{"id":"https://openalex.org/W2010439280","doi":"https://doi.org/10.1109/cns.2013.6682751","title":"Babble: Identifying malware by its dialects","display_name":"Babble: Identifying malware by its dialects","publication_year":2013,"publication_date":"2013-10-01","ids":{"openalex":"https://openalex.org/W2010439280","doi":"https://doi.org/10.1109/cns.2013.6682751","mag":"2010439280"},"language":"en","primary_location":{"id":"doi:10.1109/cns.2013.6682751","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2013.6682751","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077402873","display_name":"Aziz Mohaisen","orcid":"https://orcid.org/0000-0003-3227-2505"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Aziz Mohaisen","raw_affiliation_strings":["Verisign Labs, VA, Reston","Verisign Labs., Reston, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Verisign Labs, VA, Reston","institution_ids":[]},{"raw_affiliation_string":"Verisign Labs., Reston, VA, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088269951","display_name":"Omar Alrawi","orcid":"https://orcid.org/0000-0002-4374-737X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Omar Alrawi","raw_affiliation_strings":["Verisign Labs, VA, Reston","Verisign Labs., Reston, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Verisign Labs, VA, Reston","institution_ids":[]},{"raw_affiliation_string":"Verisign Labs., Reston, VA, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015211298","display_name":"Andrew G. West","orcid":"https://orcid.org/0000-0001-5840-1032"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Andrew G. West","raw_affiliation_strings":["Verisign Labs, VA, Reston","Verisign Labs., Reston, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Verisign Labs, VA, Reston","institution_ids":[]},{"raw_affiliation_string":"Verisign Labs., Reston, VA, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051741835","display_name":"Allison Mankin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Allison Mankin","raw_affiliation_strings":["Verisign Labs, VA, Reston","Verisign Labs., Reston, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Verisign Labs, VA, Reston","institution_ids":[]},{"raw_affiliation_string":"Verisign Labs., Reston, VA, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9393,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.72621641,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"407","last_page":"408"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9553689956665039},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8458669781684875},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.7352111339569092},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.6380828619003296},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.5828381776809692},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5691710710525513},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5407282710075378},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5287734270095825},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4481125771999359},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3423067629337311},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.34068846702575684},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.34060728549957275},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.24782153964042664},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17722618579864502},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.11849826574325562}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9553689956665039},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8458669781684875},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.7352111339569092},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.6380828619003296},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.5828381776809692},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5691710710525513},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5407282710075378},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5287734270095825},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4481125771999359},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3423067629337311},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.34068846702575684},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.34060728549957275},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.24782153964042664},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17722618579864502},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.11849826574325562},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/cns.2013.6682751","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2013.6682751","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.1008.2481","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.1008.2481","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://works.bepress.com/andrew_g_west/27/download/","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4300000071525574,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W250426404","https://openalex.org/W1587106557","https://openalex.org/W1910686388","https://openalex.org/W1981221397","https://openalex.org/W2138644293","https://openalex.org/W2762258958","https://openalex.org/W6639864006","https://openalex.org/W6680604901","https://openalex.org/W6745097691"],"related_works":["https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W4285507391","https://openalex.org/W2768892939","https://openalex.org/W2160963033","https://openalex.org/W2610659201","https://openalex.org/W3107556205","https://openalex.org/W4234891089","https://openalex.org/W2805262980","https://openalex.org/W2067547021"],"abstract_inverted_index":{"Using":[0],"runtime":[1],"execution":[2],"artifacts":[3],"to":[4,11],"identify":[5],"whether":[6],"code":[7],"is":[8,17],"malware,":[9],"and":[10,45],"which":[12],"malware":[13,70],"family":[14],"it":[15],"belongs,":[16],"an":[18],"established":[19],"technique":[20,54],"in":[21],"the":[22,43,53,59],"security":[23],"domain.":[24],"Traditionally,":[25],"literature":[26],"has":[27],"relied":[28],"on":[29],"explicit":[30],"features":[31],"derived":[32],"from":[33],"network,":[34],"file":[35],"system,":[36],"or":[37],"registry":[38],"interaction":[39],"[1].":[40],"While":[41],"effective,":[42],"collection":[44],"analysis":[46,62],"of":[47],"these":[48],"fine-granularity":[49],"data":[50],"points":[51],"makes":[52],"quite":[55],"computationally":[56],"expensive.":[57],"Moreover,":[58],"signatures/heuristics":[60],"this":[61],"produces":[63],"are":[64],"often":[65],"easily":[66],"circumvented":[67],"by":[68],"subsequent":[69],"authors.":[71]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}