{"id":"https://openalex.org/W168640152","doi":null,"title":"Static Detection of Malicious Code in Executable Programs","display_name":"Static Detection of Malicious Code in Executable Programs","publication_year":2000,"publication_date":"2000-01-01","ids":{"openalex":"https://openalex.org/W168640152","mag":"168640152"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.102.6845","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.102.6845","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.sreis.org/old/2001/papers/sreis014.pdf","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050388566","display_name":"Janick Bergeron","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I43406934","display_name":"Universit\u00e9 Laval","ror":"https://ror.org/04sjchr03","country_code":"CA","type":"education","lineage":["https://openalex.org/I43406934"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Janick Bergeron","raw_affiliation_strings":["UNIVERSITE LAVAL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UNIVERSITE LAVAL","institution_ids":["https://openalex.org/I43406934"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043","observed_orcids":["https://orcid.org/0000-0003-3015-3043"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0003-3015-3043","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000109637","display_name":"Jos\u00e9e Desharnais","orcid":"https://orcid.org/0000-0003-2410-3314","observed_orcids":["https://orcid.org/0000-0003-2410-3314"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jos\u00e9e Desharnais","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0003-2410-3314","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014329793","display_name":"Mourad Erhioui","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mourad Erhioui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015206009","display_name":"Y. Lavoie","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Y. Lavoie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5046818389","display_name":"Nadia Tawbi","orcid":"https://orcid.org/0000-0002-1030-0918","observed_orcids":["https://orcid.org/0000-0002-1030-0918"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nadia Tawbi","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-1030-0918","affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3035,"has_fulltext":false,"cited_by_count":175,"citation_normalized_percentile":{"value":0.81826877,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":100},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7372999787330627,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7372999787330627,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.2605000138282776,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/static-analysis","display_name":"static analysis","score":0.546999990940094},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.9129999876022339},{"id":"https://openalex.org/keywords/binary-executable-analysis","display_name":"binary executable analysis","score":0.5989999771118164},{"id":"https://openalex.org/keywords/semantic-analysis","display_name":"semantic analysis","score":0.7210000157356262},{"id":"https://openalex.org/keywords/intermediate-representation","display_name":"intermediate representation","score":0.7799999713897705},{"id":"https://openalex.org/keywords/flow-based-analysis","display_name":"flow-based analysis","score":0.9369999766349792},{"id":"https://openalex.org/keywords/model-checking","display_name":"model checking","score":0.8700000047683716},{"id":"https://openalex.org/keywords/security-policy","display_name":"security policy","score":0.921999990940094},{"id":"https://openalex.org/keywords/unknown-malware-detection","display_name":"unknown malware detection","score":0.6309999823570251}],"concepts":[{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7294262647628784},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6615851521492004},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.574746310710907},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5504169464111328},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39687806367874146},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.12635588645935059}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.102.6845","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.102.6845","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.sreis.org/old/2001/papers/sreis014.pdf","raw_type":"text"},{"id":"mag:168640152","doi":null,"is_oa":false,"landing_page_url":"https://www.ift.ulaval.ca/fileadmin/ift/Nadia_Tawbi/PDF/SREIS_1.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W1491178396","https://openalex.org/W1506151672","https://openalex.org/W1507654557","https://openalex.org/W1996785213","https://openalex.org/W2036910349","https://openalex.org/W2109540106","https://openalex.org/W2117189826","https://openalex.org/W2134312016"],"related_works":["https://openalex.org/W1952910495","https://openalex.org/W7101004332","https://openalex.org/W1971505071","https://openalex.org/W2789555805","https://openalex.org/W2032806590","https://openalex.org/W2034233301","https://openalex.org/W571085834","https://openalex.org/W2506798315","https://openalex.org/W2110615297","https://openalex.org/W3043346182"],"abstract_inverted_index":{"In":[0],"this":[1],"paper,":[2],"we":[3],"propose":[4],"a":[5,22,66],"new":[6],"approach":[7,19],"for":[8,51],"the":[9,32,55],"static":[10,63,88],"detection":[11,33],"of":[12,34,54,57,65,76,90],"malicious":[13,36],"code":[14],"in":[15,71],"executable":[16,68],"programs.":[17],"Our":[18],"rests":[20],"on":[21,26,44],"semantic":[23],"analysis":[24,39,48,64,81],"based":[25],"behaviour":[27,56],"that":[28,82],"even":[29],"makes":[30],"possible":[31],"unknown":[35],"code.":[37,46],"This":[38],"is":[40,69],"carried":[41],"out":[42],"directly":[43],"binary":[45,67],"Static":[47],"offers":[49],"techniques":[50],"predicting":[52],"properties":[53],"programs":[58],"without":[59],"running":[60],"them.":[61],"The":[62],"achieved":[70],"three":[72],"major":[73],"steps:":[74],"construction":[75],"an":[77],"intermediate":[78],"representation,":[79],"flow-based":[80],"captures":[83],"security-oriented":[84],"program":[85],"behaviour,":[86],"and":[87,99,106],"verification":[89],"critical":[91],"behaviours":[92],"against":[93],"security":[94],"policies":[95],"(model":[96],"checking).":[97],"Categories":[98],"Subject":[100],"Descriptors":[101],"C.2.0":[102],"[Computer-Communication":[103],"Networks]:":[104],"General\u2014Security":[105],"protection":[107],"(e.g.,":[108],"firewalls);":[109],"D.2.4":[110],"[Software":[111],"Engineering]:":[112]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":8},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":10},{"year":2015,"cited_by_count":7},{"year":2014,"cited_by_count":5},{"year":2013,"cited_by_count":17},{"year":2012,"cited_by_count":10}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}