{"id":"https://openalex.org/W2084201645","doi":"https://doi.org/10.1145/1653662.1653696","title":"Behavior based software theft detection","display_name":"Behavior based software theft detection","publication_year":2009,"publication_date":"2009-11-09","ids":{"openalex":"https://openalex.org/W2084201645","doi":"https://doi.org/10.1145/1653662.1653696","mag":"2084201645"},"language":"en","primary_location":{"id":"doi:10.1145/1653662.1653696","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1653662.1653696","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM conference on Computer and communications security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100458487","display_name":"Xinran Wang","orcid":"https://orcid.org/0000-0003-1552-1805"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinran Wang","raw_affiliation_strings":["Pennsylvania State University, state college, PA, USA","Pennsylvania State University, State College, PA., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, state college, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"Pennsylvania State University, State College, PA., USA#TAB#","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039607010","display_name":"Yoon\u2010Chan Jhi","orcid":"https://orcid.org/0009-0008-4112-4532"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yoon-Chan Jhi","raw_affiliation_strings":["Pennsylvania State University, state college, PA, USA","Pennsylvania State University, State College, PA., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, state college, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"Pennsylvania State University, State College, PA., USA#TAB#","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101952501","display_name":"Sencun Zhu","orcid":"https://orcid.org/0000-0002-1047-7967"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sencun Zhu","raw_affiliation_strings":["Pennsylvania State University, state college, PA, USA","Pennsylvania State University, State College, PA., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, state college, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"Pennsylvania State University, State College, PA., USA#TAB#","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100346828","display_name":"Peng Liu","orcid":"https://orcid.org/0000-0002-5091-8464"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Peng Liu","raw_affiliation_strings":["Pennsylvania State University, state college, PA, USA","Pennsylvania State University, State College, PA., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, state college, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"Pennsylvania State University, State College, PA., USA#TAB#","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I130769515"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":101,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"280","last_page":"290"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7911481857299805},{"id":"https://openalex.org/keywords/birthmark","display_name":"Birthmark","score":0.7603775858879089},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.6118103265762329},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.5877265930175781},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.5585000514984131},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.489731103181839},{"id":"https://openalex.org/keywords/static-program-analysis","display_name":"Static program analysis","score":0.4599316418170929},{"id":"https://openalex.org/keywords/software-system","display_name":"Software system","score":0.4597594439983368},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.42242830991744995},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4206981658935547},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.379808247089386},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3505879044532776},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.25613725185394287}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7911481857299805},{"id":"https://openalex.org/C2776826570","wikidata":"https://www.wikidata.org/wiki/Q3513591","display_name":"Birthmark","level":2,"score":0.7603775858879089},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.6118103265762329},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.5877265930175781},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.5585000514984131},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.489731103181839},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.4599316418170929},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.4597594439983368},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.42242830991744995},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4206981658935547},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.379808247089386},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3505879044532776},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.25613725185394287},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1653662.1653696","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1653662.1653696","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM conference on Computer and communications security","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.403.1637","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.403.1637","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cse.psu.edu/~szhu/papers/wangccs09.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.41999998688697815,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320333591","display_name":"Multidisciplinary University Research Initiative","ror":null},{"id":"https://openalex.org/F4320338279","display_name":"Air Force Office of Scientific Research","ror":"https://ror.org/011e9bt93"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W64563084","https://openalex.org/W150085617","https://openalex.org/W1500616534","https://openalex.org/W1552906779","https://openalex.org/W1567046609","https://openalex.org/W1863385414","https://openalex.org/W1910918478","https://openalex.org/W1995739251","https://openalex.org/W2003498848","https://openalex.org/W2019763646","https://openalex.org/W2026033845","https://openalex.org/W2038159719","https://openalex.org/W2042454716","https://openalex.org/W2046021036","https://openalex.org/W2062847633","https://openalex.org/W2086968222","https://openalex.org/W2096491586","https://openalex.org/W2107697055","https://openalex.org/W2109943392","https://openalex.org/W2111295912","https://openalex.org/W2126359798","https://openalex.org/W2138756793","https://openalex.org/W2146659255","https://openalex.org/W2148139859","https://openalex.org/W2156858199","https://openalex.org/W2157532207","https://openalex.org/W2167671111","https://openalex.org/W3202159599","https://openalex.org/W6681648988"],"related_works":["https://openalex.org/W2194609298","https://openalex.org/W2162441576","https://openalex.org/W2064613179","https://openalex.org/W2598702176","https://openalex.org/W4211053310","https://openalex.org/W1967782643","https://openalex.org/W1992632577","https://openalex.org/W4214596491","https://openalex.org/W2168717281","https://openalex.org/W4385489206"],"abstract_inverted_index":{"Along":[0],"with":[1],"the":[2,19,28,77,96,124],"burst":[3],"of":[4,21,31,63,83,98,143],"open":[5],"source":[6],"projects,":[7],"software":[8,22,38,49,85,159],"theft":[9,39,87,160],"(or":[10],"plagiarism)":[11],"has":[12],"become":[13],"a":[14,32,43,64,141],"very":[15,153],"serious":[16],"threat":[17],"to":[18],"healthiness":[20],"industry.":[23],"Software":[24],"birthmark,":[25,53],"which":[26],"represents":[27],"unique":[29,60],"characteristics":[30,62],"program,":[33],"can":[34],"be":[35],"used":[36],"for":[37],"detection.":[40],"We":[41,94],"propose":[42],"system":[44,71],"call":[45],"dependence":[46],"graph":[47],"based":[48,72,107],"birthmark":[50,75,100,139,151],"called":[51],"SCDG":[52,74,150],"and":[54,111,155],"examine":[55],"how":[56],"well":[57,117],"it":[58],"reflects":[59],"behavioral":[61],"program.":[65],"To":[66],"our":[67,69,99,138],"knowledge,":[68],"detection":[70],"on":[73,108,140],"is":[76,81,92,152],"first":[78],"one":[79],"that":[80,127,149,161],"capable":[82],"detecting":[84,158],"component":[86],"where":[88],"only":[89],"partial":[90],"code":[91],"stolen.":[93],"demonstrate":[95],"strength":[97],"against":[101],"various":[102],"evasion":[103,165],"techniques,":[104],"including":[105],"those":[106],"different":[109,112],"compilers":[110],"compiler":[113],"optimization":[114],"levels":[115],"as":[116,118],"two":[119],"state-of-the-art":[120],"obfuscation":[121],"tools.":[122],"Unlike":[123],"existing":[125],"work":[126],"were":[128],"evaluated":[129],"through":[130],"small":[131],"or":[132],"toy":[133],"software,":[134],"we":[135],"also":[136],"evaluate":[137],"set":[142],"large":[144],"software.":[145],"Our":[146],"results":[147],"show":[148],"practical":[154],"effective":[156],"in":[157],"even":[162],"adopts":[163],"advanced":[164],"techniques.":[166]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":10},{"year":2018,"cited_by_count":8},{"year":2017,"cited_by_count":7},{"year":2016,"cited_by_count":7},{"year":2015,"cited_by_count":12},{"year":2014,"cited_by_count":11},{"year":2013,"cited_by_count":9},{"year":2012,"cited_by_count":10}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}