{"id":"https://openalex.org/W7155049510","doi":"https://doi.org/10.1109/synasc69064.2025.00039","title":"Arithmetic Analysis: Versatile and Efficient Feature Grammars for Static Malware Classification","display_name":"Arithmetic Analysis: Versatile and Efficient Feature Grammars for Static Malware Classification","publication_year":2025,"publication_date":"2025-09-22","ids":{"openalex":"https://openalex.org/W7155049510","doi":"https://doi.org/10.1109/synasc69064.2025.00039"},"language":null,"primary_location":{"id":"doi:10.1109/synasc69064.2025.00039","is_oa":false,"landing_page_url":"https://doi.org/10.1109/synasc69064.2025.00039","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 27th International Symposium on Symbolic and Numeric Algorithms for Scientific Computing (SYNASC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028787392","display_name":"Marco Radovancovici","orcid":"https://orcid.org/0000-0002-7527-997X"},"institutions":[{"id":"https://openalex.org/I3121153395","display_name":"West University of Timi\u015foara","ror":"https://ror.org/0583a0t97","country_code":"RO","type":"education","lineage":["https://openalex.org/I3121153395"]}],"countries":["RO"],"is_corresponding":true,"raw_author_name":"Marco Radovancovici","raw_affiliation_strings":["West University of Timisoara,Faculty of Mathematics and Informatics,Timișoara,Romania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"West University of Timisoara,Faculty of Mathematics and Informatics,Timișoara,Romania","institution_ids":["https://openalex.org/I3121153395"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5028787392"],"corresponding_institution_ids":["https://openalex.org/I3121153395"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.71699299,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"235","last_page":"243"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9749000072479248,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9749000072479248,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.004699999932199717,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.003100000089034438,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5336999893188477},{"id":"https://openalex.org/keywords/rule-based-machine-translation","display_name":"Rule-based machine translation","score":0.39259999990463257},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.30709999799728394},{"id":"https://openalex.org/keywords/parsing","display_name":"Parsing","score":0.2851000130176544},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.2671000063419342}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7156999707221985},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5336999893188477},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46549999713897705},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.4325000047683716},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.4244000017642975},{"id":"https://openalex.org/C53893814","wikidata":"https://www.wikidata.org/wiki/Q7378909","display_name":"Rule-based machine translation","level":2,"score":0.39259999990463257},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.30709999799728394},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3068999946117401},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3019999861717224},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.2851000130176544},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.262800008058548},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.26080000400543213}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/synasc69064.2025.00039","is_oa":false,"landing_page_url":"https://doi.org/10.1109/synasc69064.2025.00039","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 27th International Symposium on Symbolic and Numeric Algorithms for Scientific Computing (SYNASC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1571989395","https://openalex.org/W1616768385","https://openalex.org/W1843946026","https://openalex.org/W1978799369","https://openalex.org/W2058929792","https://openalex.org/W2101105183","https://openalex.org/W2142937603","https://openalex.org/W2156938859","https://openalex.org/W2169606435","https://openalex.org/W2444115772","https://openalex.org/W2518866423","https://openalex.org/W2792561556","https://openalex.org/W2792663539","https://openalex.org/W2974072230","https://openalex.org/W4234535213","https://openalex.org/W4255415932"],"related_works":[],"abstract_inverted_index":{"Traditional":[0],"n-gram":[1],"and":[2,22,39,58,67,81,93,123,149,161,187],"image-resize":[3],"features":[4],"break":[5],"down":[6],"when":[7],"binary":[8,85,166],"code":[9],"is":[10,171],"packed,":[11],"masked,":[12],"or":[13],"encrypted,":[14],"because":[15],"they":[16],"rely":[17],"on":[18,76,112],"literal":[19],"byte":[20],"values":[21],"short-range":[23],"context.":[24],"This":[25],"paper":[26],"introduces":[27],"Arithmetic":[28,156,185,188],"Analysis,":[29],"a":[30,61,116],"family":[31],"of":[32,46,127,143],"symbolic":[33],"feature":[34,74],"grammars":[35,135],"that":[36],"encode":[37],"additive":[38],"subtractive":[40],"relationships":[41],"among":[42],"neighbouring":[43],"bytes":[44],"instead":[45],"their":[47],"exact":[48],"sequences.":[49],"Five":[50],"variants":[51],"are":[52],"defined:":[53],"additive,":[54],"subtractive,":[55],"mixed,":[56],"combinatorialmixed,":[57],"accumulative-combinatorial-mixed,":[59],"offering":[60],"tunable":[62],"balance":[63],"between":[64],"expressive":[65],"power":[66],"dimensional":[68],"growth.":[69],"We":[70],"evaluate":[71],"eleven":[72],"concrete":[73],"sets":[75],"one":[77],"hundred":[78],"thousand":[79],"Executable":[80],"Linkable":[82],"Format":[83],"(ELF)":[84],"files.":[86],"Experiments":[87],"cover":[88],"two":[89],"regimes:":[90],"plaintext":[91],"files":[92,95],"duplicate":[94],"encrypted":[96],"with":[97],"Advanced":[98],"Encryption":[99],"Standard":[100],"(AES)":[101],"in":[102],"Electronic":[103],"Code":[104],"Book":[105],"(ECB)":[106],"mode.":[107],"A":[108],"four-order":[109],"accumulative-combinatorial-mixed":[110],"grammar":[111,170],"clean":[113],"data":[114],"matches":[115],"bigram":[117],"histogram":[118],"at":[119],"half":[120],"the":[121],"runtime":[122],"an":[124,140],"F1":[125,141],"score":[126,142],"99":[128],"%.":[129],"Under":[130],"fullfile":[131],"encryption,":[132],"low-order":[133],"arithmetic":[134],"retain":[136],"meaningful":[137],"discrimination,":[138],"achieving":[139],"around":[144],"67":[145],"%,":[146],"whereas":[147],"frequency":[148],"resize-based":[150],"methods":[151],"collapse":[152],"to":[153,179],"random":[154],"chance.":[155],"Analysis":[157],"delivers":[158],"compact,":[159],"interpretable,":[160],"obfuscation-resilient":[162],"representations":[163],"for":[164],"static":[165],"detection.":[167],"Its":[168],"operator":[169],"domain-agnostic,":[172],"opening":[173],"future":[174],"applications":[175],"from":[176],"malware":[177],"triage":[178],"automatic":[180],"text-generation":[181],"metrics":[182],"such":[183],"as":[184],"BLEU":[186],"ROUGE.":[189]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-04-22T00:00:00"}