{"id":"https://openalex.org/W2008324060","doi":"https://doi.org/10.1109/malware.2012.6461006","title":"Malware Analysis and attribution using Genetic Information","display_name":"Malware Analysis and attribution using Genetic Information","publication_year":2012,"publication_date":"2012-10-01","ids":{"openalex":"https://openalex.org/W2008324060","doi":"https://doi.org/10.1109/malware.2012.6461006","mag":"2008324060"},"language":"en","primary_location":{"id":"doi:10.1109/malware.2012.6461006","is_oa":false,"landing_page_url":"https://doi.org/10.1109/malware.2012.6461006","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2012 7th International Conference on Malicious and Unwanted Software","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054178937","display_name":"Avi Pfeffer","orcid":"https://orcid.org/0000-0002-6724-2640"},"institutions":[{"id":"https://openalex.org/I4210149760","display_name":"Charles River Analytics (United States)","ror":"https://ror.org/03z47zw42","country_code":"US","type":"company","lineage":["https://openalex.org/I4210149760"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Avi Pfeffer","raw_affiliation_strings":["Charles River Analytics,\u00a0Inc., USA","Charles River Analytics, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles River Analytics,\u00a0Inc., USA","institution_ids":["https://openalex.org/I4210149760"]},{"raw_affiliation_string":"Charles River Analytics, USA","institution_ids":["https://openalex.org/I4210149760"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028209188","display_name":"Catherine Call","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149760","display_name":"Charles River Analytics (United States)","ror":"https://ror.org/03z47zw42","country_code":"US","type":"company","lineage":["https://openalex.org/I4210149760"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Catherine Call","raw_affiliation_strings":["Charles River Analytics,\u00a0Inc., USA","Charles River Analytics, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles River Analytics,\u00a0Inc., USA","institution_ids":["https://openalex.org/I4210149760"]},{"raw_affiliation_string":"Charles River Analytics, USA","institution_ids":["https://openalex.org/I4210149760"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070699195","display_name":"John Chamberlain","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149760","display_name":"Charles River Analytics (United States)","ror":"https://ror.org/03z47zw42","country_code":"US","type":"company","lineage":["https://openalex.org/I4210149760"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John Chamberlain","raw_affiliation_strings":["Charles River Analytics,\u00a0Inc., USA","Charles River Analytics, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles River Analytics,\u00a0Inc., USA","institution_ids":["https://openalex.org/I4210149760"]},{"raw_affiliation_string":"Charles River Analytics, USA","institution_ids":["https://openalex.org/I4210149760"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061636802","display_name":"Lee Kellogg","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149760","display_name":"Charles River Analytics (United States)","ror":"https://ror.org/03z47zw42","country_code":"US","type":"company","lineage":["https://openalex.org/I4210149760"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lee Kellogg","raw_affiliation_strings":["Charles River Analytics,\u00a0Inc., USA","Charles River Analytics, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles River Analytics,\u00a0Inc., USA","institution_ids":["https://openalex.org/I4210149760"]},{"raw_affiliation_string":"Charles River Analytics, USA","institution_ids":["https://openalex.org/I4210149760"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018912044","display_name":"Jacob M. Ouellette","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149760","display_name":"Charles River Analytics (United States)","ror":"https://ror.org/03z47zw42","country_code":"US","type":"company","lineage":["https://openalex.org/I4210149760"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jacob Ouellette","raw_affiliation_strings":["Charles River Analytics,\u00a0Inc., USA","Charles River Analytics, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles River Analytics,\u00a0Inc., USA","institution_ids":["https://openalex.org/I4210149760"]},{"raw_affiliation_string":"Charles River Analytics, USA","institution_ids":["https://openalex.org/I4210149760"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006260631","display_name":"Terry Patten","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149760","display_name":"Charles River Analytics (United States)","ror":"https://ror.org/03z47zw42","country_code":"US","type":"company","lineage":["https://openalex.org/I4210149760"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Terry Patten","raw_affiliation_strings":["Charles River Analytics,\u00a0Inc., USA","Charles River Analytics, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles River Analytics,\u00a0Inc., USA","institution_ids":["https://openalex.org/I4210149760"]},{"raw_affiliation_string":"Charles River Analytics, USA","institution_ids":["https://openalex.org/I4210149760"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078825839","display_name":"Greg L. Zacharias","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149760","display_name":"Charles River Analytics (United States)","ror":"https://ror.org/03z47zw42","country_code":"US","type":"company","lineage":["https://openalex.org/I4210149760"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Greg Zacharias","raw_affiliation_strings":["Charles River Analytics,\u00a0Inc., USA","Charles River Analytics, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles River Analytics,\u00a0Inc., USA","institution_ids":["https://openalex.org/I4210149760"]},{"raw_affiliation_string":"Charles River Analytics, USA","institution_ids":["https://openalex.org/I4210149760"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005097571","display_name":"Arun Lakhotia","orcid":"https://orcid.org/0000-0001-9943-7795"},"institutions":[{"id":"https://openalex.org/I79516672","display_name":"University of Louisiana at Lafayette","ror":"https://ror.org/01x8rc503","country_code":"US","type":"education","lineage":["https://openalex.org/I2799628689","https://openalex.org/I79516672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arun Lakhotia","raw_affiliation_strings":["University of Louisiana, Lafayette, USA","University of Louisiana , Lafayette, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Louisiana, Lafayette, USA","institution_ids":["https://openalex.org/I79516672"]},{"raw_affiliation_string":"University of Louisiana , Lafayette, USA","institution_ids":["https://openalex.org/I79516672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014869821","display_name":"Suresh Golconda","orcid":null},"institutions":[{"id":"https://openalex.org/I79516672","display_name":"University of Louisiana at Lafayette","ror":"https://ror.org/01x8rc503","country_code":"US","type":"education","lineage":["https://openalex.org/I2799628689","https://openalex.org/I79516672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suresh Golconda","raw_affiliation_strings":["University of Louisiana, Lafayette, USA","University of Louisiana , Lafayette, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Louisiana, Lafayette, USA","institution_ids":["https://openalex.org/I79516672"]},{"raw_affiliation_string":"University of Louisiana , Lafayette, USA","institution_ids":["https://openalex.org/I79516672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070465096","display_name":"John S. Bay","orcid":null},"institutions":[{"id":"https://openalex.org/I4210097321","display_name":"Assured Information Security (United States)","ror":"https://ror.org/00w5xhg82","country_code":"US","type":"company","lineage":["https://openalex.org/I4210097321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John Bay","raw_affiliation_strings":["Assured Information Security, Inc., USA","Assured Information Security, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Assured Information Security, Inc., USA","institution_ids":["https://openalex.org/I4210097321"]},{"raw_affiliation_string":"Assured Information Security, USA","institution_ids":["https://openalex.org/I4210097321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059009349","display_name":"Robert T. Hall","orcid":null},"institutions":[{"id":"https://openalex.org/I4210097321","display_name":"Assured Information Security (United States)","ror":"https://ror.org/00w5xhg82","country_code":"US","type":"company","lineage":["https://openalex.org/I4210097321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert Hall","raw_affiliation_strings":["Assured Information Security, Inc., USA","Assured Information Security, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Assured Information Security, Inc., USA","institution_ids":["https://openalex.org/I4210097321"]},{"raw_affiliation_string":"Assured Information Security, USA","institution_ids":["https://openalex.org/I4210097321"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088063494","display_name":"Daniel Scofield","orcid":"https://orcid.org/0000-0003-3440-7610"},"institutions":[{"id":"https://openalex.org/I4210097321","display_name":"Assured Information Security (United States)","ror":"https://ror.org/00w5xhg82","country_code":"US","type":"company","lineage":["https://openalex.org/I4210097321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Scofield","raw_affiliation_strings":["Assured Information Security, Inc., USA","Assured Information Security, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Assured Information Security, Inc., USA","institution_ids":["https://openalex.org/I4210097321"]},{"raw_affiliation_string":"Assured Information Security, USA","institution_ids":["https://openalex.org/I4210097321"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.1931,"has_fulltext":false,"cited_by_count":43,"citation_normalized_percentile":{"value":0.90225176,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"18","issue":null,"first_page":"39","last_page":"45"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9736999869346619,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9535999894142151,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8157896399497986},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6872818470001221},{"id":"https://openalex.org/keywords/attribution","display_name":"Attribution","score":0.5506592988967896},{"id":"https://openalex.org/keywords/authorship-attribution","display_name":"Authorship attribution","score":0.4791092872619629},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.44856828451156616},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4462663531303406},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3281201720237732},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.32061874866485596},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.13977399468421936},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.06305798888206482}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8157896399497986},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6872818470001221},{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.5506592988967896},{"id":"https://openalex.org/C3020202489","wikidata":"https://www.wikidata.org/wiki/Q2032038","display_name":"Authorship attribution","level":2,"score":0.4791092872619629},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.44856828451156616},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4462663531303406},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3281201720237732},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.32061874866485596},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.13977399468421936},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.06305798888206482}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/malware.2012.6461006","is_oa":false,"landing_page_url":"https://doi.org/10.1109/malware.2012.6461006","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2012 7th International Conference on Malicious and Unwanted Software","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6000000238418579}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320332467","display_name":"U.S. Air Force","ror":"https://ror.org/006gmme17"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W1851403712","https://openalex.org/W1971421925","https://openalex.org/W1996785213","https://openalex.org/W2114497876","https://openalex.org/W2117030266","https://openalex.org/W2126734536","https://openalex.org/W2128389850","https://openalex.org/W2131681506","https://openalex.org/W2140807364","https://openalex.org/W3023279601"],"related_works":["https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W2768892939","https://openalex.org/W4285507391","https://openalex.org/W3164408430","https://openalex.org/W2397240470","https://openalex.org/W2602767565","https://openalex.org/W170652726","https://openalex.org/W2883822334","https://openalex.org/W2134874482"],"abstract_inverted_index":{"As":[0],"organizations":[1],"become":[2],"ever":[3],"more":[4,76],"dependent":[5],"on":[6],"networked":[7],"operations,":[8],"they":[9,187],"are":[10,37,249,266],"increasingly":[11],"vulnerable":[12],"to":[13,92,164,205,252,269],"attack":[14],"by":[15,54,63,110,143],"a":[16,226,230,271],"variety":[17],"of":[18,69,85,123,129,154,162,172,175,197,212,232,273,277],"attackers,":[19],"including":[20,32,236],"criminals,":[21],"terrorists":[22],"and":[23,35,39,48,62,71,88,90,104,112,117,178,185,240,262,275],"nation":[24],"states":[25],"using":[26,106],"cyber":[27],"attacks.":[28,52,96],"New":[29],"malware":[30,124,155,163,206,216,245,255],"attacks,":[31],"viruses,":[33],"Trojans,":[34],"worms,":[36],"constantly":[38],"rapidly":[40,77],"emerging":[41],"threats.":[42],"However,":[43],"attackers":[44],"often":[45],"reuse":[46,72],"code":[47],"techniques":[49],"from":[50,59,115,159,184],"previous":[51,60],"Both":[53],"recognizing":[55],"the":[56,67,83,86,121,130,137,147,151,157,170,176,195,198,210,213,222,254],"reused":[57],"elements":[58],"attacks":[61,181],"detecting":[64],"patterns":[65],"in":[66,101,221,257],"types":[68],"modification":[70],"observed,":[73],"we":[74,224,265],"can":[75,166,208],"develop":[78],"defenses,":[79],"make":[80],"hypotheses":[81],"about":[82,136],"source":[84],"malware,":[87,173],"predict":[89],"prepare":[91],"defend":[93],"against":[94],"future":[95,180],"We":[97,248],"achieve":[98],"these":[99],"objectives":[100],"Malware":[102],"Analysis":[103],"Attribution":[105],"Genetic":[107],"Information":[108],"(MAAGI)":[109],"adapting":[111],"extending":[113],"concepts":[114],"biology":[116],"linguistics.":[118],"First,":[119],"analyzing":[120],"\u201cgenetics\u201d":[122],"(i.e.,":[125,156],"reverse":[126,233],"engineered":[127],"representations":[128],"original":[131],"program)":[132],"provides":[133],"critical":[134],"information":[135],"program":[138],"that":[139,228,243],"is":[140,194],"not":[141],"available":[142],"looking":[144],"only":[145],"at":[146],"executable":[148],"program.":[149],"Second,":[150],"evolutionary":[152],"process":[153],"transformation":[158],"one":[160],"species":[161],"another)":[165],"provide":[167],"insights":[168],"into":[169,246],"ancestry":[171],"characteristics":[174],"attacker,":[177],"where":[179],"might":[182,188],"come":[183],"what":[186],"look":[189],"like.":[190],"Third,":[191],"functional":[192,241,263],"linguistics":[193],"study":[196,211],"intent":[199,214],"behind":[200,215],"communicative":[201],"acts;":[202],"its":[203],"application":[204],"characterization":[207],"support":[209],"behaviors.":[217],"To":[218],"this":[219],"point":[220],"program,":[223],"developed":[225],"system":[227],"uses":[229],"range":[231],"engineering":[234],"techniques,":[235],"static,":[237],"dynamic,":[238],"behavioral,":[239],"analysis":[242],"clusters":[244],"families.":[247],"also":[250,267],"able":[251,268],"determine":[253],"lineage":[256],"some":[258],"situations.":[259],"Using":[260],"behavioral":[261],"analysis,":[264],"identify":[270],"number":[272],"functions":[274],"purposes":[276],"malware.":[278]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":4},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":6},{"year":2013,"cited_by_count":2}],"updated_date":"2026-06-05T06:17:00.636019","created_date":"2025-10-10T00:00:00"}