{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T23:21:49Z","timestamp":1791501709597,"version":"4.3.4"},"reference-count":12,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009,10]]},"DOI":"10.1109\/vizsec.2009.5375540","type":"proceedings-article","created":{"date-parts":[[2010,12,8]],"date-time":"2010-12-08T15:58:32Z","timestamp":1291823912000},"page":"33-38","source":"Crossref","is-referenced-by-count":56,"title":["Visual analysis of malware behavior using treemaps and thread graphs"],"prefix":"10.1109","author":[{"given":"Philipp","family":"Trinius","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thorsten","family":"Holz","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jan","family":"Gobel","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Felix C.","family":"Freiling","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref4","doi-asserted-by":"crossref","DOI":"10.1109\/SP.2007.17","article-title":"Exploring Multiple Execution Paths for Malware Analysis","author":"moser","year":"2007","journal-title":"IEEE Symposium on Security and Privacy"},{"key":"ref3","article-title":"Obfuscation of Executable Code to Improve Resistance to Static Disassembly","author":"cullen","year":"2003","journal-title":"ACM Conference on Computer and Communications Security (CCS)"},{"key":"ref10","article-title":"Symantec","year":"2009","journal-title":"Internet security threat report volume xv"},{"key":"ref6","article-title":"Norman ASA","year":"0","journal-title":"Norman Sandbox"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.45"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.21"},{"key":"ref12","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-85933-8_3","article-title":"Visual Analysis of Program Flow Data with Data Propagation","author":"xia","year":"2008","journal-title":"International Workshop on Visualization for Cyber Security (VizSec"},{"key":"ref8","author":"shneiderman","year":"0","journal-title":"Treemaps for space-constrained visualization of hierarchies Internet"},{"key":"ref7","article-title":"Binary obfuscation using signals","author":"popov","year":"2007","journal-title":"USENIX Security Symposium"},{"key":"ref2","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-85933-8_1","article-title":"Visual Reverse Engineering of Binary and Data Files","author":"conti","year":"2008","journal-title":"International Workshop on Visualization for Cyber Security (VizSec"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/102377.115768"},{"key":"ref1","author":"bayer","year":"0","journal-title":"Anubis Analyzing Unknown Binaries"}],"event":{"name":"2009 6th International Workshop on Visualization for Cyber Security (VizSec 2009)","location":"Atlantic City, NJ","start":{"date-parts":[[2009,10,11]]},"end":{"date-parts":[[2009,10,11]]}},"container-title":["2009 6th International Workshop on Visualization for Cyber Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5368324\/5375526\/05375540.pdf?arnumber=5375540","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,4]],"date-time":"2023-06-04T12:19:53Z","timestamp":1685881193000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/5375540\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,10]]},"references-count":12,"URL":"https:\/\/doi.org\/10.1109\/vizsec.2009.5375540","relation":{},"subject":[],"published":{"date-parts":[[2009,10]]}}}