{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,22]],"date-time":"2026-04-22T20:02:48Z","timestamp":1776888168518,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":35,"publisher":"ACM","license":[{"start":{"date-parts":[[2012,10,25]],"date-time":"2012-10-25T00:00:00Z","timestamp":1351123200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2012,10,25]]},"DOI":"10.1145\/2388576.2388594","type":"proceedings-article","created":{"date-parts":[[2012,10,26]],"date-time":"2012-10-26T18:34:06Z","timestamp":1351276446000},"page":"130-137","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":27,"title":["Mining control flow graph as\n            <i>API call-grams<\/i>\n            to detect portable executable malware"],"prefix":"10.1145","author":[{"given":"Parvez","family":"Faruki","sequence":"first","affiliation":[{"name":"Govt. Polytechnic, Ahmedabad, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vijay","family":"Laxmi","sequence":"additional","affiliation":[{"name":"Malaviya National Institute of Technology, Jaipur, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"M. S.","family":"Gaur","sequence":"additional","affiliation":[{"name":"Malaviya National Institute of Technology, Jaipur, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"P.","family":"Vinod","sequence":"additional","affiliation":[{"name":"SCMS School of Engineering, Kerala, India"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2012,10,25]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1654988.1655003"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2010.121"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/11663812_11"},{"key":"e_1_3_2_1_5_1","volume-title":"Last Accessed","author":"Free Software Downloads CNET.","year":"2012","unstructured":"CNET. Free Software Downloads and Software Reviews . http:\/\/download.cnet.com\/windows\/?tag=hdr;brandnav , Last Accessed March 2012 . CNET. Free Software Downloads and Software Reviews. http:\/\/download.cnet.com\/windows\/?tag=hdr;brandnav, Last Accessed March 2012."},{"key":"e_1_3_2_1_6_1","unstructured":"Danny-Quist. Offensive Computing. http:\/\/offensivecomputing.net\/ Last Accessed March 2012.  Danny-Quist. Offensive Computing. http:\/\/offensivecomputing.net\/ Last Accessed March 2012."},{"key":"e_1_3_2_1_7_1","unstructured":"Datarescue. \"IDA--PRO Disassembler. http:\/\/www.datarescue.com\/idabase.  Datarescue. \"IDA--PRO Disassembler. http:\/\/www.datarescue.com\/idabase."},{"key":"e_1_3_2_1_8_1","volume-title":"Malcode context of api abuse. Technical report","author":"Dunham K.","year":"2011","unstructured":"K. Dunham . Malcode context of api abuse. Technical report , SANS Institute , 2011 . K. Dunham. Malcode context of api abuse. Technical report, SANS Institute, 2011."},{"key":"e_1_3_2_1_9_1","first-page":"13","volume-title":"Journal in Computer Virology","author":"Enamul K.","year":"2010","unstructured":"K. Enamul , W. Andrew , and L. Arun . Malware Phylogeny Generation using Permutations of Code . In Journal in Computer Virology , pages 13 -- 23 . ACM, 2010 . K. Enamul, W. Andrew, and L. Arun. Malware Phylogeny Generation using Permutations of Code. In Journal in Computer Virology, pages 13--23. ACM, 2010."},{"key":"e_1_3_2_1_10_1","unstructured":"ETHERXEN. \"Ether-Xen Hypervisor. http:\/\/ether.gtisc.gatech.edu\/source.html.  ETHERXEN. \"Ether-Xen Hypervisor. http:\/\/ether.gtisc.gatech.edu\/source.html."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1007662407062"},{"key":"e_1_3_2_1_12_1","first-page":"263","volume-title":"Proceedings of the 2010 ACM Symposium on Applied Computing, Journal in Computer Virology","author":"Guillaume B.","year":"2010","unstructured":"B. Guillaume , K. Matthieu , and Y. M. Jean . Architecture of a Morphological Malware Detector . In Proceedings of the 2010 ACM Symposium on Applied Computing, Journal in Computer Virology , pages 263 -- 270 , 2010 . B. Guillaume, K. Matthieu, and Y. M. Jean. Architecture of a Morphological Malware Detector. In Proceedings of the 2010 ACM Symposium on Applied Computing, Journal in Computer Virology, pages 263--270, 2010."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1774088.1774505"},{"key":"e_1_3_2_1_14_1","first-page":"1","volume-title":"Jeong. Code Graph for Malware Detection. In International Conference on Information Networking, ICOIN '08","author":"Heejo L.","year":"2008","unstructured":"L. Heejo and L. Kyoochang , Jeong. Code Graph for Malware Detection. In International Conference on Information Networking, ICOIN '08 , pages 1 -- 5 . IEEE, 2008 . L. Heejo and L. Kyoochang, Jeong. Code Graph for Malware Detection. In International Conference on Information Networking, ICOIN '08, pages 1--5. IEEE, 2008."},{"key":"e_1_3_2_1_15_1","first-page":"1","volume-title":"Proceedings of the 3rd conference on USENIX Windows NT Symposium -","volume":"3","author":"Hunt G.","year":"1999","unstructured":"G. Hunt and D. Brubacher . Detours: Binary Interception of Win32 Functions . In Proceedings of the 3rd conference on USENIX Windows NT Symposium - Volume 3 , WINSYM'99, pages 1 -- 9 . ACM, 1999 . G. Hunt and D. Brubacher. Detours: Binary Interception of Win32 Functions. In Proceedings of the 3rd conference on USENIX Windows NT Symposium - Volume 3, WINSYM'99, pages 1--9. ACM, 1999."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/2070671.2070678"},{"key":"e_1_3_2_1_17_1","unstructured":"Kaspersky. Kaspersky Anti-Virus 2011. http:\/\/www.kaspersky.com\/.  Kaspersky. Kaspersky Anti-Virus 2011. http:\/\/www.kaspersky.com\/."},{"key":"e_1_3_2_1_18_1","first-page":"1137","volume-title":"Proceedings of the 14th international joint conference on Artificial intelligence -","volume":"2","author":"Kohavi R.","year":"1995","unstructured":"R. Kohavi . A Study of Cross-Validation and Bootstrap for Accuracy Estimation and Model Selection . In Proceedings of the 14th international joint conference on Artificial intelligence - Volume 2 , IJCAI'95, pages 1137 -- 1143 , San Francisco, CA, USA , 1995 . Morgan Kaufmann Publishers Inc. R. Kohavi. A Study of Cross-Validation and Bootstrap for Accuracy Estimation and Model Selection. In Proceedings of the 14th international joint conference on Artificial intelligence - Volume 2, IJCAI'95, pages 1137--1143, San Francisco, CA, USA, 1995. Morgan Kaufmann Publishers Inc."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29280-4_28"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2089125.2089126"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2008.4565046"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1854099.1854152"},{"key":"e_1_3_2_1_23_1","volume-title":"Advances in Kernel Methods - Support Vector Learning","author":"Platt J.","year":"1998","unstructured":"J. Platt . Fast Training of Support Vector Machines using Sequential Minimal Optimization . In B. Schoelkopf, C. Burges, and A. Smola, editors, Advances in Kernel Methods - Support Vector Learning . MIT Press , 1998 . J. Platt. Fast Training of Support Vector Machines using Sequential Minimal Optimization. In B. Schoelkopf, C. Burges, and A. Smola, editors, Advances in Kernel Methods - Support Vector Learning. MIT Press, 1998."},{"key":"e_1_3_2_1_24_1","first-page":"411","volume-title":"MetaAware: Identifying Metamorphic Malware. In Computer Security Applications Conference","author":"Qinghua Z.","year":"2007","unstructured":"Z. Qinghua and R. Douglas . MetaAware: Identifying Metamorphic Malware. In Computer Security Applications Conference , Annual , pages 411 -- 420 , 2007 . Z. Qinghua and R. Douglas. MetaAware: Identifying Metamorphic Malware. In Computer Security Applications Conference, Annual, pages 411--420, 2007."},{"key":"e_1_3_2_1_25_1","volume-title":"Programs for Machine Learning","author":"Quinlan R.","year":"1993","unstructured":"R. Quinlan . C4.5 : Programs for Machine Learning . Morgan Kaufmann Publishers , San Mateo, CA , 1993 . R. Quinlan. C4.5: Programs for Machine Learning. Morgan Kaufmann Publishers, San Mateo, CA, 1993."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM.2006.20"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1774088.1774303"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70500-0_25"},{"key":"e_1_3_2_1_29_1","first-page":"1970","volume-title":"Graph based Comparison of Executable Objects","author":"Dullien R. T.","year":"2005","unstructured":"R. T. Dullien and B. Universitaet . Graph based Comparison of Executable Objects , pages 1970 -- 1977 . University of Technology in Florida, 2005 . R. T. Dullien and B. Universitaet. Graph based Comparison of Executable Objects, pages 1970--1977. University of Technology in Florida, 2005."},{"key":"e_1_3_2_1_30_1","volume-title":"MAY","author":"Tan P.-N.","year":"2006","unstructured":"P.-N. Tan , M. Steinbach , and V. Kumar . Introduction to Data Mining. Pearson Education Inc. South Asia, Noida, India, 1 edition , MAY 2006 . P.-N. Tan, M. Steinbach, and V. Kumar. Introduction to Data Mining. Pearson Education Inc. South Asia, Noida, India, 1 edition, MAY 2006."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2010.5665796"},{"key":"e_1_3_2_1_32_1","volume-title":"Last Accessed","author":"University","year":"2012","unstructured":"University OfWaikato. WEKA: Data Mining with Open Source Machine Learning Software. http:\/\/www.cs.waikato.ac.nz\/ml\/weka , Last Accessed March 2012 . UniversityOfWaikato. WEKA:Data Mining with Open Source Machine Learning Software. http:\/\/www.cs.waikato.ac.nz\/ml\/weka, Last Accessed March 2012."},{"key":"e_1_3_2_1_33_1","volume-title":"Last Accessed","year":"2012","unstructured":"VirusTotal. VirusTotal - Free Online Virus, Malware and URL Scanner, https:\/\/www.virustotal.com\/ , Last Accessed January 2012 . VirusTotal. VirusTotal - Free Online Virus, Malware and URL Scanner, https:\/\/www.virustotal.com\/, Last Accessed January 2012."},{"key":"e_1_3_2_1_34_1","volume-title":"Last Accessed","author":"Virus Collections","year":"2012","unstructured":"VX-Heavens. Virus Collections (VXheavens). http:\/\/vl.netlux.org\/vl.php\/ , Last Accessed February 2012 . VX-Heavens. Virus Collections (VXheavens). http:\/\/vl.netlux.org\/vl.php\/, Last Accessed February 2012."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-006-0028-7"}],"event":{"name":"SIN '12: 5th International Conference of Security of Information and Networks","location":"Jaipur India","acronym":"SIN '12","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the Fifth International Conference on Security of Information and Networks"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2388576.2388594","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2388576.2388594","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:21:13Z","timestamp":1750238473000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2388576.2388594"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,10,25]]},"references-count":35,"alternative-id":["10.1145\/2388576.2388594","10.1145\/2388576"],"URL":"https:\/\/doi.org\/10.1145\/2388576.2388594","relation":{},"subject":[],"published":{"date-parts":[[2012,10,25]]},"assertion":[{"value":"2012-10-25","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}