{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T06:19:21Z","timestamp":1777961961158,"version":"3.51.4"},"reference-count":16,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010,5]]},"DOI":"10.1109\/icc.2010.5501969","type":"proceedings-article","created":{"date-parts":[[2010,7,12]],"date-time":"2010-07-12T14:22:30Z","timestamp":1278944550000},"page":"1-5","source":"Crossref","is-referenced-by-count":20,"title":["Towards a Theory of Generalizing System Call Representation for In-Execution Malware Detection"],"prefix":"10.1109","author":[{"given":"B.","family":"Mehdi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"F.","family":"Ahmed","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"S. A.","family":"Khayyam","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"M.","family":"Farooq","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","year":"0","journal-title":"VX Heavens Virus Collection"},{"key":"ref11","author":"quinlan","year":"1993","journal-title":"C4 5 Programs for Machine Learning"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/B978-1-55860-377-6.50023-2"},{"key":"ref13","first-page":"185","article-title":"Fast training of support vector machines using sequential minimal optimization","author":"platt","year":"1998","journal-title":"Advances in Kernel Methods Support Vector Learning"},{"key":"ref14","author":"witten","year":"2005","journal-title":"Data Mining Practical Machine Learning Tools and Techniques"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1127345.1127348"},{"key":"ref16","first-page":"20","article-title":"Learning Rules from System Call Arguments and Sequences for Anomaly Detection","author":"tandon","year":"2003","journal-title":"ICDM Workshop on Data Mining for Computer Security (DMSEC)"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_6"},{"key":"ref3","first-page":"412","article-title":"Detecting Worms via Mining Dynamic Program Execution","author":"wang","year":"2007","journal-title":"Proceedings of Third International Conference on Security and Privacy in Communication Networks and the Workshops SecureComm"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-71549-8_13"},{"key":"ref5","first-page":"13","article-title":"Feature Selection Using a Genetic Algorithm for Intrusion Detection","author":"helmer","year":"1999","journal-title":"Proceedings of the Genetic and Evolutionary Computation Conference GECCO"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_5"},{"key":"ref7","first-page":"19","article-title":"Behavioral Distance Measurement Using Hidden Markov Models","volume":"4219","author":"gao","year":"2006","journal-title":"Proceedings of 9th international symposium RAID 2006"},{"key":"ref2","article-title":"Data Mining Approaches to Intrusion Detection","author":"lee","year":"1998","journal-title":"proceedings of 7th USENIX Security Symposium"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1996.502675"},{"key":"ref9","first-page":"336","article-title":"Signature Generation and Detection of Malware Families","author":"sathyanarayan","year":"0","journal-title":"Proceedings of the 13th Australasian Conference on Information Security and Privacy"}],"event":{"name":"ICC 2010 - 2010 IEEE International Conference on Communications","location":"Cape Town, South Africa","start":{"date-parts":[[2010,5,23]]},"end":{"date-parts":[[2010,5,27]]}},"container-title":["2010 IEEE International Conference on Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5497983\/5501741\/05501969.pdf?arnumber=5501969","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,18]],"date-time":"2017-03-18T23:30:11Z","timestamp":1489879811000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5501969\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,5]]},"references-count":16,"URL":"https:\/\/doi.org\/10.1109\/icc.2010.5501969","relation":{},"subject":[],"published":{"date-parts":[[2010,5]]}}}