{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T08:05:04Z","timestamp":1772093104505,"version":"3.50.1"},"reference-count":29,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,1,5]],"date-time":"2026-01-05T00:00:00Z","timestamp":1767571200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,5]],"date-time":"2026-01-05T00:00:00Z","timestamp":1767571200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,1,5]]},"DOI":"10.1109\/ccwc67433.2026.11393775","type":"proceedings-article","created":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T20:53:57Z","timestamp":1772052837000},"page":"0567-0572","source":"Crossref","is-referenced-by-count":0,"title":["Characterizing Symbolic Execution Behavior on Evasive Malware"],"prefix":"10.1109","author":[{"given":"Rachel","family":"Soubier","sequence":"first","affiliation":[{"name":"University of North Carolina,Department of Computer Science,Wilmington,NC,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shahid","family":"Ali","sequence":"additional","affiliation":[{"name":"University of North Carolina,Department of Computer Science,Wilmington,NC,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ajay Kumara Makanahalli","family":"Annaiah","sequence":"additional","affiliation":[{"name":"University of North Carolina,Department of Computer Science,Wilmington,NC,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3634737.3637658"},{"key":"ref2","doi-asserted-by":"crossref","first-page":"S118","DOI":"10.1016\/j.diin.2018.04.024","article-title":"Deep learning at the shallow end: Malware classification for non-domain experts","volume":"26","author":"Le","year":"2018","journal-title":"Digital Investigation"},{"key":"ref3","doi-asserted-by":"crossref","first-page":"104193","DOI":"10.1016\/j.cose.2024.104193","article-title":"Beyond the sandbox: Leveraging symbolic execution for evasive malware classification","volume":"149","author":"Vouvoutsis","year":"2025","journal-title":"Computers & Security"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3182657"},{"key":"ref5","article-title":"Symbolic execution in practice: A survey of applications in vulnerability, malware, firmware, and protocol analysis","volume-title":"arXiv","author":"Bailey","year":"2025"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.17"},{"key":"ref7","first-page":"209","article-title":"Klee: unassisted and automatic generation of high-coverage tests for complex systems programs","volume-title":"Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation (OSDI)","author":"Cadar","year":"2008"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180251"},{"key":"ref9","first-page":"61","article-title":"Comparing malware evasion theory with practice: Results from interviews with expert analysts","volume-title":"Twentieth Symposium on Usable Privacy and Security (SOUPS 2024)","author":"Wong","year":"2024"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.21"},{"key":"ref11","first-page":"287","article-title":"BareCloud: Bare-metal analysis-based evasive malware detection","volume-title":"23rd USENIX Security Symposium (USENIX Security 14)","author":"Kirat","year":"2014"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-41579-2_3"},{"key":"ref13","volume-title":"A new approach for detecting process injection attacks using memory analysis","author":"Nasereddin","year":"2022"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991114"},{"key":"ref15","first-page":"65","article-title":"TaintPipe: Pipelined symbolic taint analysis","volume-title":"24th USENIX Security Symposium (USENIX Security 15)","author":"Ming","year":"2015"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813663"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78800-3_24"},{"key":"ref18","article-title":"Vx-underground","volume-title":"vx-underground","author":"Team","year":"2025"},{"key":"ref19","article-title":"Emotet malware","year":"2018","journal-title":"Alert (TA18-201A)"},{"key":"ref20","article-title":"Cybersecurity advisory: Aa21-076a","year":"2021","journal-title":"Advisory (AA21-076A)"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ECRIME.2017.7945052"},{"key":"ref22","volume-title":"Agenttesla malware, technical analysis - version 1.0","year":"2024"},{"key":"ref23","article-title":"Qbot \/ qakbot malware","volume-title":"Online slide deck","year":"2020"},{"key":"ref24","article-title":"Dridex (software id s0384)","volume-title":"MITRE ATT&CK Enterprise Software Database","author":"Corporation","year":"2025"},{"key":"ref25","article-title":"Cybersecurity advisory: Aa20-266a","year":"2020","journal-title":"Advisory (AA20-266A)"},{"key":"ref26","article-title":"Azorult (software id s0344)","volume-title":"MITRE ATT&CK Enterprise Software Database","author":"Corporation","year":"2025"},{"key":"ref27","article-title":"Dismantling zloader: How malicious ads led to disabled security tools and ransomware","volume-title":"Microsoft Security Blog","year":"2022"},{"key":"ref28","article-title":"Icedid (software id s0483)","volume-title":"MITRE ATT&CK Enterprise Software Database","author":"Corporation","year":"2025"},{"key":"ref29","article-title":"SymExE: Characterizing symbolic execution behavior on evasive malware","volume-title":"GitHub repository","author":"Soubier","year":"2025"}],"event":{"name":"2026 IEEE 16th Annual Computing and Communication Workshop and Conference (CCWC)","location":"Las Vegas, NV, USA","start":{"date-parts":[[2026,1,5]]},"end":{"date-parts":[[2026,1,7]]}},"container-title":["2026 IEEE 16th Annual Computing and Communication Workshop and Conference (CCWC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11393680\/11393642\/11393775.pdf?arnumber=11393775","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T07:05:40Z","timestamp":1772089540000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11393775\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1,5]]},"references-count":29,"URL":"https:\/\/doi.org\/10.1109\/ccwc67433.2026.11393775","relation":{},"subject":[],"published":{"date-parts":[[2026,1,5]]}}}