{"id":"https://openalex.org/W1986038483","doi":"https://doi.org/10.1109/isbast.2014.7013126","title":"I-Filter: Identical Structured Control Flow String filter for accelerated malware variant classification","display_name":"I-Filter: Identical Structured Control Flow String filter for accelerated malware variant classification","publication_year":2014,"publication_date":"2014-08-01","ids":{"openalex":"https://openalex.org/W1986038483","doi":"https://doi.org/10.1109/isbast.2014.7013126","mag":"1986038483"},"language":"en","primary_location":{"id":"doi:10.1109/isbast.2014.7013126","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isbast.2014.7013126","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 International Symposium on Biometrics and Security Technologies (ISBAST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100741146","display_name":"Taegyu Kim","orcid":"https://orcid.org/0000-0002-3526-4052"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Taegyu Kim","raw_affiliation_strings":["Korea Advanced Institute of Science and Technology","Korea Advanced Institute of Science and Technology Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea Advanced Institute of Science and Technology","institution_ids":["https://openalex.org/I157485424"]},{"raw_affiliation_string":"Korea Advanced Institute of Science and Technology Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113696059","display_name":"Woomin Hwang","orcid":null},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Woomin Hwang","raw_affiliation_strings":["Korea Advanced Institute of Science and Technology","Korea Advanced Institute of Science and Technology Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea Advanced Institute of Science and Technology","institution_ids":["https://openalex.org/I157485424"]},{"raw_affiliation_string":"Korea Advanced Institute of Science and Technology Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037312953","display_name":"Ki-Woong Park","orcid":"https://orcid.org/0000-0002-3377-223X"},"institutions":[{"id":"https://openalex.org/I119522612","display_name":"Daejeon University","ror":"https://ror.org/02eqchk86","country_code":"KR","type":"education","lineage":["https://openalex.org/I119522612"]},{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Ki-Woong Park","raw_affiliation_strings":["Daejeon University","Korea Advanced Institute of Science and Technology","Daejeon University, Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Daejeon University","institution_ids":["https://openalex.org/I119522612"]},{"raw_affiliation_string":"Korea Advanced Institute of Science and Technology","institution_ids":["https://openalex.org/I157485424"]},{"raw_affiliation_string":"Daejeon University, Korea","institution_ids":["https://openalex.org/I119522612"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113904979","display_name":"Kyu Ho Park","orcid":null},"institutions":[{"id":"https://openalex.org/I119522612","display_name":"Daejeon University","ror":"https://ror.org/02eqchk86","country_code":"KR","type":"education","lineage":["https://openalex.org/I119522612"]},{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Kyu Ho Park","raw_affiliation_strings":["Daejeon University","Korea Advanced Institute of Science and Technology","Korea Advanced Institute of Science and Technology Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Daejeon University","institution_ids":["https://openalex.org/I119522612"]},{"raw_affiliation_string":"Korea Advanced Institute of Science and Technology","institution_ids":["https://openalex.org/I157485424"]},{"raw_affiliation_string":"Korea Advanced Institute of Science and Technology Korea","institution_ids":["https://openalex.org/I157485424"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4969,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.53537736,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"225","last_page":"231"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11269","display_name":"Algorithms and Data Compression","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.8059293627738953},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7606574296951294},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6712866425514221},{"id":"https://openalex.org/keywords/filter","display_name":"Filter (signal processing)","score":0.650368332862854},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.6307355165481567},{"id":"https://openalex.org/keywords/string","display_name":"String (physics)","score":0.5618283748626709},{"id":"https://openalex.org/keywords/bloom-filter","display_name":"Bloom filter","score":0.5151011347770691},{"id":"https://openalex.org/keywords/string-searching-algorithm","display_name":"String searching algorithm","score":0.49015840888023376},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.48098671436309814},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.4629972577095032},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42579665780067444},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4029364585876465},{"id":"https://openalex.org/keywords/pattern-matching","display_name":"Pattern matching","score":0.38157081604003906},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3407503664493561},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.33792605996131897},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1306995451450348},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.12219998240470886},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.11455610394477844},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.09935817122459412}],"concepts":[{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.8059293627738953},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7606574296951294},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6712866425514221},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.650368332862854},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.6307355165481567},{"id":"https://openalex.org/C157486923","wikidata":"https://www.wikidata.org/wiki/Q1376436","display_name":"String (physics)","level":2,"score":0.5618283748626709},{"id":"https://openalex.org/C147224247","wikidata":"https://www.wikidata.org/wiki/Q885373","display_name":"Bloom filter","level":2,"score":0.5151011347770691},{"id":"https://openalex.org/C7757238","wikidata":"https://www.wikidata.org/wiki/Q374040","display_name":"String searching algorithm","level":3,"score":0.49015840888023376},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.48098671436309814},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.4629972577095032},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42579665780067444},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4029364585876465},{"id":"https://openalex.org/C68859911","wikidata":"https://www.wikidata.org/wiki/Q1503724","display_name":"Pattern matching","level":2,"score":0.38157081604003906},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3407503664493561},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.33792605996131897},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1306995451450348},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.12219998240470886},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.11455610394477844},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.09935817122459412},{"id":"https://openalex.org/C37914503","wikidata":"https://www.wikidata.org/wiki/Q156495","display_name":"Mathematical physics","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isbast.2014.7013126","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isbast.2014.7013126","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 International Symposium on Biometrics and Security Technologies (ISBAST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W169303955","https://openalex.org/W1647671624","https://openalex.org/W2011632873","https://openalex.org/W2124659400","https://openalex.org/W2156125289","https://openalex.org/W6606847443","https://openalex.org/W6636915900","https://openalex.org/W6653150523"],"related_works":["https://openalex.org/W2227807207","https://openalex.org/W2370014100","https://openalex.org/W4287264924","https://openalex.org/W3137108924","https://openalex.org/W1852009617","https://openalex.org/W2042819006","https://openalex.org/W2170165007","https://openalex.org/W1979110442","https://openalex.org/W2156660460","https://openalex.org/W2362866566"],"abstract_inverted_index":{"As":[0],"the":[1,70,73,80,84],"number":[2],"of":[3,72,98],"malware":[4,21,41],"variants":[5],"has":[6,11,79],"grown":[7],"rapidly,":[8],"classification":[9,23],"speed":[10],"become":[12],"crucial":[13],"in":[14,56],"security":[15],"issues.":[16],"While":[17],"several":[18],"techniques":[19],"for":[20],"variant":[22,42],"have":[24],"been":[25],"proposed,":[26],"they":[27],"involve":[28],"a":[29,37,52,64,95],"speed-accuracy":[30],"trade-off.":[31],"In":[32],"an":[33],"attempt":[34],"to":[35],"achieve":[36],"speedy":[38],"and":[39,50,62],"accurate":[40],"classification,":[43],"we":[44],"thoroughly":[45],"analyze":[46],"previously":[47],"proposed":[48],"methods":[49],"identify":[51],"critical":[53],"performance":[54,71,91,96],"bottleneck":[55],"string-to-string":[57],"matching.":[58,77],"This":[59],"paper":[60],"presents":[61],"evaluates":[63],"technique":[65],"called":[66],"I-Filter":[67,78],"that":[68,94],"enhances":[69],"previous":[74],"approach,":[75],"approximate":[76],"following":[81],"novel":[82],"mechanism,":[83],"hash-based":[85],"equivalent":[86],"procedure":[87],"matching":[88],"technique.":[89],"Our":[90],"evaluation":[92],"confirms":[93],"improvement":[97],"on":[99],"average":[100],"1,043":[101],"times":[102],"through":[103],"I-Filtering.":[104]},"counts_by_year":[{"year":2015,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}