{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T02:26:13Z","timestamp":1780626373381,"version":"3.54.1"},"reference-count":51,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100006013","name":"United Arab Emirates University Start-up","doi-asserted-by":"publisher","award":["G00003261"],"award-info":[{"award-number":["G00003261"]}],"id":[{"id":"10.13039\/501100006013","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/tifs.2020.2980190","type":"journal-article","created":{"date-parts":[[2020,3,11]],"date-time":"2020-03-11T21:06:33Z","timestamp":1583960793000},"page":"3051-3066","source":"Crossref","is-referenced-by-count":11,"title":["<i>CPA<\/i>: Accurate <i>C<\/i>ross-<i>P<\/i>latform Binary <i>A<\/i>uthorship Characterization Using LDA"],"prefix":"10.1109","volume":"15","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8842-493X","authenticated-orcid":false,"given":"Saed","family":"Alrabaee","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7441-7541","authenticated-orcid":false,"given":"Lingyu","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","year":"2015","journal-title":"Programmer De-anonymization from Binary Executables"},{"key":"ref38","year":"2011","journal-title":"Paper Supplementary Material"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2609907"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.14778\/2311906.2311909"},{"key":"ref31","year":"2018","journal-title":"CRT Alphabetical Function Reference"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1080\/00437956.1954.11659520"},{"key":"ref37","year":"2015","journal-title":"The Scalable Native Graph Database"},{"key":"ref36","first-page":"256","article-title":"On the feasibility of malware authorship attribution","author":"alrabaee","year":"2016","journal-title":"Proc Int Symp Found Pract Secur"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517315"},{"key":"ref34","first-page":"993","article-title":"Latent Dirichlet allocation","volume":"3","author":"blei","year":"2003","journal-title":"J Mach Learn Res"},{"key":"ref28","year":"2017","journal-title":"Windows API Sets"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611972870.13"},{"key":"ref29","year":"2017","journal-title":"Linux API Sets"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/360402.360419"},{"key":"ref1","author":"caliskan-islam","year":"2015","journal-title":"De-anonymizing Programmers via Code Stylometry"},{"key":"ref20","year":"2011","journal-title":"IDA pro Fast Library Identification and Recognition Technology"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1147\/sj.402.0426"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99073-6_2"},{"key":"ref24","article-title":"Polymorphic worm detection using structural information of executables","author":"kruegel","year":"2005","journal-title":"Recent Advances in Intrusion Detection"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2015.05.015"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2015.01.011"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2019.01.028"},{"key":"ref50","volume":"11","author":"moran","year":"2013","journal-title":"Supply Chain Analysis From Quartermaster to Sun-Shop"},{"key":"ref51","year":"2019","journal-title":"McSema is an Executable Lifter"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2901951"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00069"},{"key":"ref40","year":"2015","journal-title":"Hex-Rays Decompiler"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2018.1870876"},{"key":"ref13","year":"2019","journal-title":"Cyber Grand Challenge"},{"key":"ref14","year":"2015","journal-title":"Big Game Hunting Nation-State Malware Research BlackHat"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.17"},{"key":"ref16","first-page":"16","article-title":"Trusses: Cohesive subgraphs for social network analysis","author":"cohen","year":"2008"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-16354-3_42"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/0378-8733(83)90028-X"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D16-1191"},{"key":"ref4","article-title":"When coding style survives compilation: De-anonymizing programmers from executable binaries","author":"caliskan","year":"2015","journal-title":"arXiv 1512 08546"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2014.03.012"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_16"},{"key":"ref5","first-page":"172","article-title":"Who wrote this code? Identifying the authors of program binaries","author":"rosenblum","year":"2011","journal-title":"Computer Security"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134627"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"ref49","first-page":"8","article-title":"Scalable, behavior-based malware clustering","volume":"9","author":"bayer","year":"2009","journal-title":"Proc NDSS"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2017.27"},{"key":"ref46","first-page":"226","article-title":"A density-based algorithm for discovering clusters in large spatial databases with noise","volume":"96","author":"ester","year":"1996","journal-title":"Proc KDD"},{"key":"ref45","year":"2016","journal-title":"Tigress is a Diversifying Virtualizer\/Obfuscator for the C Language"},{"key":"ref48","author":"chen","year":"2018","journal-title":"NO to Overfitting"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1186\/s13635-017-0055-6"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00003"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/SPRO.2015.10"},{"key":"ref44","article-title":"Scientific but not academical overview of malware anti-debugging, anti-disassembly and anti-VM technologies","author":"branco","year":"2012"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516664"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/8833568\/09032128.pdf?arnumber=9032128","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T17:01:02Z","timestamp":1651078862000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9032128\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":51,"URL":"https:\/\/doi.org\/10.1109\/tifs.2020.2980190","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]}}}