{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,16]],"date-time":"2026-03-16T14:08:40Z","timestamp":1773670120181,"version":"3.50.1"},"reference-count":22,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009,10]]},"DOI":"10.1109\/malware.2009.5403019","type":"proceedings-article","created":{"date-parts":[[2010,2,12]],"date-time":"2010-02-12T14:31:47Z","timestamp":1265985107000},"page":"39-46","source":"Crossref","is-referenced-by-count":37,"title":["Classification and detection of metamorphic malware using value set analysis"],"prefix":"10.1109","author":[{"given":"Felix","family":"Leder","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bastian","family":"Steinbock","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peter","family":"Martini","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","year":"1995","journal-title":"Tool Interface Standard (TIS) Executable and Linking Format (ELF) Specification"},{"key":"ref11","author":"balakrishnan","year":"2007","journal-title":"Wysinwyx What you see is not what you execute"},{"key":"ref12","article-title":"An undetectable computer virus","author":"chess","year":"2000","journal-title":"In Proc of the 2000 Virus Bulletin Conference (VB2000)"},{"key":"ref13","article-title":"Symantec internet security threat report","volume":"xiii","author":"coorp","year":"2008","journal-title":"Whitepaper"},{"key":"ref14","doi-asserted-by":"crossref","DOI":"10.1007\/11790754_8","article-title":"Detecting self-mutating malware using control-flow graph matching","author":"bruschi","year":"2006","journal-title":"Proc Int'l Conf Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA)"},{"key":"ref15","article-title":"Using code normalization for fighting self-mutating malware","author":"bruschi","year":"2006","journal-title":"In Proceedings of International Symposium on Secure Software Engineering"},{"key":"ref16","article-title":"Malware normalization","year":"2005","journal-title":"Technical Report 1539"},{"key":"ref17","article-title":"Structural comparison of executable objects","author":"flake","year":"2004","journal-title":"Proc Int'l Conf Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA)"},{"key":"ref18","author":"kapoor","year":"2004","journal-title":"An Approach Towards Disassembly of Malicious Binary Executables"},{"key":"ref19","year":"2009"},{"key":"ref4","year":"2009"},{"key":"ref3","year":"2009"},{"key":"ref6","year":"2009"},{"key":"ref5","year":"2009"},{"key":"ref8","year":"2009"},{"key":"ref7","year":"2009"},{"key":"ref2","year":"2009"},{"key":"ref1","year":"2009"},{"key":"ref9","year":"2009"},{"key":"ref20","author":"rivest","year":"0","journal-title":"The md5 message-digest algorithm (rfc 1321)"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.9"},{"key":"ref21","author":"szor","year":"2005","journal-title":"The Art of Computer Virus Research and Defense"}],"event":{"name":"2009 4th International Conference on Malicious and Unwanted Software (MALWARE)","location":"Montreal, Quebec, Canada","start":{"date-parts":[[2009,10,13]]},"end":{"date-parts":[[2009,10,14]]}},"container-title":["2009 4th International Conference on Malicious and Unwanted Software (MALWARE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5392747\/5403012\/05403019.pdf?arnumber=5403019","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,19]],"date-time":"2017-06-19T04:43:04Z","timestamp":1497847384000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5403019\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,10]]},"references-count":22,"URL":"https:\/\/doi.org\/10.1109\/malware.2009.5403019","relation":{},"subject":[],"published":{"date-parts":[[2009,10]]}}}