{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T16:37:25Z","timestamp":1785602245776,"version":"3.56.0"},"publisher-location":"New York, NY, USA","reference-count":43,"publisher":"ACM","license":[{"start":{"date-parts":[[2004,8,22]],"date-time":"2004-08-22T00:00:00Z","timestamp":1093132800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2004,8,22]]},"DOI":"10.1145\/1014052.1014105","type":"proceedings-article","created":{"date-parts":[[2004,10,7]],"date-time":"2004-10-07T17:39:48Z","timestamp":1097170788000},"page":"470-478","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":308,"title":["Learning to detect malicious executables in the wild"],"prefix":"10.1145","author":[{"given":"Jeremy Z.","family":"Kolter","sequence":"first","affiliation":[{"name":"Georgetown University, Washington, DC"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marcus A.","family":"Maloof","sequence":"additional","affiliation":[{"name":"Georgetown University, Washington, DC"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2004,8,22]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1022689900470"},{"key":"e_1_3_2_1_2_1","volume-title":"Department of Computer Science","author":"Aiken A.","year":"1994","unstructured":"A. Aiken . MOSS: A system for detecting software plagiarism. Software , Department of Computer Science , University of California , Berkeley , http:\/\/www.cs.berkeley.edu\/~aiken\/moss.html, 1994 . A. Aiken. MOSS: A system for detecting software plagiarism. Software, Department of Computer Science, University of California, Berkeley, http:\/\/www.cs.berkeley.edu\/~aiken\/moss.html, 1994."},{"key":"e_1_3_2_1_3_1","volume-title":"IN","author":"Anonymous","year":"2003","unstructured":"Anonymous . Maximum Security . Sams Publishing , Indianapolis , IN , 4 th edition, 2003 . Anonymous. Maximum Security. Sams Publishing, Indianapolis, IN, 4th edition, 2003.","edition":"4"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1007515423169"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/130385.130401"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1214\/aos\/1024691079"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the Twelfth USENIX Security Symposium","author":"Christodorescu M.","year":"2003","unstructured":"M. Christodorescu and S. Jha . Static analysis of executables to detect malicious patterns . In Proceedings of the Twelfth USENIX Security Symposium , Berkeley, CA , 2003 . Advanced Computing Systems Association. M. Christodorescu and S. Jha. Static analysis of executables to detect malicious patterns. In Proceedings of the Twelfth USENIX Security Symposium, Berkeley, CA, 2003. Advanced Computing Systems Association."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.5555\/3091622.3091637"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1007607513941"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1007413511361"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/347090.347126"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/288627.288651"},{"key":"e_1_3_2_1_13_1","volume-title":"Bacon is Shake-speare","author":"Durning-Lawrence E.","year":"1910","unstructured":"E. Durning-Lawrence . Bacon is Shake-speare . The John McBride Company , New York, NY , 1910 . E. Durning-Lawrence. Bacon is Shake-speare. The John McBride Company, New York, NY, 1910."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/3091696.3091715"},{"key":"e_1_3_2_1_15_1","first-page":"1","volume-title":"Proceedings of the Third Biannual Conference of the International Association of Forensic Linguists","author":"Gray A.","year":"1997","unstructured":"A. Gray , P. Sallis , and S. MacDonell . Software forensics: Extending authorship analysis techniques to computer programs . In Proceedings of the Third Biannual Conference of the International Association of Forensic Linguists , pages 1 -- 8 , Birmingham, UK , 1997 . International Association of Forensic Linguists. A. Gray, P. Sallis, and S. MacDonell. Software forensics: Extending authorship analysis techniques to computer programs. In Proceedings of the Third Biannual Conference of the International Association of Forensic Linguists, pages 1--8, Birmingham, UK, 1997. International Association of Forensic Linguists."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/552326"},{"key":"e_1_3_2_1_17_1","volume-title":"Principles of data mining","author":"Hand D.","year":"2001","unstructured":"D. Hand , H. Mannila , and P. Smyth . Principles of data mining . MIT Press , Cambridge, MA , 2001 . D. Hand, H. Mannila, and P. Smyth. Principles of data mining. MIT Press, Cambridge, MA, 2001."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/34.824819"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/31.1.1"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/645326.649721"},{"key":"e_1_3_2_1_21_1","first-page":"985","volume-title":"Proceedings of the Fourteenth International Joint Conference on Artificial Intelligence","author":"Kephart J.","year":"1995","unstructured":"J. Kephart , G. Sorkin , W. Arnold , D. Chess , G. Tesauro , and S. White . Biologically inspired defenses against computer viruses . In Proceedings of the Fourteenth International Joint Conference on Artificial Intelligence , pages 985 -- 996 , San Francisco, CA , 1995 . Morgan Kaufmann. J. Kephart, G. Sorkin, W. Arnold, D. Chess, G. Tesauro, and S. White. Biologically inspired defenses against computer viruses. In Proceedings of the Fourteenth International Joint Conference on Artificial Intelligence, pages 985--996, San Francisco, CA, 1995. Morgan Kaufmann."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1016\/0306-4573(94)90029-9"},{"key":"e_1_3_2_1_23_1","volume-title":"Authorship analysis: Identifying the author of a program. Master's thesis","author":"Krsul I.","year":"1994","unstructured":"I. Krsul . Authorship analysis: Identifying the author of a program. Master's thesis , Purdue University , West Lafayette, IN , 1994 . I. Krsul. Authorship analysis: Identifying the author of a program. Master's thesis, Purdue University, West Lafayette, IN, 1994."},{"key":"e_1_3_2_1_24_1","first-page":"514","volume-title":"Proceedings of the Eighteenth National Information Systems Security Conference","author":"Krsul I.","year":"1995","unstructured":"I. Krsul and E. Spafford . Authorship analysis: Identifying the authors of a program . In Proceedings of the Eighteenth National Information Systems Security Conference , pages 514 -- 524 , Gaithersburg, MD , 1995 . National Institute of Standards and Technology. I. Krsul and E. Spafford. Authorship analysis: Identifying the authors of a program. In Proceedings of the Eighteenth National Information Systems Security Conference, pages 514--524, Gaithersburg, MD, 1995. National Institute of Standards and Technology."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(95)00012-W"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/321033.321035"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/52.877857"},{"key":"e_1_3_2_1_28_1","volume-title":"Kurt Rossmann Laboratories for Radiologic Image Research","author":"Metz C.","year":"2003","unstructured":"C. Metz , Y. Jiang , H. MacMahon , R. Nishikawa , and X. Pan . ROC software. Web page , Kurt Rossmann Laboratories for Radiologic Image Research , University of Chicago , Chicago, IL , 2003 . C. Metz, Y. Jiang, H. MacMahon, R. Nishikawa, and X. Pan. ROC software. Web page, Kurt Rossmann Laboratories for Radiologic Image Research, University of Chicago, Chicago, IL, 2003."},{"key":"e_1_3_2_1_29_1","unstructured":"P. Miller. hexdump 1.4. Software http:\/\/gd.tuwien.ac.at\/softeng\/Aegis\/hexdump.html 1999.  P. Miller. hexdump 1.4. Software http:\/\/gd.tuwien.ac.at\/softeng\/Aegis\/hexdump.html 1999."},{"key":"e_1_3_2_1_30_1","volume-title":"Machine Learning","author":"Mitchell T.","year":"1997","unstructured":"T. Mitchell . Machine Learning . McGraw-Hill , New York, NY , 1997 . T. Mitchell. Machine Learning. McGraw-Hill, New York, NY, 1997."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1613\/jair.614"},{"key":"e_1_3_2_1_32_1","volume-title":"B","author":"Platt J.","year":"1998","unstructured":"J. Platt . Fast training of support vector machines using sequential minimal optimization. In B . Sch\u00f6lkopf, C. Burges, and S. Mika, editors, Advances in Kernel Methods---Support Vector Learning. MIT Press , Cambridge, MA, 1998 . J. Platt. Fast training of support vector machines using sequential minimal optimization. In B. Sch\u00f6lkopf, C. Burges, and S. Mika, editors, Advances in Kernel Methods---Support Vector Learning. MIT Press, Cambridge, MA, 1998."},{"key":"e_1_3_2_1_33_1","first-page":"61","volume-title":"P","author":"Platt J.","year":"2000","unstructured":"J. Platt . Probabilities for SV machines. In P . Bartlett, B. Sch\u00f6lkopf, D. Schuurmans, and A. Smola, editors, Advances in Large-Margin Classifiers, pages 61 -- 74 . MIT Press , Cambridge, MA, 2000 . J. Platt. Probabilities for SV machines. In P. Bartlett, B. Sch\u00f6lkopf, D. Schuurmans, and A. Smola, editors, Advances in Large-Margin Classifiers, pages 61--74. MIT Press, Cambridge, MA, 2000."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1007601015854"},{"key":"e_1_3_2_1_35_1","volume-title":"Morgan Kaufmann","author":"Quinlan J.","year":"1993","unstructured":"J. Quinlan . C4.5 : Programs for machine learning . Morgan Kaufmann , San Francisco, CA , 1993 . J. Quinlan. C4.5: Programs for machine learning. Morgan Kaufmann, San Francisco, CA, 1993."},{"key":"e_1_3_2_1_36_1","volume-title":"Learning for Text Categorization: Papers from the 1998 AAAI Workshop","author":"Sahami M.","year":"1998","unstructured":"M. Sahami , S. Dumais , D. Heckerman , and E. Horvitz . A Bayesian approach to filtering junk e-mail . In Learning for Text Categorization: Papers from the 1998 AAAI Workshop , Menlo Park, CA , 1998 . AAAI Press . Technical Report WS-98-05. M. Sahami, S. Dumais, D. Heckerman, and E. Horvitz. A Bayesian approach to filtering junk e-mail. In Learning for Text Categorization: Papers from the 1998 AAAI Workshop, Menlo Park, CA, 1998. AAAI Press. Technical Report WS-98-05."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.5555\/882495.884439"},{"key":"e_1_3_2_1_38_1","volume-title":"Proceedings of the Twelfth USENIX Security Symposium","author":"Soman S.","year":"2003","unstructured":"S. Soman , C. Krintz , and G. Vigna . Detecting malicious Java code using virtual machine auditing . In Proceedings of the Twelfth USENIX Security Symposium , Berkeley, CA , 2003 . Advanced Computing Systems Association. S. Soman, C. Krintz, and G. Vigna. Detecting malicious Java code using virtual machine auditing. In Proceedings of the Twelfth USENIX Security Symposium, Berkeley, CA, 2003. Advanced Computing Systems Association."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(93)90055-A"},{"key":"e_1_3_2_1_40_1","volume-title":"Evaluation of diagnostic systems: Methods from signal detection theory","author":"Swets J.","year":"1982","unstructured":"J. Swets and R. Pickett . Evaluation of diagnostic systems: Methods from signal detection theory . Academic Press , New York, NY , 1982 . J. Swets and R. Pickett. Evaluation of diagnostic systems: Methods from signal detection theory. Academic Press, New York, NY, 1982."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/64.511768"},{"key":"e_1_3_2_1_42_1","volume-title":"Morgan Kaufmann","author":"Witten I.","year":"2000","unstructured":"I. Witten and E. Frank . Data mining: Practical machine learning tools and techniques with Java implementations . Morgan Kaufmann , San Francisco, CA , 2000 . I. Witten and E. Frank. Data mining: Practical machine learning tools and techniques with Java implementations. Morgan Kaufmann, San Francisco, CA, 2000."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.5555\/645526.657137"}],"event":{"name":"KDD04: ACM SIGKDD International Conference on Knowledge Discovery and Data Mining","location":"Seattle WA USA","acronym":"KDD04","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the tenth ACM SIGKDD international conference on Knowledge discovery and data mining"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1014052.1014105","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1014052.1014105","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T16:31:30Z","timestamp":1750264290000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1014052.1014105"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2004,8,22]]},"references-count":43,"alternative-id":["10.1145\/1014052.1014105","10.1145\/1014052"],"URL":"https:\/\/doi.org\/10.1145\/1014052.1014105","relation":{},"subject":[],"published":{"date-parts":[[2004,8,22]]},"assertion":[{"value":"2004-08-22","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}