7","author":"CG Nevill-Manning","year":"1997","unstructured":"Nevill-Manning, C.G., Witten, I.H.: Identifying hierarchical structure in sequences: a linear-time algorithm. J. Artif. Intell. Res. (JAIR) 7, 67\u201382 (1997)","journal-title":"J. Artif. Intell. Res. (JAIR)"},{"key":"318_CR38","first-page":"69","volume":"7","author":"G Petasis","year":"2004","unstructured":"Petasis, G., Paliouras, G., Karkaletsis, V., Halatsis, C., Spyropoulos, C.D.: e-GRIDS: computationally efficient gramatical inference from positive examples. Grammars 7, 69\u2013110 (2004)","journal-title":"Grammars"},{"issue":"4","key":"318_CR39","doi-asserted-by":"publisher","first-page":"639","DOI":"10.3233\/JCS-2010-0410","volume":"19","author":"K Rieck","year":"2011","unstructured":"Rieck, K., Trinius, P., Willems, C., Holz, T.: Automatic analysis of malware behavior using machine learning. J. Comput. Secur. 19(4), 639\u2013668 (2011). ISSN 0926-227X","journal-title":"J. Comput. Secur."},{"issue":"5","key":"318_CR40","doi-asserted-by":"publisher","first-page":"465","DOI":"10.1016\/0005-1098(78)90005-5","volume":"14","author":"J Rissanen","year":"1978","unstructured":"Rissanen, J.: Modeling by shortest data description. Automatica 14(5), 465\u2013471 (1978)","journal-title":"Automatica"},{"key":"318_CR41","doi-asserted-by":"publisher","DOI":"10.1142\/3303","volume-title":"Handbook of Graph Grammars and Computing by Graph Transformation","author":"G Rozenberg","year":"1997","unstructured":"Rozenberg, G.: Handbook of Graph Grammars and Computing by Graph Transformation, vol. 1. World Scientific, Singapore (1997)"},{"key":"318_CR42","unstructured":"Sakakibara, Y., Kondo, M.: Ga-based learning of context-free grammars using tabular representations. In: ICML, vol. 99, pp. 354\u2013360 (1999)"},{"issue":"12","key":"318_CR43","doi-asserted-by":"publisher","first-page":"2431","DOI":"10.1109\/TVCG.2012.213","volume":"18","author":"Michael Sedlmair","year":"2012","unstructured":"Sedlmair, M., Meyer, M., Munzner, T.: Design study methodology: reflections from the trenches and the stacks 18(12), 2431\u20132440 (2012). ISSN 1077-2626. https:\/\/doi.org\/10.1109\/TVCG.2012.213","journal-title":"IEEE Transactions on Visualization and Computer Graphics"},{"key":"318_CR44","unstructured":"Seginer, Y.: Fast unsupervised incremental parsing. In: Annual Meeting-association for Computational Linguistics, vol.\u00a045, p. 384 (2007)"},{"key":"318_CR45","doi-asserted-by":"crossref","unstructured":"Senin, P., Lin, J., Wang, X., Oates, T., Gandhi, S., Boedihardjo, A.P., Chen, C., Frankenstein, S., Lerner, M.: Grammarviz 2.0: a tool for grammar-based pattern discovery in time series. In: Joint European Conference on Machine Learning and Knowledge Discovery in Databases, pp. 468\u2013472. Springer (2014)","DOI":"10.1007\/978-3-662-44845-8_37"},{"key":"318_CR46","unstructured":"Senin, P., Lin, J., Wang, X., Oates, T., Gandhi, S., Boedihardjo, A.P., Chen, C., Frankenstein, S.: Time series anomaly discovery with grammar-based compression. In: EDBT, pp. 481\u2013492 (2015)"},{"issue":"33","key":"318_CR47","doi-asserted-by":"publisher","first-page":"11629","DOI":"10.1073\/pnas.0409746102","volume":"102","author":"Z Solan","year":"2005","unstructured":"Solan, Z., Horn, D., Ruppin, E., Edelman, S.: Unsupervised learning of natural languages. Proc. Nat. Acad. Sci. U.S.A. 102(33), 11629\u201311634 (2005)","journal-title":"Proc. Nat. Acad. Sci. U.S.A."},{"issue":"1","key":"318_CR48","first-page":"54","volume":"11","author":"AK Sood","year":"2013","unstructured":"Sood, A.K., Enbody, R.J.: Targeted cyberattacks: a superset of advanced persistent threats. IEEE Secur. Priv. 11(1), 54\u201361 (2013)","journal-title":"IEEE Secur. Priv."},{"key":"318_CR49","doi-asserted-by":"crossref","unstructured":"Steedman, M., Osborne, M., Sarkar, A., Clark, S., Hwa, R., Hockenmaier, J., Ruhlen, P., Baker, S., Crim, J.: Bootstrapping statistical parsers from small datasets. In: Proceedings of the Tenth Conference on European Chapter of the Association for Computational Linguistics, vol. 1, pp. 331\u2013338. Association for Computational Linguistics (2003)","DOI":"10.3115\/1067807.1067851"},{"key":"318_CR50","doi-asserted-by":"publisher","first-page":"444","DOI":"10.1016\/j.scico.2014.05.008","volume":"96","author":"Andrew Stevenson","year":"2014","unstructured":"Stevenson, A., Cordy, J.R.: A survey of grammatical inference in software engineering. Sci. Comput. Program. 96, 444\u2013459 (2014)","journal-title":"Science of Computer Programming"},{"key":"318_CR51","unstructured":"Symantec. Symantec Internet Security Threat Report, vol. 20. Whitepaper, (2015)"},{"key":"318_CR52","unstructured":"Thomas, J.J., Cook, K.A. (eds.): Illuminating the Path: The Research and Development Agenda for Visual Analytics. IEEE (2005). ISBN 0769523234"},{"issue":"3","key":"318_CR53","doi-asserted-by":"publisher","first-page":"139","DOI":"10.1002\/bltj.20256","volume":"12","author":"GR Thompson","year":"2007","unstructured":"Thompson, G.R., Flynn, L.A.: Polymorphic malware detection and identification via context-free grammar homomorphism. Bell Labs Tech. J. 12(3), 139\u2013147 (2007)","journal-title":"Bell Labs Tech. J."},{"key":"318_CR54","doi-asserted-by":"crossref","unstructured":"Van\u00a0Zaanen, M.: ABJ: alignment-based learning. In: Proceedings of the 18th Conference on Computational Linguistics, vol. 2, pp. 961\u2013967. Association for Computational Linguistics (2000)","DOI":"10.3115\/992730.992785"},{"key":"318_CR55","doi-asserted-by":"publisher","unstructured":"Wagner, M., Aigner, W., Rind, A., Dornhackl, H., Kadletz, K., Luh, R., Tavolato, P..: Problem characterization and abstraction for visual analytics in behavior-based malware pattern analysis. In: Whitley, K., Engle, S., Harrison, L. Fischer, F., Prigent, N. (Eds.) Proceedings of 11th Workshop on Visualization for Cyber Security, VizSec, pp. 9\u201316. ACM (2014) https:\/\/doi.org\/10.1145\/2671491.2671498","DOI":"10.1145\/2671491.2671498"},{"key":"318_CR56","unstructured":"Wagner, M., Fischer, F., Luh, R., Haberson, A., Rind, A., Keim, D., Aigner, W., Borgo, R., Ganovelli, F., Viola, I.: A survey of visualization systems for malware analysis. In: Eurographics Conference on Visualization, pp. 105\u2013125. EuroGraphics, (2015)"},{"key":"318_CR57","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cose.2017.02.003","volume":"67","author":"M Wagner","year":"2017","unstructured":"Wagner, M., Rind, A., Th\u00fcr, N., Aigner, W.: A knowledge-assisted visual malware analysis system: design, validation, and reflection of kamas. Comput. Secur. 67, 1\u201315 (2017). https:\/\/doi.org\/10.1016\/j.cose.2017.02.003 . ISSN 0167-4048","journal-title":"Comput. Secur."},{"issue":"6","key":"318_CR58","doi-asserted-by":"publisher","first-page":"1221","DOI":"10.1109\/TVCG.2008.172","volume":"14","author":"M Wattenberg","year":"2008","unstructured":"Wattenberg, M., Viegas, F.B.: The word tree, an interactive visual concordance. IEEE Trans. Vis. Comput. Graph. 14(6), 1221\u20131228 (2008). https:\/\/doi.org\/10.1109\/TVCG.2008.172 . ISSN 1077-2626","journal-title":"IEEE Trans. Vis. Comput. Graph."},{"key":"318_CR59","doi-asserted-by":"publisher","unstructured":"Wattenberg, M.: Arc diagrams: visualizing structure in strings. In: Proceeding of IEEE Sympossium Information Visualization (InfoVis), pp. 110\u2013116. (2002) https:\/\/doi.org\/10.1109\/INFVIS.2002.1173155","DOI":"10.1109\/INFVIS.2002.1173155"},{"issue":"5","key":"318_CR60","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1145\/253769.253801","volume":"40","author":"P Wegner","year":"1997","unstructured":"Wegner, P.: Why interaction is more powerful than algorithms. Commun. ACM 40(5), 80\u201391 (1997). ISSN 0001-0782","journal-title":"Commun. ACM"},{"key":"318_CR61","unstructured":"Wongsuphasawat, K., Gotz, D.: Outflow: visualizing patient flow by symptoms and outcome. In: IEEE VisWeek Workshop on Visual Analytics in Healthcare, Providence, Rhode Island, USA (2011)"},{"issue":"3","key":"318_CR62","doi-asserted-by":"publisher","first-page":"431","DOI":"10.1109\/TSE.2010.3","volume":"36","author":"C Zhao","year":"2010","unstructured":"Zhao, C., Kong, J., Zhang, K.: Program behavior discovery and verification: a graph grammar approach. IEEE Trans. Softw. Eng. 36(3), 431\u2013448 (2010)","journal-title":"IEEE Trans. Softw. Eng."}],"container-title":["Journal of Computer Virology and Hacking Techniques"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11416-018-0318-x\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-018-0318-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-018-0318-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,3]],"date-time":"2025-07-03T00:07:57Z","timestamp":1751501277000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11416-018-0318-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,3,26]]},"references-count":62,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2018,11]]}},"alternative-id":["318"],"URL":"https:\/\/doi.org\/10.1007\/s11416-018-0318-x","relation":{},"ISSN":["2263-8733"],"issn-type":[{"type":"electronic","value":"2263-8733"}],"subject":[],"published":{"date-parts":[[2018,3,26]]},"assertion":[{"value":"11 July 2017","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 March 2018","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 March 2018","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}