{"id":"https://openalex.org/W2341904672","doi":"https://doi.org/10.1007/s00165-016-0357-3","title":"Partial evaluation of string obfuscations for Java malware detection","display_name":"Partial evaluation of string obfuscations for Java malware detection","publication_year":2016,"publication_date":"2016-02-19","ids":{"openalex":"https://openalex.org/W2341904672","doi":"https://doi.org/10.1007/s00165-016-0357-3","mag":"2341904672"},"language":"en","primary_location":{"id":"doi:10.1007/s00165-016-0357-3","is_oa":false,"landing_page_url":"https://doi.org/10.1007/s00165-016-0357-3","pdf_url":null,"source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086730761","display_name":"Aziem Chawdhary","orcid":"https://orcid.org/0000-0003-4624-9648"},"institutions":[{"id":"https://openalex.org/I20581793","display_name":"University of Kent","ror":"https://ror.org/00xkeyj56","country_code":"GB","type":"education","lineage":["https://openalex.org/I20581793"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Aziem Chawdhary","raw_affiliation_strings":["School of Computing, University of Kent, CT2 7NF, Kent, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing, University of Kent, CT2 7NF, Kent, UK","institution_ids":["https://openalex.org/I20581793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104332992","display_name":"Ranjeet Singh","orcid":null},"institutions":[{"id":"https://openalex.org/I20581793","display_name":"University of Kent","ror":"https://ror.org/00xkeyj56","country_code":"GB","type":"education","lineage":["https://openalex.org/I20581793"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ranjeet Singh","raw_affiliation_strings":["School of Computing, University of Kent, CT2 7NF, Kent, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing, University of Kent, CT2 7NF, Kent, UK","institution_ids":["https://openalex.org/I20581793"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103107567","display_name":"Andy King","orcid":"https://orcid.org/0000-0001-5806-4822"},"institutions":[{"id":"https://openalex.org/I20581793","display_name":"University of Kent","ror":"https://ror.org/00xkeyj56","country_code":"GB","type":"education","lineage":["https://openalex.org/I20581793"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Andy King","raw_affiliation_strings":["School of Computing, University of Kent, CT2 7NF, Kent, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing, University of Kent, CT2 7NF, Kent, UK","institution_ids":["https://openalex.org/I20581793"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.7658,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.70425095,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"29","issue":"1","first_page":"33","last_page":"55"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9082590341567993},{"id":"https://openalex.org/keywords/bytecode","display_name":"Bytecode","score":0.7186664938926697},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.7120795249938965},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.687989354133606},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.6788841485977173},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6722940802574158},{"id":"https://openalex.org/keywords/java-bytecode","display_name":"Java bytecode","score":0.5817869901657104},{"id":"https://openalex.org/keywords/partial-evaluation","display_name":"Partial evaluation","score":0.5499168038368225},{"id":"https://openalex.org/keywords/string","display_name":"String (physics)","score":0.5459184050559998},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.5374963879585266},{"id":"https://openalex.org/keywords/java-modeling-language","display_name":"Java Modeling Language","score":0.47063562273979187},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4534847140312195},{"id":"https://openalex.org/keywords/java-annotation","display_name":"Java annotation","score":0.39763343334198},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3807202875614166},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3549281358718872},{"id":"https://openalex.org/keywords/real-time-java","display_name":"Real time Java","score":0.32510632276535034},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.12120518088340759}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9082590341567993},{"id":"https://openalex.org/C2779818221","wikidata":"https://www.wikidata.org/wiki/Q837330","display_name":"Bytecode","level":3,"score":0.7186664938926697},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.7120795249938965},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.687989354133606},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.6788841485977173},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6722940802574158},{"id":"https://openalex.org/C2777472213","wikidata":"https://www.wikidata.org/wiki/Q137496","display_name":"Java bytecode","level":5,"score":0.5817869901657104},{"id":"https://openalex.org/C195701839","wikidata":"https://www.wikidata.org/wiki/Q4008398","display_name":"Partial evaluation","level":2,"score":0.5499168038368225},{"id":"https://openalex.org/C157486923","wikidata":"https://www.wikidata.org/wiki/Q1376436","display_name":"String (physics)","level":2,"score":0.5459184050559998},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.5374963879585266},{"id":"https://openalex.org/C60945770","wikidata":"https://www.wikidata.org/wiki/Q2517517","display_name":"Java Modeling Language","level":5,"score":0.47063562273979187},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4534847140312195},{"id":"https://openalex.org/C168702491","wikidata":"https://www.wikidata.org/wiki/Q567345","display_name":"Java annotation","level":4,"score":0.39763343334198},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3807202875614166},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3549281358718872},{"id":"https://openalex.org/C132106392","wikidata":"https://www.wikidata.org/wiki/Q1373903","display_name":"Real time Java","level":3,"score":0.32510632276535034},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.12120518088340759},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s00165-016-0357-3","is_oa":false,"landing_page_url":"https://doi.org/10.1007/s00165-016-0357-3","pdf_url":null,"source":{"id":"https://openalex.org/S128250343","display_name":"Formal Aspects of Computing","issn_l":"0934-5043","issn":["0934-5043","1433-299X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Formal Aspects of Computing","raw_type":"journal-article"},{"id":"pmh:oai:kar.kent.ac.uk:53716","is_oa":false,"landing_page_url":"https://kar.kent.ac.uk/53716/","pdf_url":null,"source":{"id":"https://openalex.org/S4377196264","display_name":"Kent Academic Repository (University of Kent)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I20581793","host_organization_name":"University of Kent","host_organization_lineage":["https://openalex.org/I20581793"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6490262474","display_name":null,"funder_award_id":"EP/K032585/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320312768","display_name":"GCHQ","ror":"https://ror.org/052mq0r90"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1506927614","https://openalex.org/W1514023947","https://openalex.org/W1515648542","https://openalex.org/W1530069485","https://openalex.org/W1546933976","https://openalex.org/W1556604985","https://openalex.org/W1668251704","https://openalex.org/W1964962870","https://openalex.org/W1991079885","https://openalex.org/W2009674917","https://openalex.org/W2037035101","https://openalex.org/W2053307247","https://openalex.org/W2061746685","https://openalex.org/W2092282367","https://openalex.org/W2108341399","https://openalex.org/W2118516658","https://openalex.org/W2131916295","https://openalex.org/W2133824159","https://openalex.org/W2162405266","https://openalex.org/W3003983364","https://openalex.org/W3161682788","https://openalex.org/W4242376600","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W1970806266","https://openalex.org/W2016474211","https://openalex.org/W2186011611","https://openalex.org/W2117534212","https://openalex.org/W1606351121","https://openalex.org/W1532887546","https://openalex.org/W1521580745","https://openalex.org/W2169629723","https://openalex.org/W2048348930","https://openalex.org/W2505352121"],"abstract_inverted_index":{"Abstract":[0],"The":[1,99],"fact":[2],"that":[3,15,74],"Java":[4,33,61],"is":[5,28,108],"platform":[6],"independent":[7],"gives":[8],"hackers":[9],"the":[10,134],"opportunity":[11],"to":[12,36,49,55,68,86,90],"write":[13],"exploits":[14,34],"can":[16,75],"target":[17],"users":[18],"on":[19],"any":[20],"platform,":[21],"which":[22,107],"has":[23],"a":[24,29,102,138],"JVM":[25,113],"implementation.":[26],"Metasploit":[27],"well-known":[30],"source":[31],"of":[32,137,140],"and":[35,65,94,118,121],"circumvent":[37],"detection":[38,135],"by":[39],"anti":[40],"virus":[41],"(AV)":[42],"software,":[43],"obfuscation":[44,58,64],"techniques":[45,59,73],"are":[46],"routinely":[47],"applied":[48],"make":[50],"an":[51,109],"exploit":[52],"more":[53],"difficult":[54],"recognise.":[56],"Popular":[57],"for":[60,105,112,116],"include":[62],"string":[63],"applying":[66],"reflection":[67],"hide":[69],"method":[70],"calls;":[71],"two":[72],"either":[76],"be":[77],"used":[78],"together":[79],"or":[80],"independently.":[81],"This":[82],"paper":[83,100],"shows":[84],"how":[85,123],"apply":[87],"partial":[88,103],"evaluation":[89],"remove":[91],"these":[92],"obfuscations":[93],"thereby":[95],"improve":[96],"AV":[97,142],"matching.":[98],"presents":[101],"evaluator":[104],"Jimple,":[106],"intermediate":[110],"language":[111],"bytecode":[114],"designed":[115],"optimisation":[117],"program":[119],"analysis,":[120],"demonstrates":[122],"partially":[124],"evaluated":[125],"Jimple":[126],"code,":[127],"when":[128],"transformed":[129],"back":[130],"into":[131],"Java,":[132],"improves":[133],"rates":[136],"number":[139],"commercial":[141],"products.":[143]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}