{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,27]],"date-time":"2026-03-27T02:07:21Z","timestamp":1774577241680,"version":"3.50.1"},"reference-count":18,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010,10]]},"DOI":"10.1109\/malware.2010.5665796","type":"proceedings-article","created":{"date-parts":[[2010,12,21]],"date-time":"2010-12-21T23:39:39Z","timestamp":1292974779000},"page":"23-30","source":"Crossref","is-referenced-by-count":106,"title":["Differentiating malware from cleanware using behavioural analysis"],"prefix":"10.1109","author":[{"given":"Ronghua","family":"Tian","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rafiqul","family":"Islam","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lynn","family":"Batten","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Steve","family":"Versteeg","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","first-page":"336","article-title":"Signature Generation and Detection of Malware Families","author":"sathyanarayan","year":"2008","journal-title":"Information Security and Privacy 13th Australasian Conference ACISP 2008"},{"key":"ref11","author":"schipka","year":"0","journal-title":"White Paper The Online Shadow Economy A Billion Dollar Market For Malware Authors"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2008.4690860"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2009.5403021"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-007-0074-9"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSN.2009.60"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICHIS.2004.75"},{"key":"ref17","doi-asserted-by":"crossref","first-page":"298","DOI":"10.1109\/TSMCC.2009.2037978","article-title":"Cimds: Adapting Postprocessing Techniques of Associative Classification for Malware Detection","volume":"40","author":"ye","year":"2010","journal-title":"Systems Man and Cybernetics Part C Applications and Reviews IEEE Transactions on"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/IC4E.2010.78"},{"key":"ref4","first-page":"8","article-title":"Detours: binary interception of win32 functions","author":"hunt","year":"1999","journal-title":"USENIX"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1002\/0471200611"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.21"},{"key":"ref5","year":"0","journal-title":"K-fold Cross Validation"},{"key":"ref8","first-page":"103","article-title":"Automated reverse engineering tool","author":"ravindran","year":"2006","journal-title":"10th Colloquium for Information Systems Security Education University of Maryland"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2008.4565046"},{"key":"ref2","author":"canzanese r j oyer","year":"0","journal-title":"A Survey of Reverse Engineering Tools for the 32-Bit Microsoft Windows Environment"},{"key":"ref9","first-page":"35","article-title":"Idea: Opcode-sequence-based malware detection","author":"santos","year":"2010","journal-title":"Engineering Secure Software and Systems Second International Symposium ESSoS 2010 Pisa"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1654988.1655003"}],"event":{"name":"2010 5th International Conference on Malicious and Unwanted Software (MALWARE)","location":"Nancy, France","start":{"date-parts":[[2010,10,19]]},"end":{"date-parts":[[2010,10,20]]}},"container-title":["2010 5th International Conference on Malicious and Unwanted Software"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5655114\/5665785\/05665796.pdf?arnumber=5665796","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,19]],"date-time":"2017-06-19T17:30:45Z","timestamp":1497893445000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5665796\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,10]]},"references-count":18,"URL":"https:\/\/doi.org\/10.1109\/malware.2010.5665796","relation":{},"subject":[],"published":{"date-parts":[[2010,10]]}}}