{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T19:17:10Z","timestamp":1777663030095,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":26,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,3,22]],"date-time":"2010-03-22T00:00:00Z","timestamp":1269216000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100002428","name":"Austrian Science Fund","doi-asserted-by":"publisher","award":["P18764"],"award-info":[{"award-number":["P18764"]}],"id":[{"id":"10.13039\/501100002428","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004963","name":"Seventh Framework Programme","doi-asserted-by":"publisher","award":["FP7-ICT-216026-WOMBATFP7-ICT-216331-FORWARD"],"award-info":[{"award-number":["FP7-ICT-216026-WOMBATFP7-ICT-216331-FORWARD"]}],"id":[{"id":"10.13039\/501100004963","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,3,22]]},"DOI":"10.1145\/1774088.1774484","type":"proceedings-article","created":{"date-parts":[[2010,4,27]],"date-time":"2010-04-27T12:45:48Z","timestamp":1272372348000},"page":"1871-1878","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":44,"title":["Improving the efficiency of dynamic malware analysis"],"prefix":"10.1145","author":[{"given":"Ulrich","family":"Bayer","sequence":"first","affiliation":[{"name":"Technical University Vienna, Vienna, Austria"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Engin","family":"Kirda","sequence":"additional","affiliation":[{"name":"Institute Eurecom, Sophia-Antipolis"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christopher","family":"Kruegel","sequence":"additional","affiliation":[{"name":"University of California, Santa Barbara, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2010,3,22]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"http:\/\/anubis.iseclab.org","author":"ANUBIS.","year":"2009","unstructured":"ANUBIS. http:\/\/anubis.iseclab.org , 2009 . ANUBIS. http:\/\/anubis.iseclab.org, 2009."},{"key":"e_1_3_2_1_2_1","volume-title":"http:\/\/blog.washingtonpost.com\/securityfix\/2007\/11\/new_malware_defeats_sitekey_te.html?nav=rss_blog","author":"Washington Post Article","year":"2009","unstructured":"Article about Pinch in the Washington Post . http:\/\/blog.washingtonpost.com\/securityfix\/2007\/11\/new_malware_defeats_sitekey_te.html?nav=rss_blog , 2009 . Article about Pinch in the Washington Post. http:\/\/blog.washingtonpost.com\/securityfix\/2007\/11\/new_malware_defeats_sitekey_te.html?nav=rss_blog, 2009."},{"key":"e_1_3_2_1_3_1","volume-title":"http:\/\/www.boost.org","author":"Python","year":"2009","unstructured":"Boost. Python C++ library. http:\/\/www.boost.org , 2009 . Boost. Python C++ library. http:\/\/www.boost.org, 2009."},{"key":"e_1_3_2_1_4_1","volume-title":"http:\/\/www.cwsandbox.org\/","year":"2009","unstructured":"CWSandbox. http:\/\/www.cwsandbox.org\/ , 2009 . CWSandbox. http:\/\/www.cwsandbox.org\/, 2009."},{"key":"e_1_3_2_1_5_1","volume-title":"http:\/\/www.f-secure.com\/v-descs\/allaple_a.shtml","author":"Secure Description","year":"2009","unstructured":"Description of Allaple by F- Secure . http:\/\/www.f-secure.com\/v-descs\/allaple_a.shtml , 2009 . Description of Allaple by F-Secure. http:\/\/www.f-secure.com\/v-descs\/allaple_a.shtml, 2009."},{"key":"e_1_3_2_1_6_1","volume-title":"http:\/\/vil.nai.com\/vil\/content\/v_100539.htm","author":"Mcafee Description","year":"2009","unstructured":"Description of Trojan-PWS.Win32.LdPinch by Mcafee . http:\/\/vil.nai.com\/vil\/content\/v_100539.htm , 2009 . Description of Trojan-PWS.Win32.LdPinch by Mcafee. http:\/\/vil.nai.com\/vil\/content\/v_100539.htm, 2009."},{"key":"e_1_3_2_1_7_1","volume-title":"http:\/\/www.f-secure.com\/v-descs\/virus_w32_virut.shtml","author":"Virus Description","year":"2009","unstructured":"Description of Virus .Win32. Virut by F- Secure . http:\/\/www.f-secure.com\/v-descs\/virus_w32_virut.shtml , 2009 . Description of Virus.Win32.Virut by F-Secure. http:\/\/www.f-secure.com\/v-descs\/virus_w32_virut.shtml, 2009."},{"key":"e_1_3_2_1_8_1","volume-title":"http:\/\/www.joebox.org","year":"2009","unstructured":"JoeBox. http:\/\/www.joebox.org , 2009 . JoeBox. http:\/\/www.joebox.org, 2009."},{"key":"e_1_3_2_1_9_1","volume-title":"http:\/\/www.norman.com\/microsites\/nsic\/","author":"Sandbox Norman","year":"2009","unstructured":"Norman Sandbox . http:\/\/www.norman.com\/microsites\/nsic\/ , 2009 . Norman Sandbox. http:\/\/www.norman.com\/microsites\/nsic\/, 2009."},{"key":"e_1_3_2_1_10_1","volume-title":"http:\/\/www.threatexpert.com\/","year":"2009","unstructured":"ThreatExpert. http:\/\/www.threatexpert.com\/ , 2009 . ThreatExpert. http:\/\/www.threatexpert.com\/, 2009."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/1776434.1776449"},{"key":"e_1_3_2_1_12_1","volume-title":"TTAnalyze: A Tool for Analyzing Malware. In 15th European Institute for Computer Antivirus Research (EICAR 2006) Annual Conference","author":"Bayer U.","year":"2006","unstructured":"U. Bayer , C. Kruegel , and E. Kirda . TTAnalyze: A Tool for Analyzing Malware. In 15th European Institute for Computer Antivirus Research (EICAR 2006) Annual Conference , April 2006 . U. Bayer, C. Kruegel, and E. Kirda. TTAnalyze: A Tool for Analyzing Malware. In 15th European Institute for Computer Antivirus Research (EICAR 2006) Annual Conference, April 2006."},{"key":"e_1_3_2_1_13_1","volume-title":"Behavior-Based Malware Clustering. In Symposium on Network and Distributed System Security (NDSS)","author":"Bayer U.","year":"2009","unstructured":"U. Bayer , P. Milani Comparetti , C. Hlauschek , C. Kruegel , and E. Kirda . Scalable , Behavior-Based Malware Clustering. In Symposium on Network and Distributed System Security (NDSS) , 2009 . U. Bayer, P. Milani Comparetti, C. Hlauschek, C. Kruegel, and E. Kirda. Scalable, Behavior-Based Malware Clustering. In Symposium on Network and Distributed System Security (NDSS), 2009."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0169-7552(97)00031-7"},{"key":"e_1_3_2_1_15_1","volume-title":"Usenix Security Symposium","author":"Christodorescu M.","year":"2003","unstructured":"M. Christodorescu and S. Jha . Static Analysis of Executables to Detect Malicious Patterns . In Usenix Security Symposium , 2003 . M. Christodorescu and S. Jha. Static Analysis of Executables to Detect Malicious Patterns. In Usenix Security Symposium, 2003."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.20"},{"key":"e_1_3_2_1_17_1","volume-title":"In Symposium sur la S\u00e9curit\u00e9 des Technologies de l'Information et des Communications (SSTIC)","author":"Dullien T.","year":"2005","unstructured":"T. Dullien and R. Rolles . Graph-based comparison of Executable Objects . In In Symposium sur la S\u00e9curit\u00e9 des Technologies de l'Information et des Communications (SSTIC) , June 2005 . T. Dullien and R. Rolles. Graph-based comparison of Executable Objects. In In Symposium sur la S\u00e9curit\u00e9 des Technologies de l'Information et des Communications (SSTIC), June 2005."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87403-4_6"},{"key":"e_1_3_2_1_19_1","first-page":"129","volume-title":"WebDB (Informal Proceedings)","author":"Haveliwala T. H.","year":"2000","unstructured":"T. H. Haveliwala , A. Gionis , and P. Indyk . Scalable techniques for clustering the web . In WebDB (Informal Proceedings) , pages 129 -- 134 , 2000 . T. H. Haveliwala, A. Gionis, and P. Indyk. Scalable techniques for clustering the web. In WebDB (Informal Proceedings), pages 129--134, 2000."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/276698.276876"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1469-8137.1912.tb05611.x"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2004.19"},{"key":"e_1_3_2_1_23_1","volume-title":"Behavioral Classification. In EICAR Conference","author":"Lee T.","year":"2006","unstructured":"T. Lee and J. J. Mody . Behavioral Classification. In EICAR Conference , 2006 . T. Lee and J. J. Mody. Behavioral Classification. In EICAR Conference, 2006."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948149"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.21"},{"key":"e_1_3_2_1_26_1","unstructured":"T. Yetiser. Polymorphic Viruses - Implementation Detection and Protection. http:\/\/vx.netlux.org\/lib\/ayt01.html 1993.  T. Yetiser. Polymorphic Viruses - Implementation Detection and Protection. http:\/\/vx.netlux.org\/lib\/ayt01.html 1993."}],"event":{"name":"SAC'10: The 2010 ACM Symposium on Applied Computing","location":"Sierre Switzerland","acronym":"SAC'10","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"]},"container-title":["Proceedings of the 2010 ACM Symposium on Applied Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1774088.1774484","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1774088.1774484","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:41:33Z","timestamp":1750250493000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1774088.1774484"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,3,22]]},"references-count":26,"alternative-id":["10.1145\/1774088.1774484","10.1145\/1774088"],"URL":"https:\/\/doi.org\/10.1145\/1774088.1774484","relation":{},"subject":[],"published":{"date-parts":[[2010,3,22]]},"assertion":[{"value":"2010-03-22","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}