{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T04:38:12Z","timestamp":1780634292278,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","license":[{"start":{"date-parts":[[2012,10,19]],"date-time":"2012-10-19T00:00:00Z","timestamp":1350604800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2012,10,19]]},"DOI":"10.1145\/2381896.2381910","type":"proceedings-article","created":{"date-parts":[[2012,10,19]],"date-time":"2012-10-19T13:41:01Z","timestamp":1350654061000},"page":"81-92","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":34,"title":["Tracking concept drift in malware families"],"prefix":"10.1145","author":[{"given":"Anshuman","family":"Singh","sequence":"first","affiliation":[{"name":"University of Louisiana at Lafayette, Lafayette, LA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrew","family":"Walenstein","sequence":"additional","affiliation":[{"name":"University of Louisiana at Lafayette, Lafayette, LA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Arun","family":"Lakhotia","sequence":"additional","affiliation":[{"name":"University of Louisiana at Lafayette, Lafayette, LA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2012,10,19]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proc. of the 28th Annual Intl. Computer Software and Applications Conference","author":"Abou-Assaleh T.","year":"2003","unstructured":"T. Abou-Assaleh , N. Cercone , V. Keselj , and R. Sweidan . N-gram-based detection of new malicious code . In Proc. of the 28th Annual Intl. Computer Software and Applications Conference , 2003 . T. Abou-Assaleh, N. Cercone, V. Keselj, and R. Sweidan. N-gram-based detection of new malicious code. In Proc. of the 28th Annual Intl. Computer Software and Applications Conference, 2003."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.5555\/1776434.1776449"},{"key":"e_1_3_2_1_3_1","volume-title":"Network and Distributed System Security Symposium (NDSS)","author":"Bayer U.","year":"2009","unstructured":"U. Bayer , P. Comparetti , C. Hlauschek , C. Kruegel , and E. Kirda . Scalable, behavior-based malware clustering . In Network and Distributed System Security Symposium (NDSS) , 2009 . U. Bayer, P. Comparetti, C. Hlauschek, C. Kruegel, and E. Kirda. Scalable, behavior-based malware clustering. In Network and Distributed System Security Symposium (NDSS), 2009."},{"issue":"1","key":"e_1_3_2_1_4_1","first-page":"43","article-title":"A survey of binary similarity and distance measures. Journal of Systemics","volume":"8","author":"Choi S.","year":"2010","unstructured":"S. Choi , S. Cha , and C. Tappert . A survey of binary similarity and distance measures. Journal of Systemics , Cybernetics and Informatics , 8 ( 1 ): 43 -- 48 , 2010 . S. Choi, S. Cha, and C. Tappert. A survey of binary similarity and distance measures. Journal of Systemics, Cybernetics and Informatics, 8(1):43--48, 2010.","journal-title":"Cybernetics and Informatics"},{"key":"e_1_3_2_1_5_1","volume-title":"Surreptitious software: obfuscation, watermarking, and tamperproofing for software protection","author":"Collberg C.","year":"2009","unstructured":"C. Collberg and J. Nagra . Surreptitious software: obfuscation, watermarking, and tamperproofing for software protection . Addison-Wesley Professional , 2009 . C. Collberg and J. Nagra. Surreptitious software: obfuscation, watermarking, and tamperproofing for software protection. Addison-Wesley Professional, 2009."},{"key":"e_1_3_2_1_6_1","volume-title":"Proceeding of the 2006 conference on ECAI 2006: 17th European Conference on Artificial Intelligence","author":"Delany S.","year":"2006","unstructured":"S. Delany , P. Cunningham , and B. Smyth . Ecue: A spam filter that uses machine learning to track concept drift . In Proceeding of the 2006 conference on ECAI 2006: 17th European Conference on Artificial Intelligence August 29-September 1, 2006 , Riva del Garda, Italy, pages 627--631. IOS Press , 2006. S. Delany, P. Cunningham, and B. Smyth. Ecue: A spam filter that uses machine learning to track concept drift. In Proceeding of the 2006 conference on ECAI 2006: 17th European Conference on Artificial Intelligence August 29-September 1, 2006, Riva del Garda, Italy, pages 627--631. IOS Press, 2006."},{"key":"e_1_3_2_1_7_1","first-page":"340","volume-title":"Proceedings of the 19th International Conference on Artificial Intelligence (FLAIRS 2006","author":"Delany S.","year":"2006","unstructured":"S. Delany , P. Cunningham , and A. Tsymbal . A comparison of ensemble and case-base maintenance techniques for handling concept drift in spam filtering . In Proceedings of the 19th International Conference on Artificial Intelligence (FLAIRS 2006 ), pages 340 -- 345 , 2006 . S. Delany, P. Cunningham, and A. Tsymbal. A comparison of ensemble and case-base maintenance techniques for handling concept drift in spam filtering. In Proceedings of the 19th International Conference on Artificial Intelligence (FLAIRS 2006), pages 340--345, 2006."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2004.10.002"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1002\/sam.v2:5\/6"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2006.04.011"},{"key":"e_1_3_2_1_11_1","volume-title":"The elements of statistical learning","author":"Friedman J.","year":"2001","unstructured":"J. Friedman , T. Hastie , and R. Tibshirani . The elements of statistical learning . Springer , 2001 . J. Friedman, T. Hastie, and R. Tibshirani. The elements of statistical learning. Springer, 2001."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1214\/aos\/1176344722"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-28645-5_29"},{"key":"e_1_3_2_1_14_1","unstructured":"GDataSoftware. G data malware report. http:\/\/www.gdatasoftware.com\/uploads\/media\/G_Data_MalwareReport_H1_2011_EN.pdf 2011.  GDataSoftware. G data malware report. http:\/\/www.gdatasoftware.com\/uploads\/media\/G_Data_MalwareReport_H1_2011_EN.pdf 2011."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87403-4_6"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1093\/biomet\/89.2.359"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-008-0100-6"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1022694620923"},{"key":"e_1_3_2_1_19_1","volume-title":"Introduction to mathematical statistics","author":"Hogg R.","year":"2005","unstructured":"R. Hogg , J. McKean , and A. Craig . Introduction to mathematical statistics , 2005 . R. Hogg, J. McKean, and A. Craig. Introduction to mathematical statistics, 2005."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-005-0002-9"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/312129.312285"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.5555\/1293831.1293836"},{"key":"e_1_3_2_1_23_1","first-page":"33","volume-title":"Proc. of AAAI-98\/ICML-98 workshop Learning for Text Categorization","author":"Klinkenberg R.","year":"1998","unstructured":"R. Klinkenberg and I. Renz . Adaptive information filtering: Learning drifting concepts . In Proc. of AAAI-98\/ICML-98 workshop Learning for Text Categorization , pages 33 -- 40 , 1998 . R. Klinkenberg and I. Renz. Adaptive information filtering: Learning drifting concepts. In Proc. of AAAI-98\/ICML-98 workshop Learning for Text Categorization, pages 33--40, 1998."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.5555\/1248547.1248646"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.5555\/118850.118875"},{"key":"e_1_3_2_1_26_1","first-page":"108","volume-title":"Laws of software evolution revisited. Software process technology","author":"Lehman M.","year":"1996","unstructured":"M. Lehman . Laws of software evolution revisited. Software process technology , pages 108 -- 124 , 1996 . M. Lehman. Laws of software evolution revisited. Software process technology, pages 108--124, 1996."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.5555\/1894166.1894183"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2019618.2019622"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2007.242"},{"key":"e_1_3_2_1_30_1","unstructured":"T. R. Microsoft Protection Center and Response. Malware encyclopedia. http:\/\/www.microsoft.com\/security\/portal\/Threat\/Encyclopedia\/Browse.aspx 2011.  T. R. Microsoft Protection Center and Response. Malware encyclopedia. http:\/\/www.microsoft.com\/security\/portal\/Threat\/Encyclopedia\/Browse.aspx 2011."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89900-6_21"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/242857.242869"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1806672.1806678"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644895"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.5555\/882495.884439"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/505282.505283"},{"key":"e_1_3_2_1_37_1","volume-title":"Introduction to data mining","author":"Tan P.","year":"2006","unstructured":"P. Tan , M. Steinbach , and V. Kumar . Introduction to data mining . Pearson Addison Wesley , 2006 . P. Tan, M. Steinbach, and V. Kumar. Introduction to data mining. Pearson Addison Wesley, 2006."},{"key":"e_1_3_2_1_38_1","volume-title":"The problem of concept drift: definitions and related work. Computer Science Department","author":"Tsymbal A.","year":"2004","unstructured":"A. Tsymbal . The problem of concept drift: definitions and related work. Computer Science Department , Trinity College Dublin , 2004 . A. Tsymbal. The problem of concept drift: definitions and related work. Computer Science Department, Trinity College Dublin, 2004."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1018046501280"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1007\/11497455_41"},{"key":"e_1_3_2_1_41_1","volume-title":"Learning under concept drift: an overview. Technical report","author":"Zliobaite I.","year":"2009","unstructured":"I. Zliobaite . Learning under concept drift: an overview. Technical report , Vilnius University , Lithuania , 2009 . I. Zliobaite. Learning under concept drift: an overview. Technical report, Vilnius University, Lithuania, 2009."}],"event":{"name":"CCS'12: the ACM Conference on Computer and Communications Security","location":"Raleigh North Carolina USA","acronym":"CCS'12","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 5th ACM workshop on Security and artificial intelligence"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2381896.2381910","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2381896.2381910","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:34:46Z","timestamp":1750239286000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2381896.2381910"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,10,19]]},"references-count":41,"alternative-id":["10.1145\/2381896.2381910","10.1145\/2381896"],"URL":"https:\/\/doi.org\/10.1145\/2381896.2381910","relation":{},"subject":[],"published":{"date-parts":[[2012,10,19]]},"assertion":[{"value":"2012-10-19","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}