{"id":"https://openalex.org/W4317543207","doi":"https://doi.org/10.18464/cybin.v8i1.43","title":"Incremental Clustering of Malware Packers using features based on Transformed CFG","display_name":"Incremental Clustering of Malware Packers using features based on Transformed CFG","publication_year":2024,"publication_date":"2024-02-25","ids":{"openalex":"https://openalex.org/W4317543207","doi":"https://doi.org/10.18464/cybin.v8i1.43"},"language":"en","primary_location":{"id":"pmh:oai:ojs2.cyberjournal.cecyf.fr:article/43","doi":null,"is_oa":true,"landing_page_url":"https://cyberjournal.cecyf.fr/index.php/index/article/view/43","pdf_url":null,"source":{"id":"https://openalex.org/S7407078769","display_name":"The Journal on Cybercrime and Digital Investigations","issn_l":"2494-2715","issn":["2494-2715"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"10.18464/cybin.v8i1","raw_type":"info:eu-repo/semantics/article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://cyberjournal.cecyf.fr/index.php/index/article/view/43","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108829041","display_name":"Ludovic Robin","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Robin, Ludovic","raw_affiliation_strings":["Cyber-Detect"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber-Detect","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5108829041"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/incremental-clustering","display_name":"incremental clustering","score":0.8149999976158142},{"id":"https://openalex.org/keywords/static-analysis","display_name":"static analysis","score":0.6639999747276306}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8359196186065674},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.6791248321533203},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6489735841751099},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.37519216537475586},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3422528803348541},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.19955986738204956}],"mesh":[],"locations_count":4,"locations":[{"id":"pmh:oai:ojs2.cyberjournal.cecyf.fr:article/43","doi":null,"is_oa":true,"landing_page_url":"https://cyberjournal.cecyf.fr/index.php/index/article/view/43","pdf_url":null,"source":{"id":"https://openalex.org/S7407078769","display_name":"The Journal on Cybercrime and Digital Investigations","issn_l":"2494-2715","issn":["2494-2715"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"10.18464/cybin.v8i1","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:HAL:hal-03940881v1","doi":null,"is_oa":true,"landing_page_url":"https://hal.science/hal-03940881","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://hal.science/hal-03940881","raw_type":"info:eu-repo/semantics/preprint"},{"id":"pmh:oai:HAL:hal-03940881v2","doi":null,"is_oa":true,"landing_page_url":"https://hal.science/hal-03940881v2/document","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2022","raw_type":"info:eu-repo/semantics/preprint"},{"id":"doi:10.18464/cybin.v8i1.43","doi":"https://doi.org/10.18464/cybin.v8i1.43","is_oa":true,"landing_page_url":"https://doi.org/10.18464/cybin.v8i1.43","pdf_url":null,"source":{"id":"https://openalex.org/S7407051747","display_name":"Centre expert contre la cybercriminalit\u00e9 fran\u00e7ais","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"pmh:oai:ojs2.cyberjournal.cecyf.fr:article/43","doi":null,"is_oa":true,"landing_page_url":"https://cyberjournal.cecyf.fr/index.php/index/article/view/43","pdf_url":null,"source":{"id":"https://openalex.org/S7407078769","display_name":"The Journal on Cybercrime and Digital Investigations","issn_l":"2494-2715","issn":["2494-2715"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"10.18464/cybin.v8i1","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W3137670093","https://openalex.org/W2611859431","https://openalex.org/W6998703025","https://openalex.org/W2947883149","https://openalex.org/W4385723334","https://openalex.org/W4410113888","https://openalex.org/W2900986841","https://openalex.org/W3093600255","https://openalex.org/W4287448733","https://openalex.org/W7080693377"],"abstract_inverted_index":{"Packer":[0],"detection":[1,17,31],"is":[2,9,26,46,52,80,92],"an":[3],"important":[4],"topic":[5],"because":[6,32],"most":[7],"malware":[8],"packed":[10],"and":[11,79],"this":[12,57],"allows":[13],"it":[14,33,35,73],"to":[15,29,37,63,75,84,101],"avoid":[16],"based":[18],"on":[19],"static":[20,41],"analysis.":[21],"Identifying":[22],"classes":[23,87],"of":[24],"packers":[25,65],"the":[27],"key":[28],"effective":[30],"makes":[34,72],"easier":[36],"determine":[38],"from":[39,66],"a":[40,50,93,96],"analysis":[42,45],"whether":[43,49],"further":[44],"needed":[47],"or":[48],"decision":[51],"already":[53],"possible.":[54],"Thus":[55],"in":[56],"work":[58],"we":[59],"propose":[60],"new":[61],"features":[62],"cluster":[64,77],"their":[67],"unpacking":[68],"function.":[69],"This":[70],"method":[71],"possible":[74],"effectively":[76],"packers,":[78],"able,":[81],"by":[82,89],"clustering,":[83],"identify":[85,102],"packer":[86],"used":[88],"malware.":[90],"It":[91],"step":[94],"towards":[95],"larger":[97],"data":[98],"clustering":[99],"allowing":[100],"custom":[103],"packers.":[104]},"counts_by_year":[],"updated_date":"2026-10-25T09:29:13.331239","created_date":"2023-01-20T00:00:00"}