{"id":"https://openalex.org/W2115392339","doi":"https://doi.org/10.1145/1774088.1774484","title":"Improving the efficiency of dynamic malware analysis","display_name":"Improving the efficiency of dynamic malware analysis","publication_year":2010,"publication_date":"2010-03-22","ids":{"openalex":"https://openalex.org/W2115392339","doi":"https://doi.org/10.1145/1774088.1774484","mag":"2115392339"},"language":"en","primary_location":{"id":"doi:10.1145/1774088.1774484","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1774088.1774484","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2010 ACM Symposium on Applied Computing","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049919649","display_name":"Ulrich Bayer","orcid":null},"institutions":[{"id":"https://openalex.org/I121760703","display_name":"University of Applied Sciences Technikum Wien","ror":"https://ror.org/04jsx0x49","country_code":"AT","type":"education","lineage":["https://openalex.org/I121760703"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Ulrich Bayer","raw_affiliation_strings":["Technical University Vienna, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University Vienna, Vienna, Austria","institution_ids":["https://openalex.org/I121760703"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077875821","display_name":"Engin Kirda","orcid":"https://orcid.org/0000-0001-9988-6873"},"institutions":[{"id":"https://openalex.org/I1902872","display_name":"EURECOM","ror":"https://ror.org/00sse7z02","country_code":"FR","type":"education","lineage":["https://openalex.org/I1902872","https://openalex.org/I205703379"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Engin Kirda","raw_affiliation_strings":["Institute Eurecom, Sophia-Antipolis"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute Eurecom, Sophia-Antipolis","institution_ids":["https://openalex.org/I1902872"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["University of California, Santa Barbara, CA","University of California, Santa Barbara, Ca#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Santa Barbara, CA","institution_ids":["https://openalex.org/I154570441"]},{"raw_affiliation_string":"University of California, Santa Barbara, Ca#TAB#","institution_ids":["https://openalex.org/I154570441"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.6683,"has_fulltext":false,"cited_by_count":73,"citation_normalized_percentile":{"value":0.98337968,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1871","last_page":"1878"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9925000071525574,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.987500011920929,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.9178897738456726},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.8670964241027832},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.8569255471229553},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8074098825454712},{"id":"https://openalex.org/keywords/pace","display_name":"Pace","score":0.6665563583374023},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.6224956512451172},{"id":"https://openalex.org/keywords/program-analysis","display_name":"Program analysis","score":0.5305507779121399},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5258128046989441},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.49625974893569946},{"id":"https://openalex.org/keywords/factor","display_name":"Factor (programming language)","score":0.4776521921157837},{"id":"https://openalex.org/keywords/dynamic-program-analysis","display_name":"Dynamic program analysis","score":0.43788546323776245},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.4366813898086548},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.43415623903274536},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.12526842951774597}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.9178897738456726},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.8670964241027832},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.8569255471229553},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8074098825454712},{"id":"https://openalex.org/C2777526511","wikidata":"https://www.wikidata.org/wiki/Q691543","display_name":"Pace","level":2,"score":0.6665563583374023},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.6224956512451172},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.5305507779121399},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5258128046989441},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.49625974893569946},{"id":"https://openalex.org/C2781039887","wikidata":"https://www.wikidata.org/wiki/Q1391724","display_name":"Factor (programming language)","level":2,"score":0.4776521921157837},{"id":"https://openalex.org/C140006998","wikidata":"https://www.wikidata.org/wiki/Q2499307","display_name":"Dynamic program analysis","level":3,"score":0.43788546323776245},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.4366813898086548},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43415623903274536},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.12526842951774597},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1774088.1774484","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1774088.1774484","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2010 ACM Symposium on Applied Computing","raw_type":"proceedings-article"},{"id":"pmh:oai:fr.eurecom:3018","is_oa":false,"landing_page_url":"http://www.eurecom.fr/publication/3018","pdf_url":null,"source":{"id":"https://openalex.org/S4377196942","display_name":"Graduate School and Research Center in Digital Science (EURECOM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1902872","host_organization_name":"EURECOM","host_organization_lineage":["https://openalex.org/I1902872"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"SAC 2010, 25th ACM Symposium On Applied Computing, March 22-26, 2010, Sierre, Switzerland","raw_type":"Conference"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4699999988079071,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1759561455","display_name":"Web-Defense - client-side protection against web attacks","funder_award_id":"P18764","funder_id":"https://openalex.org/F4320321181","funder_display_name":"Austrian Science Fund"},{"id":"https://openalex.org/G8966777902","display_name":null,"funder_award_id":"FP7-ICT-216026-WOMBATFP7-ICT-216331-FORWARD","funder_id":"https://openalex.org/F4320334960","funder_display_name":"Seventh Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320321181","display_name":"Austrian Science Fund","ror":"https://ror.org/013tf3c58"},{"id":"https://openalex.org/F4320334960","display_name":"Seventh Framework Programme","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W157706324","https://openalex.org/W192724328","https://openalex.org/W1503224444","https://openalex.org/W1508225132","https://openalex.org/W1544837488","https://openalex.org/W1910686388","https://openalex.org/W2123402141","https://openalex.org/W2131523719","https://openalex.org/W2132874238","https://openalex.org/W2138644293","https://openalex.org/W2147717514","https://openalex.org/W2152565070","https://openalex.org/W2154933195","https://openalex.org/W2166462894","https://openalex.org/W4299301436","https://openalex.org/W6607776381","https://openalex.org/W6629915129","https://openalex.org/W6639864006"],"related_works":["https://openalex.org/W3111646971","https://openalex.org/W2183925834","https://openalex.org/W2104654077","https://openalex.org/W2007647094","https://openalex.org/W3136388389","https://openalex.org/W2507496997","https://openalex.org/W2895825088","https://openalex.org/W2995172056","https://openalex.org/W2354385412","https://openalex.org/W3134609580"],"abstract_inverted_index":{"Each":[0],"day,":[1],"security":[2],"companies":[3],"see":[4],"themselves":[5],"confronted":[6],"with":[7,15,79],"thousands":[8],"of":[9,54,65,116,124,144,158,178],"new":[10,117],"malware":[11,26,55,128],"programs.":[12,129],"To":[13,76,130],"cope":[14],"these":[16,80],"large":[17],"quantities,":[18],"researchers":[19],"and":[20,39,67],"practitioners":[21],"alike":[22],"have":[23,94],"developed":[24,95],"dynamic":[25,90,173],"analysis":[27,91,103,132,143,174],"systems.":[28],"These":[29],"systems":[30],"automatically":[31],"execute":[32],"a":[33,36,41,63,96,126,136,141,156,171],"program":[34],"in":[35,175],"controlled":[37],"environment":[38],"produce":[40],"report":[42],"describing":[43],"the":[44,48,52,101,110,113,145,179],"program's":[45],"behavior.":[46],"During":[47],"last":[49],"three":[50],"years,":[51],"number":[53,69,115],"programs":[56],"appearing":[57],"each":[58],"day":[59],"has":[60],"increased":[61],"by":[62],"factor":[64],"ten,":[66],"this":[68],"is":[70,107,120],"expected":[71],"to":[72,74,122,169],"continue":[73],"grow.":[75],"keep":[77],"pace":[78],"developments":[81],"without":[82],"causing":[83],"even":[84],"more":[85],"hardware":[86],"costs":[87],"for":[88],"operating":[89],"systems,":[92],"we":[93,134],"technique":[97,137],"that":[98,112,138],"drastically":[99],"reduces":[100],"overall":[102],"time.":[104],"Our":[105],"solution":[106],"based":[108],"on":[109,155],"insight":[111],"huge":[114],"malicious":[118],"files":[119],"due":[121],"mutations":[123],"only":[125],"few":[127],"save":[131],"time,":[133],"suggest":[135],"avoids":[139],"performing":[140],"full":[142,172],"same":[146],"polymorphic":[147],"file":[148],"multiple":[149],"times.":[150],"In":[151],"an":[152],"experiment":[153],"conducted":[154],"set":[157],"10,922":[159],"randomly":[160],"chosen":[161],"executable":[162],"files,":[163],"our":[164],"prototype":[165],"implementation":[166],"was":[167],"able":[168],"avoid":[170],"25.25":[176],"percent":[177],"cases.":[180]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":9},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":9},{"year":2012,"cited_by_count":5}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}