{"id":"https://openalex.org/W4415292457","doi":"https://doi.org/10.1007/978-3-032-07894-0_26","title":"The Polymorphism Maze: Understanding Diversities and\u00a0Similarities in\u00a0Malware Families","display_name":"The Polymorphism Maze: Understanding Diversities and\u00a0Similarities in\u00a0Malware Families","publication_year":2025,"publication_date":"2025-10-17","ids":{"openalex":"https://openalex.org/W4415292457","doi":"https://doi.org/10.1007/978-3-032-07894-0_26"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-032-07894-0_26","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-032-07894-0_26","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032151753","display_name":"Antonino Vitale","orcid":"https://orcid.org/0009-0002-8452-4532"},"institutions":[{"id":"https://openalex.org/I1902872","display_name":"EURECOM","ror":"https://ror.org/00sse7z02","country_code":"FR","type":"education","lineage":["https://openalex.org/I1902872","https://openalex.org/I205703379"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Antonino Vitale","raw_affiliation_strings":["EURECOM, Biot, France"],"raw_orcid":"https://orcid.org/0009-0002-8452-4532","affiliations":[{"raw_affiliation_string":"EURECOM, Biot, France","institution_ids":["https://openalex.org/I1902872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030403848","display_name":"Simone Aonzo","orcid":"https://orcid.org/0000-0001-9547-3502"},"institutions":[{"id":"https://openalex.org/I1902872","display_name":"EURECOM","ror":"https://ror.org/00sse7z02","country_code":"FR","type":"education","lineage":["https://openalex.org/I1902872","https://openalex.org/I205703379"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Simone Aonzo","raw_affiliation_strings":["EURECOM, Biot, France"],"raw_orcid":"https://orcid.org/0000-0001-9547-3502","affiliations":[{"raw_affiliation_string":"EURECOM, Biot, France","institution_ids":["https://openalex.org/I1902872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025601945","display_name":"Savino Dambra","orcid":"https://orcid.org/0000-0002-0988-9366"},"institutions":[{"id":"https://openalex.org/I36326968","display_name":"InterDigital (United States)","ror":"https://ror.org/02w335z67","country_code":"US","type":"company","lineage":["https://openalex.org/I36326968"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Savino Dambra","raw_affiliation_strings":["GenDigital, Paris, France"],"raw_orcid":"https://orcid.org/0000-0002-0988-9366","affiliations":[{"raw_affiliation_string":"GenDigital, Paris, France","institution_ids":["https://openalex.org/I36326968"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001530440","display_name":"Nanda Rani","orcid":null},"institutions":[{"id":"https://openalex.org/I94234084","display_name":"Indian Institute of Technology Kanpur","ror":"https://ror.org/05pjsgx75","country_code":"IN","type":"education","lineage":["https://openalex.org/I94234084"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Nanda Rani","raw_affiliation_strings":["Indian Institute of Technology Kanpur, Kanpur, India"],"raw_orcid":"https://orcid.org/0000-0003-1255-5284","affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kanpur, Kanpur, India","institution_ids":["https://openalex.org/I94234084"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120039521","display_name":"Lorenzo Ippolito","orcid":null},"institutions":[{"id":"https://openalex.org/I1902872","display_name":"EURECOM","ror":"https://ror.org/00sse7z02","country_code":"FR","type":"education","lineage":["https://openalex.org/I1902872","https://openalex.org/I205703379"]},{"id":"https://openalex.org/I4210162154","display_name":"IMDEA Software Institute","ror":"https://ror.org/04xvfkh51","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I4210162154"]}],"countries":["ES","FR"],"is_corresponding":false,"raw_author_name":"Lorenzo Ippolito","raw_affiliation_strings":["EURECOM, Biot, France","IMDEA Software Institute, Madrid, Spain"],"raw_orcid":"https://orcid.org/0009-0008-7978-6777","affiliations":[{"raw_affiliation_string":"EURECOM, Biot, France","institution_ids":["https://openalex.org/I1902872"]},{"raw_affiliation_string":"IMDEA Software Institute, Madrid, Spain","institution_ids":["https://openalex.org/I4210162154"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046448226","display_name":"Platon Kotzias","orcid":"https://orcid.org/0000-0003-3375-6069"},"institutions":[{"id":"https://openalex.org/I4210135209","display_name":"Centerforce","ror":"https://ror.org/02tcncc65","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I4210135209"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Platon Kotzias","raw_affiliation_strings":["BforeAI, New York, USA"],"raw_orcid":"https://orcid.org/0000-0003-3375-6069","affiliations":[{"raw_affiliation_string":"BforeAI, New York, USA","institution_ids":["https://openalex.org/I4210135209"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101938709","display_name":"Juan Caballero","orcid":"https://orcid.org/0000-0003-2962-1348"},"institutions":[{"id":"https://openalex.org/I4210162154","display_name":"IMDEA Software Institute","ror":"https://ror.org/04xvfkh51","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I4210162154"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Juan Caballero","raw_affiliation_strings":["IMDEA Software Institute, Madrid, Spain"],"raw_orcid":"https://orcid.org/0000-0003-2962-1348","affiliations":[{"raw_affiliation_string":"IMDEA Software Institute, Madrid, Spain","institution_ids":["https://openalex.org/I4210162154"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002025561","display_name":"Davide Balzarotti","orcid":"https://orcid.org/0000-0001-5957-6213"},"institutions":[{"id":"https://openalex.org/I1902872","display_name":"EURECOM","ror":"https://ror.org/00sse7z02","country_code":"FR","type":"education","lineage":["https://openalex.org/I1902872","https://openalex.org/I205703379"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Davide Balzarotti","raw_affiliation_strings":["EURECOM, Biot, France"],"raw_orcid":"https://orcid.org/0000-0001-5957-6213","affiliations":[{"raw_affiliation_string":"EURECOM, Biot, France","institution_ids":["https://openalex.org/I1902872"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5032151753"],"corresponding_institution_ids":["https://openalex.org/I1902872"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.68797748,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"505","last_page":"525"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.954200029373169},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.8102999925613403},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.4724999964237213},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.39629998803138733},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.3749000132083893},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3659000098705292}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.954200029373169},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.8102999925613403},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7648000121116638},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.4724999964237213},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.39629998803138733},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.3749000132083893},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3659000098705292},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.31130000948905945},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30880001187324524},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.289900004863739},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.28949999809265137},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2669000029563904},{"id":"https://openalex.org/C76509639","wikidata":"https://www.wikidata.org/wiki/Q918036","display_name":"Race (biology)","level":2,"score":0.26350000500679016},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-3-032-07894-0_26","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-032-07894-0_26","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W95177030","https://openalex.org/W1507388815","https://openalex.org/W1549130775","https://openalex.org/W2012969172","https://openalex.org/W2018175892","https://openalex.org/W2021963610","https://openalex.org/W2024170198","https://openalex.org/W2037109870","https://openalex.org/W2043793914","https://openalex.org/W2052854541","https://openalex.org/W2068211976","https://openalex.org/W2124659400","https://openalex.org/W2126436046","https://openalex.org/W2168154523","https://openalex.org/W2289955225","https://openalex.org/W2506582421","https://openalex.org/W2514847810","https://openalex.org/W2575599800","https://openalex.org/W2600031682","https://openalex.org/W2621204675","https://openalex.org/W2792211467","https://openalex.org/W2811082699","https://openalex.org/W2888320512","https://openalex.org/W2942472907","https://openalex.org/W2962688774","https://openalex.org/W3004894946","https://openalex.org/W3007070494","https://openalex.org/W3035678078","https://openalex.org/W3113371616","https://openalex.org/W3119689710","https://openalex.org/W3202929541","https://openalex.org/W4296068317","https://openalex.org/W4380031353","https://openalex.org/W4388858920","https://openalex.org/W4388867297"],"related_works":[],"abstract_inverted_index":null,"counts_by_year":[],"updated_date":"2026-06-13T06:13:01.061226","created_date":"2025-10-18T00:00:00"}
