{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T16:14:18Z","timestamp":1784823258026,"version":"3.55.0"},"reference-count":59,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"12","license":[{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100007136","name":"Secretar\u00eda de Estado de Investigaci\u00f3n, Desarrollo e Innovaci\u00f3n","doi-asserted-by":"publisher","award":["TIN2016-79095-C2-2-R"],"award-info":[{"award-number":["TIN2016-79095-C2-2-R"]}],"id":[{"id":"10.13039\/501100007136","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100007136","name":"Secretar\u00eda de Estado de Investigaci\u00f3n, Desarrollo e Innovaci\u00f3n","doi-asserted-by":"publisher","award":["TIN2015-7013-R"],"award-info":[{"award-number":["TIN2015-7013-R"]}],"id":[{"id":"10.13039\/501100007136","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Regional Government of Madrid","award":["CIBERDINE (S2013\/ICE-3095)"],"award-info":[{"award-number":["CIBERDINE (S2013\/ICE-3095)"]}]},{"name":"Regional Government of Madrid","award":["N-GREENS (S2013\/ICE-2731)"],"award-info":[{"award-number":["N-GREENS (S2013\/ICE-2731)"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2019,12]]},"DOI":"10.1109\/tifs.2018.2885512","type":"journal-article","created":{"date-parts":[[2018,12,7]],"date-time":"2018-12-07T20:08:32Z","timestamp":1544213312000},"page":"3175-3190","source":"Crossref","is-referenced-by-count":53,"title":["The MalSource Dataset: Quantifying Complexity and Code Reuse in Malware Development"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9772-7606","authenticated-orcid":false,"given":"Alejandro","family":"Calleja","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Juan","family":"Tapiador","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Juan","family":"Caballero","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","year":"2017","journal-title":"Cve-2003-0533 Vulnerability"},{"key":"ref38","year":"2017","journal-title":"Ssdeep"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.1996.564992"},{"key":"ref32","first-page":"337","article-title":"Metrics for assessing a software system’s maintainability","author":"oman","year":"1992","journal-title":"Proc Conf Softw Maintenance"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0017737"},{"key":"ref30","year":"2016","journal-title":"UCC"},{"key":"ref37","first-page":"46","article-title":"Pattern-matching-the gestalt approach","volume":"13","author":"ratcliff","year":"1988","journal-title":"Dr Dobbs J"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2007.30"},{"key":"ref35","year":"2018","journal-title":"Code Metrics Values in Microsoft’s Visual Studio"},{"key":"ref34","article-title":"Elements of software science","author":"halstead","year":"1977","journal-title":"Operating and Programming Systems Series"},{"key":"ref28","year":"2016","journal-title":"Radon"},{"key":"ref27","year":"2016","journal-title":"JHawk"},{"key":"ref29","year":"2016","journal-title":"Eclipse Metrics Plugin"},{"key":"ref2","year":"2016","journal-title":"27% of all Recorded Malware Appeared in 2015"},{"key":"ref1","year":"2017","journal-title":"Symantec 2015 Internet Security Threat Report"},{"key":"ref20","author":"jones","year":"1996","journal-title":"Table of Programming Languages and Levels - Version 8 2"},{"key":"ref22","author":"boehm","year":"1981","journal-title":"Software Engineering Economics"},{"key":"ref21","author":"sommerville","year":"2006","journal-title":"Software Engineering (Update)"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2016.147"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1976.233837"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2015.46"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/WPC.1999.777757"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.58"},{"key":"ref51","article-title":"MalwareLab: Experimentation with cybercrime attack tools","author":"allodi","year":"2013","journal-title":"Proc of USENIX Cyber Security Experimentation and Test (CSET) Workshop"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/1806672.1806678"},{"key":"ref58","first-page":"28","article-title":"Bitshred: Fast, scalable code reuse detection in binary code (CMU-CyLab-10-006)","author":"jang","year":"2009","journal-title":"Proc CyLab"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3052974"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2006.28"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.1996.565012"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.1998.738528"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.1995.514697"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557575"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2009.02.007"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2002.1019480"},{"key":"ref40","year":"2017","journal-title":"Virtual Code Obfuscation by ROI G BIV"},{"key":"ref12","first-page":"408","article-title":"On the reverse engineering of the citadel botnet","author":"rahimian","year":"2013","journal-title":"Proc 5th Int Symp Found Practice Secur"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45719-2_15"},{"key":"ref14","year":"2017","journal-title":"VX heavens"},{"key":"ref15","year":"2015","journal-title":"CLOC"},{"key":"ref16","first-page":"1","article-title":"A SLOC counting standard","author":"nguyen","year":"2007","journal-title":"COCOMO II Forum"},{"key":"ref17","first-page":"83","article-title":"Measuring application development productivity","author":"albrecht","year":"1979","journal-title":"Proc Of IBM App Develop Symp"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1983.235271"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/2.471193"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382283"},{"key":"ref3","first-page":"13","article-title":"Measuring pay-per-install: The commoditization of malware distribution","author":"caballero","year":"2011","journal-title":"Proc 20th USENIX Conf Secur"},{"key":"ref6","article-title":"Framing dependencies introduced by underground commoditization","author":"thomas","year":"2015","journal-title":"Proc Workshop Econ Inform Secur"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590302"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-44599-1_8"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.101613.00077"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2003.1177002"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36563-8_13"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866354"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23237"},{"key":"ref48","first-page":"256","article-title":"De-anonymizing programmers via code stylometry","author":"caliskan-islam","year":"2015","journal-title":"Proc Usenix Secur Symp"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2007.03.004"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.59"},{"key":"ref41","author":"torres","year":"2018","journal-title":"Why Code Comments Still Matter"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.5120\/ijca2016908896"},{"key":"ref43","first-page":"64","article-title":"A survey on software clone detection research","author":"roy","year":"2007"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/8782892\/08568018.pdf?arnumber=8568018","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T20:54:08Z","timestamp":1657745648000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8568018\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,12]]},"references-count":59,"journal-issue":{"issue":"12"},"URL":"https:\/\/doi.org\/10.1109\/tifs.2018.2885512","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,12]]}}}