{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,27]],"date-time":"2026-02-27T03:45:31Z","timestamp":1772163931330,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":29,"publisher":"ACM","license":[{"start":{"date-parts":[[2007,1,17]],"date-time":"2007-01-17T00:00:00Z","timestamp":1168992000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2007,1,17]]},"DOI":"10.1145\/1190216.1190270","type":"proceedings-article","created":{"date-parts":[[2007,4,5]],"date-time":"2007-04-05T15:41:00Z","timestamp":1175787660000},"page":"377-388","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":58,"title":["A semantics-based approach to malware detection"],"prefix":"10.1145","author":[{"given":"Mila Dalla","family":"Preda","sequence":"first","affiliation":[{"name":"University of Verona, Verona, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mihai","family":"Christodorescu","sequence":"additional","affiliation":[{"name":"University of Wisconsin, Madison, WI"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Somesh","family":"Jha","sequence":"additional","affiliation":[{"name":"University of Wisconsin, Madison, WI"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Saumya","family":"Debray","sequence":"additional","affiliation":[{"name":"University of Arizona, Tucson, AZ"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2007,1,17]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.5555\/646766.704152"},{"key":"e_1_3_2_1_2_1","volume-title":"Proceedings of the 2000 Virus Bulletin Conference (VB2000)","author":"Chess D.","year":"2000","unstructured":"D. Chess and S. White. An undetectable computer virus. In Proceedings of the 2000 Virus Bulletin Conference (VB2000), Orlando, FL, USA, Sept. 27--29, 2000. Virus Bulletin.]]"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/648025.744507"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.20"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(87)90122-2"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/268946.268962"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/512950.512973"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/567752.567778"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/503272.503290"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/SEFM.2005.13"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1007\/11523468_107"},{"key":"e_1_3_2_1_13_1","volume-title":"Polymorphic shellcode engine using spectrum analysis. Phrack, 11(61):published online at http:\/\/www.phrack.org (last accessed on","author":"Detristan T.","year":"2004","unstructured":"T. Detristan, T. Ulenspiegel, Y. Malcom, and M. S. von Underduk. Polymorphic shellcode engine using spectrum analysis. Phrack, 11(61):published online at http:\/\/www.phrack.org (last accessed on Jan. 16, 2004), Aug. 2003.]]"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.2005.60"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45248-5_4"},{"key":"e_1_3_2_1_16_1","unstructured":"Intel Corporation. IA-32 Intel Architecture Software Developer's Manual.]]"},{"key":"e_1_3_2_1_17_1","first-page":"4","volume-title":"Virus Bulletin","author":"Jordan M.","year":"2002","unstructured":"M. Jordan. Dealing with metamorphism. Virus Bulletin, pages 4--6, Oct. 2002.]]"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/11506881_11"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014105"},{"key":"e_1_3_2_1_20_1","first-page":"64","volume-title":"Proceedings of the 6th Annual IEEE Systems, Man, and Cybernetics (SMC) Workshop on Information Assurance (IAW'05)","author":"Li W.-J.","year":"2005","unstructured":"W.-J. Li, K. Wang, S. J. Stolfo, and B. Herzog. Fileprints: Identifying file types by n-gram analysis. In Proceedings of the 6th Annual IEEE Systems, Man, and Cybernetics (SMC) Workshop on Information Assurance (IAW'05), pages 64--71, West Point, NY, June 15--17, 2005. United States Military Academy.]]"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948149"},{"key":"e_1_3_2_1_22_1","first-page":"129","volume-title":"Proceedings of the 2001 Virus Bulletin Conference (VB2001)","author":"Morley P.","year":"2001","unstructured":"P. Morley. Processing virus collections. In Proceedings of the 2001 Virus Bulletin Conference (VB2001), pages 129--134, Prague, Czech Republic, Sept. 27--28, 2001. Virus Bulletin.]]"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/242857.242869"},{"key":"e_1_3_2_1_24_1","unstructured":"Rajaat. Polymorphism. 29A Magazine 1(3) 1999.]]"},{"key":"e_1_3_2_1_25_1","volume-title":"Symantec Internet Security Threat Report: Trends for January 06--June 06","author":"Symantec Corporation","year":"2006","unstructured":"Symantec Corporation. Symantec Internet Security Threat Report: Trends for January 06--June 06, volume X. Symantec Corporation, Sept. 25, 2006.]]"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.5555\/1050957"},{"key":"e_1_3_2_1_27_1","first-page":"123","volume-title":"Proceedings of the 2001 Virus Bulletin Conference (VB2001)","author":"Sz\u00f6r P.","year":"2001","unstructured":"P. Sz\u00f6r and P. Ferrie. Hunting for metamorphic. In Proceedings of the 2001 Virus Bulletin Conference (VB2001), pages 123--144, Prague, Czech Republic, Sept. 27--28, 2001. Virus Bulletin.]]"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1060590.1060669"},{"key":"e_1_3_2_1_29_1","volume-title":"Automated reverse engineering: Mistfall engine. Published online at http:\/\/www.madchat.org\/\/vxdevl\/papers\/vxers\/Z0mbie\/autorev.txt (last accessed on","year":"2006","unstructured":"z0mbie. Automated reverse engineering: Mistfall engine. Published online at http:\/\/www.madchat.org\/\/vxdevl\/papers\/vxers\/Z0mbie\/autorev.txt (last accessed on Sep. 29, 2006).]]"},{"key":"e_1_3_2_1_30_1","volume-title":"Real permutating engine. Published online at http:\/\/vx.netlux.org\/vx.php?id=er05 (last accessed on","year":"2006","unstructured":"z0mbie. Real permutating engine. Published online at http:\/\/vx.netlux.org\/vx.php?id=er05 (last accessed on Sep. 29, 2006).]]"}],"event":{"name":"POPL07: The 34th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages","location":"Nice France","acronym":"POPL07","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages","ACM Association for Computing Machinery","SIGACT ACM Special Interest Group on Algorithms and Computation Theory"]},"container-title":["Proceedings of the 34th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1190216.1190270","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1190216.1190270","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T10:47:42Z","timestamp":1750243662000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1190216.1190270"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,1,17]]},"references-count":29,"alternative-id":["10.1145\/1190216.1190270","10.1145\/1190216"],"URL":"https:\/\/doi.org\/10.1145\/1190216.1190270","relation":{"is-identical-to":[{"id-type":"doi","id":"10.1145\/1190215.1190270","asserted-by":"object"}]},"subject":[],"published":{"date-parts":[[2007,1,17]]},"assertion":[{"value":"2007-01-17","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}