{"id":"https://openalex.org/W2102249298","doi":"https://doi.org/10.1109/icc.2011.5963469","title":"Towards Efficient Analysis for Malware in the Wild","display_name":"Towards Efficient Analysis for Malware in the Wild","publication_year":2011,"publication_date":"2011-06-01","ids":{"openalex":"https://openalex.org/W2102249298","doi":"https://doi.org/10.1109/icc.2011.5963469","mag":"2102249298"},"language":"en","primary_location":{"id":"doi:10.1109/icc.2011.5963469","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2011.5963469","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102143401","display_name":"Makoto Iwamura","orcid":null},"institutions":[{"id":"https://openalex.org/I2251713219","display_name":"NTT (Japan)","ror":"https://ror.org/00berct97","country_code":"JP","type":"company","lineage":["https://openalex.org/I2251713219"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Makoto Iwamura","raw_affiliation_strings":["NTT Information Sharing and Platform Laboratories, Musashino, Tokyo, Japan","NTT Inf. Sharing Platform Labs., Musashino, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Information Sharing and Platform Laboratories, Musashino, Tokyo, Japan","institution_ids":["https://openalex.org/I2251713219"]},{"raw_affiliation_string":"NTT Inf. Sharing Platform Labs., Musashino, Japan","institution_ids":["https://openalex.org/I2251713219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100836888","display_name":"Mitsutaka Itoh","orcid":null},"institutions":[{"id":"https://openalex.org/I2251713219","display_name":"NTT (Japan)","ror":"https://ror.org/00berct97","country_code":"JP","type":"company","lineage":["https://openalex.org/I2251713219"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Mitsutaka Itoh","raw_affiliation_strings":["NTT Information Sharing and Platform Laboratories, Musashino, Tokyo, Japan","NTT Inf. Sharing Platform Labs., Musashino, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Information Sharing and Platform Laboratories, Musashino, Tokyo, Japan","institution_ids":["https://openalex.org/I2251713219"]},{"raw_affiliation_string":"NTT Inf. Sharing Platform Labs., Musashino, Japan","institution_ids":["https://openalex.org/I2251713219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110788752","display_name":"Yoichi Muraoka","orcid":null},"institutions":[{"id":"https://openalex.org/I150744194","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83","country_code":"JP","type":"education","lineage":["https://openalex.org/I150744194"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yoichi Muraoka","raw_affiliation_strings":["Waseda University, Shinjuku, Tokyo, Japan","Waseda University, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Waseda University, Shinjuku, Tokyo, Japan","institution_ids":["https://openalex.org/I150744194"]},{"raw_affiliation_string":"Waseda University, Tokyo, Japan","institution_ids":["https://openalex.org/I150744194"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9796000123023987,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.919681191444397},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8007709980010986},{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.5861014127731323},{"id":"https://openalex.org/keywords/workload","display_name":"Workload","score":0.5601243376731873},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5599285960197449},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.548899233341217},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5405470728874207},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.5106924176216125},{"id":"https://openalex.org/keywords/longest-common-subsequence-problem","display_name":"Longest common subsequence problem","score":0.42011046409606934},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3663637042045593},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.34682273864746094},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2984568476676941},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2390671670436859},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.15766388177871704}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.919681191444397},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8007709980010986},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.5861014127731323},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.5601243376731873},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5599285960197449},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.548899233341217},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5405470728874207},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.5106924176216125},{"id":"https://openalex.org/C120098539","wikidata":"https://www.wikidata.org/wiki/Q141001","display_name":"Longest common subsequence problem","level":2,"score":0.42011046409606934},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3663637042045593},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.34682273864746094},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2984568476676941},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2390671670436859},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.15766388177871704}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc.2011.5963469","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2011.5963469","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.47999998927116394,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1508225132","https://openalex.org/W1551162551","https://openalex.org/W1970026646","https://openalex.org/W2102039064","https://openalex.org/W2126753728","https://openalex.org/W2138644293","https://openalex.org/W2145056020","https://openalex.org/W2150423842","https://openalex.org/W2167146581","https://openalex.org/W2851844883","https://openalex.org/W6630448420","https://openalex.org/W6632907626","https://openalex.org/W6680604901"],"related_works":["https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W4285507391","https://openalex.org/W2768892939","https://openalex.org/W2160963033","https://openalex.org/W2610659201","https://openalex.org/W3107556205","https://openalex.org/W4234891089","https://openalex.org/W2805262980","https://openalex.org/W2067547021"],"abstract_inverted_index":{"We":[0],"propose":[1],"two":[2,67],"novel":[3],"techniques":[4],"for":[5,9],"reducing":[6],"the":[7,21,42,59,66,85,92,118,125,129,152,155,158],"workload":[8],"malware":[10,77,83,88,96,115],"analysis.":[11,167],"The":[12,33],"first":[13],"technique":[14,35],"is":[15,36],"restricted":[16],"instruction,":[17],"which":[18,39],"accelerates":[19],"finding":[20],"longest":[22],"common":[23],"subsequence":[24],"(LCS)":[25],"between":[26],"machine":[27],"code":[28],"instruction":[29],"sequences":[30],"of":[31,47,61,109,124,154,157,166],"malware.":[32],"second":[34],"probabilistic":[37],"disassembly,":[38],"can":[40],"find":[41,91],"most":[43,93],"probable":[44],"disassembly":[45],"result":[46],"a":[48,52,134,161],"binary":[49],"stream":[50],"without":[51],"clue,":[53],"such":[54],"as":[55],"debug":[56],"symbols":[57],"or":[58],"information":[60],"import":[62],"functions.":[63],"By":[64],"combining":[65],"proposals":[68],"and":[69,102,120],"our":[70,110],"generic":[71],"unpacker,":[72],"we":[73,112],"built":[74],"an":[75,81],"automatic":[76],"classification":[78],"system.":[79],"Given":[80],"unknown":[82,100],"program,":[84],"system":[86],"enables":[87],"analysts":[89],"to":[90,98,128,145,150],"similar":[94],"known":[95],"program":[97],"this":[99],"one,":[101],"even":[103],"estimate":[104],"different/common":[105],"instructions.":[106],"In":[107],"one":[108,139],"experiments,":[111],"classified":[113],"3,233":[114],"samples":[116,126],"in":[117,148,164],"wild":[119],"concluded":[121],"that":[122],"75%":[123],"belong":[127],"seven":[130,137],"largest":[131],"clusters.":[132],"As":[133],"result,":[135],"only":[136],"samples,":[138],"from":[140],"each":[141],"cluster,":[142],"were":[143],"required":[144],"be":[146],"analyzed":[147],"order":[149],"reveal":[151],"functionality":[153],"rest":[156],"75%,":[159],"showing":[160],"great":[162],"increase":[163],"efficiency":[165]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}