{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,29]],"date-time":"2026-07-29T14:49:46Z","timestamp":1785336586566,"version":"3.55.0"},"reference-count":84,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/tifs.2023.3294059","type":"journal-article","created":{"date-parts":[[2023,7,10]],"date-time":"2023-07-10T18:56:32Z","timestamp":1689015392000},"page":"4530-4545","source":"Crossref","is-referenced-by-count":20,"title":["YAMME: a YAra-byte-signatures Metamorphic Mutation Engine"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7263-4999","authenticated-orcid":false,"given":"Antonio","family":"Coscia","sequence":"first","affiliation":[{"name":"Cybersecurity Laboratory, BV TECH S.p.A., Milano, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1148-332X","authenticated-orcid":false,"given":"Vincenzo","family":"Dentamaro","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Bari Aldo Moro, Bari, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3955-0478","authenticated-orcid":false,"given":"Stefano","family":"Galantucci","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Bari Aldo Moro, Bari, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6526-554X","authenticated-orcid":false,"given":"Antonio","family":"Maci","sequence":"additional","affiliation":[{"name":"Cybersecurity Laboratory, BV TECH S.p.A., Milano, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7305-2210","authenticated-orcid":false,"given":"Giuseppe","family":"Pirlo","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Bari Aldo Moro, Bari, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.3390\/app12178482"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3514229"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2965016"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-658-38826-3_4"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS52919.2021.9486348"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2019.01.002"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3329786"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC54503.2022.9720435"},{"key":"ref9","volume-title":"Yara\u2014The Pattern Matching Swiss Knife For Malware Researchers (and Everyone Else)","year":"2019"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102500"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW.2019.00031"},{"issue":"1","key":"ref12","first-page":"1","article-title":"YARA-signator: Automated generation of code-based YARA rules","volume":"5","author":"Bilstein","year":"2019","journal-title":"J. Cybercrime Digit. Invest."},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3411508.3421372"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICCWS48432.2020.9292390"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-17551-0_21"},{"key":"ref16","first-page":"3541","article-title":"YARIX: Scalable YARA-based malware intelligence","volume-title":"Proc. USENIX Secur. Symp.","author":"Brengel"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.20897\/jisem\/2655"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICICIP.2014.7010353"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/DASC\/PiCom\/DataCom\/CyberSciTec.2018.00124"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2018.8538354"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.21"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2021.3082002"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2020.103443"},{"key":"ref24","volume-title":"Repository of YARA Rules","year":"2020"},{"key":"ref25","volume-title":"Virusshare.com","year":"2023"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.18517\/ijaseit.1.4.82"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SSCI47803.2020.9308179"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-008-0100-6"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1155\/2023\/8227751"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/BWCCA.2010.85"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2554850.2555157"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2023.120092"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1569901.1570111"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/PRDC47002.2019.00055"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/PerComWorkshops53856.2022.9767485"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN52387.2021.9534016"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3410530.3414411"},{"key":"ref38","article-title":"DRLDO: A novel DRL based de-ObfuscationSystem for defense against metamorphic malware","author":"Sewak","year":"2021","journal-title":"arXiv:2102.00898"},{"key":"ref39","article-title":"MERLIN\u2013malware evasion with reinforcement learning","author":"Quertier","year":"2022","journal-title":"arXiv:2203.12980"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-012-0174-z"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3262265"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-005-0002-9"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.9"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/1854099.1854152"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-013-0185-4"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-011-0153-9"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.07.004"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/INNOVATIONS.2012.6207739"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-013-0189-0"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-017-1045-6"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCI.2018.8554803"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICCKE.2015.7365862"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2014.59"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.10.011"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/2523514.2527006"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-019-00331-0"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-021-00404-z"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3338503.3357720"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/ISSREW.2017.74"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.3390\/electronics10141628"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1177\/1550147719889907"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/SSCI44817.2019.9002773"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/FUZZ48607.2020.9177856"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/SSCI47803.2020.9308189"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/s40747-020-00233-5"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/AEMCSE55572.2022.00052"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.26"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1007\/11856214_5"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3082330"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-6193-4"},{"issue":"3","key":"ref71","first-page":"49","article-title":"Metamorphic malware detection using statistical analysis","volume":"2","author":"Kaushal","year":"2012","journal-title":"Int. J. Soft Comput. Eng."},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1098\/rstb.2012.0077"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1016\/0020-0190(74)90001-5"},{"key":"ref74","volume-title":"Clamav","year":"2003"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/SPIRE.2000.878178"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.3390\/info11090421"},{"key":"ref77","volume-title":"Metame\u2014A Metamorphic Code Engine for Arbitrary Executables","author":"Ortega","year":"2019"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.9"},{"key":"ref79","volume-title":"The Portable Freeware Collection","year":"2023"},{"key":"ref80","article-title":"EMBER: An open dataset for training static PE malware machine learning models","author":"Anderson","year":"2018","journal-title":"arXiv:1804.04637"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3074801"},{"key":"ref82","volume-title":"Yaramod\u2014Parsing of YARA Rules Into AST and Building New Rulesets","year":"2020"},{"key":"ref83","volume-title":"Capstone\u2014The Ultimate Disassembler","author":"Nguyen","year":"2019"},{"key":"ref84","volume-title":"Keystone\u2014The Ultimate Assembler","author":"Nguyen","year":"2020"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9970396\/10177752.pdf?arnumber=10177752","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T13:37:29Z","timestamp":1709300249000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10177752\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":84,"URL":"https:\/\/doi.org\/10.1109\/tifs.2023.3294059","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}