{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,6]],"date-time":"2024-09-06T11:15:43Z","timestamp":1725621343240},"reference-count":37,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016,10]]},"DOI":"10.1109\/malware.2016.7888729","type":"proceedings-article","created":{"date-parts":[[2017,3,31]],"date-time":"2017-03-31T04:55:59Z","timestamp":1490936159000},"page":"1-10","source":"Crossref","is-referenced-by-count":2,"title":["Automatic extraction of malicious behaviors"],"prefix":"10.1109","author":[{"given":"Khanh-Huu-The","family":"Dam","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tayssir","family":"Touili","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36742-7_29"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/371920.372186"},{"journal-title":"At&t at trec-7","year":"1999","author":"singhal","key":"ref31"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/243199.243206"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557167"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/11735106_13"},{"journal-title":"Analysis and detection of metamorphic computerviruses","year":"2006","author":"wong","key":"ref35"},{"key":"ref34","article-title":"Mal-id: Automatic malware detection using common segment analysis and meta-features","author":"tahan","year":"2012","journal-title":"J Mach Learn Res"},{"journal-title":"The IDA Pro Book","year":"2011","author":"eagle","key":"ref10"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14257\/ijsia.2013.7.5.03"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.11"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.14429\/dsj.66.9701"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.11113\/jt.v77.3558"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-011-0151-y"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2008.74"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014105"},{"key":"ref18","article-title":"Feature selection and extraction for malware classification","author":"lin","year":"2015","journal-title":"Journal of Information Science and Engineering"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40203-6_29"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2001.924286"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ENABL.1999.805197"},{"key":"ref27","article-title":"Noa: An information retrieval based malware detection system","author":"santos","year":"2013","journal-title":"Computing and Informatics"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.5121\/ijaia.2013.4411"},{"key":"ref6","article-title":"An information retrieval approach for malware classification based on windows API calls","author":"cheng","year":"2013","journal-title":"2013 International Conference on Machine Learning and Cybernetics"},{"key":"ref29","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-04342-0_7","article-title":"Pe-miner: Mining structural information to detect malicious executables in realtime","author":"shafiq","year":"2009","journal-title":"Recent Advances in Intrusion Detection"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/QRS.2015.26"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1287624.1287628"},{"key":"ref7","article-title":"Static analysis of executables to detect malicious patterns","author":"christodorescu","year":"2003","journal-title":"SSYM'03"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22110-1_10"},{"journal-title":"An Introduction to Information Retrieval","year":"2009","author":"christopher","key":"ref9"},{"journal-title":"CAV 2008","article-title":"Jakstab: A static analysis platform for binaries","year":"2008","key":"ref1"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/s10796-007-9054-3"},{"key":"ref22","article-title":"A hybrid approach for control flow graph construction from binary code","author":"nguyen","year":"2013","journal-title":"APSEC 2013"},{"key":"ref21","article-title":"Static index pruning for information retrieval systems: A posting-based approach","author":"nguyen","year":"2009","journal-title":"Workshop on Large-Scale Distributed Systems for Information Retrieval 2009"},{"key":"ref24","article-title":"Learning and classification of malware behavior","author":"rieck","year":"2008","journal-title":"DIMVA'08"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523659"},{"key":"ref26","article-title":"Okapi at trec-3","author":"robertson","year":"1995","journal-title":"NIST SPECIAL PUBLICATION SP"},{"journal-title":"The Probabilistic Relevance Framework BM25 and Beyond","year":"2009","author":"robertson","key":"ref25"}],"event":{"name":"2016 11th International Conference on Malicious and Unwanted Software (MALWARE)","start":{"date-parts":[[2016,10,18]]},"location":"Fajardo, PR, USA","end":{"date-parts":[[2016,10,21]]}},"container-title":["2016 11th International Conference on Malicious and Unwanted Software (MALWARE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7884714\/7888717\/07888729.pdf?arnumber=7888729","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,20]],"date-time":"2019-09-20T12:11:12Z","timestamp":1568981472000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7888729\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,10]]},"references-count":37,"URL":"https:\/\/doi.org\/10.1109\/malware.2016.7888729","relation":{},"subject":[],"published":{"date-parts":[[2016,10]]}}}