{"id":"https://openalex.org/W1553801604","doi":"https://doi.org/10.1007/s11416-011-0151-y","title":"Malware classification based on call graph clustering","display_name":"Malware classification based on call graph clustering","publication_year":2011,"publication_date":"2011-02-02","ids":{"openalex":"https://openalex.org/W1553801604","doi":"https://doi.org/10.1007/s11416-011-0151-y","mag":"1553801604"},"language":"en","primary_location":{"id":"doi:10.1007/s11416-011-0151-y","is_oa":false,"landing_page_url":"https://doi.org/10.1007/s11416-011-0151-y","pdf_url":null,"source":{"id":"https://openalex.org/S192253037","display_name":"Journal in Computer Virology","issn_l":"1772-9890","issn":["1772-9890","1772-9904"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal in Computer Virology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023477100","display_name":"Joris Kinable","orcid":"https://orcid.org/0000-0002-1996-805X"},"institutions":[{"id":"https://openalex.org/I32943570","display_name":"Helsinki Institute for Information Technology","ror":"https://ror.org/05kph4940","country_code":"FI","type":"facility","lineage":["https://openalex.org/I133731052","https://openalex.org/I32943570","https://openalex.org/I9927081"]},{"id":"https://openalex.org/I4210134168","display_name":"Katholieke Hogeschool Vives","ror":"https://ror.org/02rnb8t27","country_code":"BE","type":"education","lineage":["https://openalex.org/I4210134168"]},{"id":"https://openalex.org/I9927081","display_name":"Aalto University","ror":"https://ror.org/020hwjq30","country_code":"FI","type":"education","lineage":["https://openalex.org/I9927081"]}],"countries":["BE","FI"],"is_corresponding":true,"raw_author_name":"Joris Kinable","raw_affiliation_strings":["Department of Computer Science, Katholieke Universiteit Leuven (Kortrijk), Etienne Sabbelaan 53, 8500, Kortrijk, Belgium","Department of Information and Computer Science, Helsinki Institute for Information Technology Aalto University, P. O. Box 15400, 00076, Aalto, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Katholieke Universiteit Leuven (Kortrijk), Etienne Sabbelaan 53, 8500, Kortrijk, Belgium","institution_ids":["https://openalex.org/I4210134168"]},{"raw_affiliation_string":"Department of Information and Computer Science, Helsinki Institute for Information Technology Aalto University, P. O. Box 15400, 00076, Aalto, Finland","institution_ids":["https://openalex.org/I32943570","https://openalex.org/I9927081"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018104769","display_name":"Orestis Kostakis","orcid":null},"institutions":[{"id":"https://openalex.org/I32943570","display_name":"Helsinki Institute for Information Technology","ror":"https://ror.org/05kph4940","country_code":"FI","type":"facility","lineage":["https://openalex.org/I133731052","https://openalex.org/I32943570","https://openalex.org/I9927081"]},{"id":"https://openalex.org/I9927081","display_name":"Aalto University","ror":"https://ror.org/020hwjq30","country_code":"FI","type":"education","lineage":["https://openalex.org/I9927081"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Orestis Kostakis","raw_affiliation_strings":["Department of Information and Computer Science, Helsinki Institute for Information Technology Aalto University, P. O. Box 15400, 00076, Aalto, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information and Computer Science, Helsinki Institute for Information Technology Aalto University, P. O. Box 15400, 00076, Aalto, Finland","institution_ids":["https://openalex.org/I32943570","https://openalex.org/I9927081"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5023477100"],"corresponding_institution_ids":["https://openalex.org/I32943570","https://openalex.org/I4210134168","https://openalex.org/I9927081"],"apc_list":null,"apc_paid":null,"fwci":15.3838,"has_fulltext":false,"cited_by_count":187,"citation_normalized_percentile":{"value":0.99233062,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"7","issue":"4","first_page":"233","last_page":"245"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9111566543579102},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.809698224067688},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8093737363815308},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.5369954109191895},{"id":"https://openalex.org/keywords/call-graph","display_name":"Call graph","score":0.53023362159729},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.49625545740127563},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.4800530672073364},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.457526296377182},{"id":"https://openalex.org/keywords/pairwise-comparison","display_name":"Pairwise comparison","score":0.44833144545555115},{"id":"https://openalex.org/keywords/dbscan","display_name":"DBSCAN","score":0.4287773370742798},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.4184309244155884},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3245418071746826},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.26589763164520264},{"id":"https://openalex.org/keywords/correlation-clustering","display_name":"Correlation clustering","score":0.1911935806274414},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.14717543125152588},{"id":"https://openalex.org/keywords/cure-data-clustering-algorithm","display_name":"CURE data clustering algorithm","score":0.09437915682792664}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9111566543579102},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.809698224067688},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8093737363815308},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.5369954109191895},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.53023362159729},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.49625545740127563},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.4800530672073364},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.457526296377182},{"id":"https://openalex.org/C184898388","wikidata":"https://www.wikidata.org/wiki/Q1435712","display_name":"Pairwise comparison","level":2,"score":0.44833144545555115},{"id":"https://openalex.org/C46576248","wikidata":"https://www.wikidata.org/wiki/Q1114630","display_name":"DBSCAN","level":5,"score":0.4287773370742798},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.4184309244155884},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3245418071746826},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.26589763164520264},{"id":"https://openalex.org/C94641424","wikidata":"https://www.wikidata.org/wiki/Q5172845","display_name":"Correlation clustering","level":3,"score":0.1911935806274414},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.14717543125152588},{"id":"https://openalex.org/C33704608","wikidata":"https://www.wikidata.org/wiki/Q5014717","display_name":"CURE data clustering algorithm","level":4,"score":0.09437915682792664},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s11416-011-0151-y","is_oa":false,"landing_page_url":"https://doi.org/10.1007/s11416-011-0151-y","pdf_url":null,"source":{"id":"https://openalex.org/S192253037","display_name":"Journal in Computer Virology","issn_l":"1772-9890","issn":["1772-9890","1772-9904"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal in Computer Virology","raw_type":"journal-article"},{"id":"pmh:874074","is_oa":false,"landing_page_url":"http://library.tue.nl/csp/dare/LinkToRepository.csp?recordnumber=874074","pdf_url":null,"source":{"id":"https://openalex.org/S4406923046","display_name":"TU/e Research Portal (Eindhoven University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ISSN:1772-9890","raw_type":"Article / Letter to the editor"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5099999904632568}],"awards":[],"funders":[{"id":"https://openalex.org/F4320318547","display_name":"Baidu","ror":"https://ror.org/03vs3wt56"},{"id":"https://openalex.org/F4320324475","display_name":"National Environmental Engineering Research Institute","ror":"https://ror.org/021r5ns39"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W21448910","https://openalex.org/W157039134","https://openalex.org/W157706324","https://openalex.org/W587781414","https://openalex.org/W1479863711","https://openalex.org/W1485714115","https://openalex.org/W1514406729","https://openalex.org/W1532325895","https://openalex.org/W1565377632","https://openalex.org/W1595564425","https://openalex.org/W1597213869","https://openalex.org/W1604459715","https://openalex.org/W1673310716","https://openalex.org/W1910686388","https://openalex.org/W1966831167","https://openalex.org/W1986087259","https://openalex.org/W1987971958","https://openalex.org/W2011039300","https://openalex.org/W2032338144","https://openalex.org/W2034938003","https://openalex.org/W2039797044","https://openalex.org/W2043507283","https://openalex.org/W2047181172","https://openalex.org/W2066199490","https://openalex.org/W2068211976","https://openalex.org/W2072573705","https://openalex.org/W2073459066","https://openalex.org/W2099194862","https://openalex.org/W2103626206","https://openalex.org/W2111038628","https://openalex.org/W2115392339","https://openalex.org/W2132874238","https://openalex.org/W2138644293","https://openalex.org/W2170607286","https://openalex.org/W2187617524","https://openalex.org/W2799061466","https://openalex.org/W2999729612","https://openalex.org/W3100595217","https://openalex.org/W3130402274","https://openalex.org/W3141776272","https://openalex.org/W3148190347","https://openalex.org/W4213009331","https://openalex.org/W4285719527","https://openalex.org/W6743145398"],"related_works":["https://openalex.org/W3003490434","https://openalex.org/W1977330409","https://openalex.org/W2052026825","https://openalex.org/W2538108907","https://openalex.org/W2356881557","https://openalex.org/W2054093027","https://openalex.org/W3006140559","https://openalex.org/W1971139551","https://openalex.org/W3109313076","https://openalex.org/W2743799202"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":16},{"year":2020,"cited_by_count":29},{"year":2019,"cited_by_count":11},{"year":2018,"cited_by_count":13},{"year":2017,"cited_by_count":14},{"year":2016,"cited_by_count":11},{"year":2015,"cited_by_count":13},{"year":2014,"cited_by_count":17},{"year":2013,"cited_by_count":14},{"year":2012,"cited_by_count":7}],"updated_date":"2026-06-19T15:47:20.252518","created_date":"2025-10-10T00:00:00"}