{"id":"https://openalex.org/W2939355416","doi":"https://doi.org/10.1109/icaict.2017.8687105","title":"A Frequency Approach to Creation of Executable File Signatures for their Identification","display_name":"A Frequency Approach to Creation of Executable File Signatures for their Identification","publication_year":2017,"publication_date":"2017-09-01","ids":{"openalex":"https://openalex.org/W2939355416","doi":"https://doi.org/10.1109/icaict.2017.8687105","mag":"2939355416"},"language":"en","primary_location":{"id":"doi:10.1109/icaict.2017.8687105","doi":"https://doi.org/10.1109/icaict.2017.8687105","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icaict.2017.8687105","pdf_url":null,"source":{"id":"https://openalex.org/S7407087188","display_name":"IEEE International Conference on Application of Information and Communication Technologies (AICT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE 11th International Conference on Application of Information and Communication Technologies (AICT)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003388335","display_name":"Kseniya Salakhutdinova","orcid":"https://orcid.org/0000-0001-9254-8652","observed_orcids":["https://orcid.org/0000-0001-9254-8652"]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Kseniya Salakhutdinova","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054535288","display_name":"Ilya Lebedev","orcid":"https://orcid.org/0000-0001-6753-2181","observed_orcids":["https://orcid.org/0000-0001-6753-2181"]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Ilya Lebedev","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031039490","display_name":"Irina Krivtsova","orcid":"https://orcid.org/0000-0003-2483-1637","observed_orcids":["https://orcid.org/0000-0003-2483-1637"]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Irina Krivtsova","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076489844","display_name":"Nurzhan Bazhayev","orcid":"https://orcid.org/0009-0009-4820-6132","observed_orcids":["https://orcid.org/0009-0009-4820-6132"]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Nurzhan Bazhayev","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086540751","display_name":"\u0421\u0443\u0445\u043e\u043f\u0430\u0440\u043e\u0432 \u041c\u0438\u0445\u0430\u0438\u043b \u0415\u0432\u0433\u0435\u043d\u044c\u0435\u0432\u0438\u0447","orcid":"https://orcid.org/0000-0003-1798-8257","observed_orcids":["https://orcid.org/0000-0003-1798-8257"]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Mikhail Sukhoparov","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019069702","display_name":"Pavel Smimov","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Pavel Smimov","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018085142","display_name":"Dmitry M. Markelov","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Dmitry Markelov","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050951696","display_name":"Alexander Davvdov","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Alexander Davvdov","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089849578","display_name":"Sergey Pecherkin","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Sergey Pecherkin","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030101232","display_name":"Dmitry Kolcherin","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Dmitry Kolcherin","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082726965","display_name":"Yuriy Shaparenko","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Yuriy Shaparenko","raw_affiliation_strings":["Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091839573","display_name":"Yury Iskanderov","orcid":"https://orcid.org/0000-0002-8168-6504","observed_orcids":["https://orcid.org/0000-0002-8168-6504"]},"institutions":[{"id":"https://openalex.org/I1313323035","display_name":"Russian Academy of Sciences","ror":"https://ror.org/05qrfxd25","country_code":"RU","type":"government","lineage":["https://openalex.org/I1313323035"]},{"id":"https://openalex.org/I4210103826","display_name":"St. Petersburg Institute for Informatics and Automation","ror":"https://ror.org/01ccb9w37","country_code":"RU","type":"facility","lineage":["https://openalex.org/I4210103826"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Yuriy Iskanderov","raw_affiliation_strings":["St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences (SPIIRAS), Saint-Petersburg, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences (SPIIRAS), Saint-Petersburg, Russian Federation","institution_ids":["https://openalex.org/I1313323035","https://openalex.org/I4210103826"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1818,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.29572989,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":93},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.36230000853538513,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.36230000853538513,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.33640000224113464,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.09059999883174896,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/program-identification","display_name":"program identification","score":0.699999988079071},{"id":"https://openalex.org/keywords/frequency-distribution","display_name":"frequency distribution","score":0.7300000190734863},{"id":"https://openalex.org/keywords/binary-codes","display_name":"binary codes","score":0.5929999947547913},{"id":"https://openalex.org/keywords/fisher-criterion","display_name":"Fisher criterion","score":0.5350000262260437},{"id":"https://openalex.org/keywords/slope-analysis","display_name":"slope analysis","score":0.550000011920929},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.6859999895095825}],"concepts":[{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.9137383103370667},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8084555864334106},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6757627129554749},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.6542143821716309},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.49857473373413086},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.4616367518901825},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4305950701236725},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4123808741569519},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32911837100982666},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3232649266719818},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0784769058227539},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icaict.2017.8687105","doi":"https://doi.org/10.1109/icaict.2017.8687105","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icaict.2017.8687105","pdf_url":null,"source":{"id":"https://openalex.org/S7407087188","display_name":"IEEE International Conference on Application of Information and Communication Technologies (AICT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE 11th International Conference on Application of Information and Communication Technologies (AICT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W1570277071","https://openalex.org/W1577124026","https://openalex.org/W1578135685","https://openalex.org/W1591082683","https://openalex.org/W2168154523","https://openalex.org/W2492099147","https://openalex.org/W2979178423","https://openalex.org/W4213063110","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2766541793","https://openalex.org/W2802971017","https://openalex.org/W2893096774","https://openalex.org/W2541479067","https://openalex.org/W4213063110","https://openalex.org/W2921071448","https://openalex.org/W4402644757","https://openalex.org/W4307615744","https://openalex.org/W2049293663","https://openalex.org/W1586598165"],"abstract_inverted_index":{"The":[0,79,111],"paper":[1],"presents":[2],"methods":[3],"of":[4,13,31,47,50,56,59,67,70,82,91,100,106],"executable":[5,83],"file":[6,32,84],"signature":[7],"creation":[8,46],"based":[9],"on":[10,93],"frequency":[11,68],"distributions":[12],"their":[14,74,94],"informative":[15],"features":[16],"to":[17,45,117],"be":[18,26,115],"applied":[19],"for":[20],"program":[21,51],"identification.":[22],"Identification":[23],"here":[24],"should":[25],"understood":[27],"as":[28],"a":[29,39,60,97],"process":[30],"recognition":[33],"by":[34],"establishing":[35],"its":[36],"coincidence":[37],"with":[38],"particular":[40],"program.":[41],"A":[42],"new":[43,80],"approach":[44],"the":[48,89,107],"archive":[49],"signatures,":[52],"both":[53],"in":[54,65,73],"terms":[55,66],"byte-frequency":[57],"distribution":[58,69],"program's":[61],"binary":[62],"code,":[63],"and":[64,88,104],"assembler":[71],"commands":[72],"disassembler":[75],"codes,":[76],"is":[77,86],"presented.":[78],"method":[81,113],"identification":[85,95],"offered":[87],"results":[90],"experiments":[92],"using":[96],"statistical":[98],"criterion":[99],"\u03c6":[101],"*":[102],"-Fisher":[103],"analysis":[105],"slope":[108],"are":[109],"provided.":[110],"proposed":[112],"can":[114],"used":[116],"audit":[118],"data-storage":[119],"medium.":[120]},"counts_by_year":[{"year":2020,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2019-04-25T00:00:00"}