{"id":"https://openalex.org/W1982193684","doi":"https://doi.org/10.1109/fskd.2014.6980971","title":"Detecting encrypted metamorphic viruses by hidden Markov Models","display_name":"Detecting encrypted metamorphic viruses by hidden Markov Models","publication_year":2014,"publication_date":"2014-08-01","ids":{"openalex":"https://openalex.org/W1982193684","doi":"https://doi.org/10.1109/fskd.2014.6980971","mag":"1982193684"},"language":"en","primary_location":{"id":"doi:10.1109/fskd.2014.6980971","is_oa":false,"landing_page_url":"https://doi.org/10.1109/fskd.2014.6980971","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 11th International Conference on Fuzzy Systems and Knowledge Discovery (FSKD)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020050087","display_name":"Fereidoon Rezaei","orcid":null},"institutions":[{"id":"https://openalex.org/I23946033","display_name":"University of Tehran","ror":"https://ror.org/05vf56z40","country_code":"IR","type":"education","lineage":["https://openalex.org/I23946033"]}],"countries":["IR"],"is_corresponding":true,"raw_author_name":"Fereidoon Rezaei","raw_affiliation_strings":["Kish international campus, Tehran University, Tehran, Iran"],"affiliations":[{"raw_affiliation_string":"Kish international campus, Tehran University, Tehran, Iran","institution_ids":["https://openalex.org/I23946033"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017524804","display_name":"Masoud Khalil Nezhad","orcid":null},"institutions":[{"id":"https://openalex.org/I181744264","display_name":"Kharazmi University","ror":"https://ror.org/05hsgex59","country_code":"IR","type":"education","lineage":["https://openalex.org/I181744264"]},{"id":"https://openalex.org/I204588832","display_name":"Islamic Azad University, Karaj","ror":"https://ror.org/01y4xm534","country_code":"IR","type":"education","lineage":["https://openalex.org/I110525433","https://openalex.org/I204588832"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Masoud Khalil Nezhad","raw_affiliation_strings":["Dep. computer science, Kharazmi University, Tehran, Iran","Karaj Branch, Islamic Azad University Karaj Iran"],"affiliations":[{"raw_affiliation_string":"Dep. computer science, Kharazmi University, Tehran, Iran","institution_ids":["https://openalex.org/I181744264"]},{"raw_affiliation_string":"Karaj Branch, Islamic Azad University Karaj Iran","institution_ids":["https://openalex.org/I204588832"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079749140","display_name":"Saeid Rezaei","orcid":"https://orcid.org/0000-0003-1362-7294"},"institutions":[{"id":"https://openalex.org/I181744264","display_name":"Kharazmi University","ror":"https://ror.org/05hsgex59","country_code":"IR","type":"education","lineage":["https://openalex.org/I181744264"]},{"id":"https://openalex.org/I204588832","display_name":"Islamic Azad University, Karaj","ror":"https://ror.org/01y4xm534","country_code":"IR","type":"education","lineage":["https://openalex.org/I110525433","https://openalex.org/I204588832"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Saeid Rezaei","raw_affiliation_strings":["Karaj Branch, Islamic Azad University, Karaj, Iran","Dep. computer science, Kharazmi University, Tehran, Iran"],"affiliations":[{"raw_affiliation_string":"Karaj Branch, Islamic Azad University, Karaj, Iran","institution_ids":["https://openalex.org/I204588832"]},{"raw_affiliation_string":"Dep. computer science, Kharazmi University, Tehran, Iran","institution_ids":["https://openalex.org/I181744264"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088425410","display_name":"Ali Payandeh","orcid":null},"institutions":[{"id":"https://openalex.org/I78323350","display_name":"Malek Ashtar University of Technology","ror":"https://ror.org/0043ezw98","country_code":"IR","type":"education","lineage":["https://openalex.org/I78323350"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Ali Payandeh","raw_affiliation_strings":["Dep. Information and Communication technology, Malekeashtar University, Tehran, Iran"],"affiliations":[{"raw_affiliation_string":"Dep. Information and Communication technology, Malekeashtar University, Tehran, Iran","institution_ids":["https://openalex.org/I78323350"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5020050087"],"corresponding_institution_ids":["https://openalex.org/I23946033"],"apc_list":null,"apc_paid":null,"fwci":1.1645,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.77824074,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"973","last_page":"977"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.7053743004798889},{"id":"https://openalex.org/keywords/hidden-markov-model","display_name":"Hidden Markov model","score":0.6791743040084839},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6456457376480103},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5637452602386475},{"id":"https://openalex.org/keywords/markov-chain","display_name":"Markov chain","score":0.5158421397209167},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.49448060989379883},{"id":"https://openalex.org/keywords/character","display_name":"Character (mathematics)","score":0.491491436958313},{"id":"https://openalex.org/keywords/computer-virus","display_name":"Computer virus","score":0.43966159224510193},{"id":"https://openalex.org/keywords/markov-process","display_name":"Markov process","score":0.4387274384498596},{"id":"https://openalex.org/keywords/string","display_name":"String (physics)","score":0.4158342480659485},{"id":"https://openalex.org/keywords/virology","display_name":"Virology","score":0.4079551696777344},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4015933871269226},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3761434555053711},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.3093881607055664},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.17289724946022034},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.12288638949394226},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.08189460635185242},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.07794642448425293},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.07787764072418213}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.7053743004798889},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.6791743040084839},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6456457376480103},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5637452602386475},{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.5158421397209167},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.49448060989379883},{"id":"https://openalex.org/C2780861071","wikidata":"https://www.wikidata.org/wiki/Q1062934","display_name":"Character (mathematics)","level":2,"score":0.491491436958313},{"id":"https://openalex.org/C19407854","wikidata":"https://www.wikidata.org/wiki/Q485","display_name":"Computer virus","level":2,"score":0.43966159224510193},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.4387274384498596},{"id":"https://openalex.org/C157486923","wikidata":"https://www.wikidata.org/wiki/Q1376436","display_name":"String (physics)","level":2,"score":0.4158342480659485},{"id":"https://openalex.org/C159047783","wikidata":"https://www.wikidata.org/wiki/Q7215","display_name":"Virology","level":1,"score":0.4079551696777344},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4015933871269226},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3761434555053711},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.3093881607055664},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.17289724946022034},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.12288638949394226},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.08189460635185242},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.07794642448425293},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.07787764072418213},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C37914503","wikidata":"https://www.wikidata.org/wiki/Q156495","display_name":"Mathematical physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/fskd.2014.6980971","is_oa":false,"landing_page_url":"https://doi.org/10.1109/fskd.2014.6980971","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 11th International Conference on Fuzzy Systems and Knowledge Discovery (FSKD)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1525120920","https://openalex.org/W1561916341","https://openalex.org/W1572855107","https://openalex.org/W1965608158","https://openalex.org/W1977726174","https://openalex.org/W2006331477","https://openalex.org/W2006862475","https://openalex.org/W2050642268","https://openalex.org/W2072698166","https://openalex.org/W2114051457","https://openalex.org/W2124659400","https://openalex.org/W2157890098","https://openalex.org/W2167240430","https://openalex.org/W2903953076"],"related_works":["https://openalex.org/W4224216661","https://openalex.org/W3210347767","https://openalex.org/W98994209","https://openalex.org/W67940504","https://openalex.org/W2066014542","https://openalex.org/W2024170198","https://openalex.org/W2152144666","https://openalex.org/W1819617256","https://openalex.org/W4308699695","https://openalex.org/W2596984206"],"abstract_inverted_index":{"Virus":[0],"writers":[1],"make":[2],"their":[3],"viruses":[4,61,96,114],"undetectable":[5],"by":[6,65],"using":[7],"obfuscation":[8],"methods,":[9],"which":[10,22],"ends":[11],"in":[12,84],"metamorphic":[13],"viruses.":[14],"We":[15,31],"propose":[16],"a":[17,38],"method":[18,67,117],"named":[19],"detection":[20,79],"circle":[21],"is":[23],"based":[24],"on":[25],"the":[26,50,56,85,94,99,108],"hidden":[27],"Markov":[28],"Model":[29],"theory.":[30],"have":[32,59,92],"used":[33],"three":[34],"elements":[35],"to":[36],"characterize":[37],"family":[39],"of":[40,52,107,120],"viruses:":[41],"string":[42],"occurrence":[43,47],"probability,":[44,48],"specifically-located":[45],"character":[46],"and":[49,62,68,97],"amount":[51],"virus":[53],"similarities.":[54],"For":[55],"evaluation,":[57],"we":[58,91],"created":[60],"tested":[63,98],"them":[64],"our":[66,78,116],"four":[69,109],"anti-virus":[70],"software":[71,111],"packages.":[72],"The":[73],"experimental":[74],"results":[75],"show":[76],"that":[77],"rate":[80],"was":[81],"much":[82],"higher":[83],"first":[86],"stage":[87,105],"without":[88],"obfuscation.":[89],"Then":[90],"encrypted":[93],"detected":[95,113],"proposed":[100],"algorithm":[101],"again.":[102],"At":[103],"this":[104],"none":[106],"anti-viruses":[110],"packages":[112],"while":[115],"found":[118],"70%":[119],"them.":[121]},"counts_by_year":[{"year":2021,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}