{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,23]],"date-time":"2026-08-23T15:29:22Z","timestamp":1787498962312,"version":"build-2736575974"},"reference-count":36,"publisher":"World Scientific Pub Co Pte Ltd","issue":"04","funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272387"],"award-info":[{"award-number":["62272387"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61702414"],"award-info":[{"award-number":["61702414"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"the Natural Science Basic Research Program of Shaanxi","award":["2022JM-342"],"award-info":[{"award-number":["2022JM-342"]}]},{"name":"the Natural Science Basic Research Program of Shaanxi","award":["2018JQ6078"],"award-info":[{"award-number":["2018JQ6078"]}]},{"name":"the Youth Innovation Team of Shaanxi Universities","award":["Industial Big Data Analysis"],"award-info":[{"award-number":["Industial Big Data Analysis"]}]},{"name":"the Youth Innovation Team of Shaanxi Universities","award":["Intelligent Processing"],"award-info":[{"award-number":["Intelligent Processing"]}]},{"name":"the Special Funds for Construction of Key Disciplines in Universities in Shaanxi"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Int. J. Soft. Eng. Knowl. Eng."],"published-print":{"date-parts":[[2024,4]]},"abstract":"<jats:p>Malware developers often employ code obfuscation techniques to conceal their malicious functionality, making it challenging to detect and analyze such software. While various de-obfuscation techniques exist, the majority of them require prior knowledge of the obfuscation tools and techniques in use. Identifying the specific obfuscation tools or algorithms applied to the obfuscated code is thus of vital importance, which, however, typically demands in-depth expert knowledge and substantial efforts. Therefore, this paper presents DeObA, a deep learning (DL) driven approach for the precise and efficient detection of obfuscation algorithms on the fine-grained function-level code snippets. To comprehensively capture unique patterns or features of different obfuscation algorithms from code, DeObA works on multiple distinct code views, encompassing token sequences, abstract syntax trees (AST) and program dependency graphs (PDG), which will reflect the code\u2019s lexical morphology, syntactic and structural aspects. After individually collecting obfuscation-indicative features with well-matched DL encoder from each code view, a self-attention-based fusion strategy is performed on these features to produce an integrated, dense, yet feature-rich vector. This vector is then fed into a softmax classification layer for prediction. Due to the lack of a moderately sized dataset, a large obfuscation corpus is curated with 7 different obfuscation tools and a total of 12 obfuscation algorithms on 39,070 C\/C[Formula: see text] functions. The experimental evaluations conducted on the dataset exhibit a distinguished detection performance of DeObA, which achieve accuracy rates of 99.90% and 99.19% on the obfuscation tool detection and obfuscation algorithm detection tasks, respectively. The ablation study also confirms the active role of considering multiple distinct code views and the effectiveness of the designed self-attention-based fusion strategy.<\/jats:p>","DOI":"10.1142\/s0218194023500663","type":"journal-article","created":{"date-parts":[[2023,11,13]],"date-time":"2023-11-13T05:54:58Z","timestamp":1699854898000},"page":"651-673","source":"Crossref","is-referenced-by-count":2,"title":["Function-Level Code Obfuscation Detection Through Self-Attention-Guided Multi-Representation Fusion"],"prefix":"10.1142","volume":"34","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7608-8908","authenticated-orcid":false,"given":"Zhenzhou","family":"Tian","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, Xi\u2019an University of Posts and Telecommunications, Xi\u2019an, Shaanxi 710121, P. R. China"},{"name":"Shaanxi Key Laboratory of Network Data Analysis and Intelligent Processing, Xi\u2019an, Shaanxi 710121, P. R. China"},{"name":"Xi\u2019an Key Laboratory of Big Data and Intelligent Computing, Xi\u2019an, Shaanxi 710121, P. R. China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-6051-063X","authenticated-orcid":false,"given":"Ruikang","family":"He","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Xi\u2019an University of Posts and Telecommunications, Xi\u2019an, Shaanxi 710121, P. R. China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-6659-3505","authenticated-orcid":false,"given":"Hongliang","family":"Zhao","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Xi\u2019an University of Posts and Telecommunications, Xi\u2019an, Shaanxi 710121, P. R. China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1550-6170","authenticated-orcid":false,"given":"Lingwei","family":"Chen","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Wright State University, Dayton 45435, OH, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"219","published-online":{"date-parts":[[2023,12,11]]},"reference":[{"key":"S0218194023500663BIB001","first-page":"3055","volume-title":"31st USENIX Security Symp.","author":"Schloegel M.","year":"2022"},{"key":"S0218194023500663BIB002","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274726"},{"key":"S0218194023500663BIB003","doi-asserted-by":"publisher","DOI":"10.1145\/2886012"},{"issue":"1","key":"S0218194023500663BIB004","first-page":"1","volume":"1","author":"Black C.","year":"2023","journal-title":"IEEE Trans. Depend. Sec. Comput."},{"key":"S0218194023500663BIB005","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.2982635"},{"key":"S0218194023500663BIB006","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833626"},{"key":"S0218194023500663BIB007","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179304"},{"key":"S0218194023500663BIB008","doi-asserted-by":"publisher","DOI":"10.1145\/3292577"},{"key":"S0218194023500663BIB009","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2015.2454508"},{"key":"S0218194023500663BIB010","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978422"},{"key":"S0218194023500663BIB011","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.47"},{"key":"S0218194023500663BIB012","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046739"},{"key":"S0218194023500663BIB013","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363187"},{"key":"S0218194023500663BIB014","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485337"},{"key":"S0218194023500663BIB015","doi-asserted-by":"publisher","DOI":"10.1109\/DSN53405.2022.00039"},{"key":"S0218194023500663BIB016","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102072"},{"key":"S0218194023500663BIB017","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106289"},{"key":"S0218194023500663BIB018","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2005.13"},{"key":"S0218194023500663BIB019","doi-asserted-by":"publisher","DOI":"10.1145\/3545258.3545269"},{"key":"S0218194023500663BIB020","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813617"},{"key":"S0218194023500663BIB021","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.36"},{"key":"S0218194023500663BIB022","first-page":"643","volume-title":"26th USENIX Security Symp.","author":"Blazytko T.","year":"2017"},{"key":"S0218194023500663BIB023","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93411-2_17"},{"key":"S0218194023500663BIB024","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243827"},{"key":"S0218194023500663BIB025","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313752"},{"key":"S0218194023500663BIB026","doi-asserted-by":"publisher","DOI":"10.1109\/MOBILESoft.2017.18"},{"key":"S0218194023500663BIB027","doi-asserted-by":"publisher","DOI":"10.1145\/3371307.3371313"},{"key":"S0218194023500663BIB028","first-page":"283","volume-title":"Advances in Computers","volume":"108","author":"Banescu S.","year":"2018"},{"key":"S0218194023500663BIB029","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2018.07.007"},{"key":"S0218194023500663BIB031","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2023.121865"},{"key":"S0218194023500663BIB032","doi-asserted-by":"publisher","DOI":"10.1109\/AISP.2015.7123508"},{"key":"S0218194023500663BIB033","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.07.066"},{"key":"S0218194023500663BIB034","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-06365-7_13"},{"key":"S0218194023500663BIB035","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3289254"},{"key":"S0218194023500663BIB036","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-Companion.2019.00135"},{"key":"S0218194023500663BIB037","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3465772"}],"container-title":["International Journal of Software Engineering and Knowledge Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.worldscientific.com\/doi\/pdf\/10.1142\/S0218194023500663","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,5,27]],"date-time":"2024-05-27T00:11:56Z","timestamp":1716768716000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.worldscientific.com\/doi\/10.1142\/S0218194023500663"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,11]]},"references-count":36,"journal-issue":{"issue":"04","published-print":{"date-parts":[[2024,4]]}},"alternative-id":["10.1142\/S0218194023500663"],"URL":"https:\/\/doi.org\/10.1142\/s0218194023500663","relation":{},"ISSN":["0218-1940","1793-6403"],"issn-type":[{"value":"0218-1940","type":"print"},{"value":"1793-6403","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,12,11]]}}}