{"id":"https://openalex.org/W1975908701","doi":"https://doi.org/10.1145/2388576.2388607","title":"ESCAPE","display_name":"ESCAPE","publication_year":2012,"publication_date":"2012-10-25","ids":{"openalex":"https://openalex.org/W1975908701","doi":"https://doi.org/10.1145/2388576.2388607","mag":"1975908701"},"language":"en","primary_location":{"id":"doi:10.1145/2388576.2388607","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2388576.2388607","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fifth International Conference on Security of Information and Networks","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074937791","display_name":"Smita Naval","orcid":"https://orcid.org/0000-0003-3533-5030"},"institutions":[{"id":"https://openalex.org/I83205935","display_name":"Malaviya National Institute of Technology Jaipur","ror":"https://ror.org/0077k1j32","country_code":"IN","type":"education","lineage":["https://openalex.org/I83205935"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Smita Naval","raw_affiliation_strings":["Malaviya National Institute of Technology, Jaipur, Rajasthan","Malaviya National Institute of Technology, Jaipur, Rajasthan#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, Rajasthan","institution_ids":["https://openalex.org/I83205935"]},{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, Rajasthan#TAB#","institution_ids":["https://openalex.org/I83205935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087820056","display_name":"Vijay Laxmi","orcid":"https://orcid.org/0000-0002-3662-8487"},"institutions":[{"id":"https://openalex.org/I83205935","display_name":"Malaviya National Institute of Technology Jaipur","ror":"https://ror.org/0077k1j32","country_code":"IN","type":"education","lineage":["https://openalex.org/I83205935"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Vijay Laxmi","raw_affiliation_strings":["Malaviya National Institute of Technology, Jaipur, Rajasthan","Malaviya National Institute of Technology, Jaipur, Rajasthan#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, Rajasthan","institution_ids":["https://openalex.org/I83205935"]},{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, Rajasthan#TAB#","institution_ids":["https://openalex.org/I83205935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028420263","display_name":"Manoj Singh Gaur","orcid":"https://orcid.org/0000-0002-0497-721X"},"institutions":[{"id":"https://openalex.org/I83205935","display_name":"Malaviya National Institute of Technology Jaipur","ror":"https://ror.org/0077k1j32","country_code":"IN","type":"education","lineage":["https://openalex.org/I83205935"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"M. S. Gaur","raw_affiliation_strings":["Malaviya National Institute of Technology, Jaipur, Rajasthan","Malaviya National Institute of Technology, Jaipur, Rajasthan#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, Rajasthan","institution_ids":["https://openalex.org/I83205935"]},{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, Rajasthan#TAB#","institution_ids":["https://openalex.org/I83205935"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103016944","display_name":"P. Vinod","orcid":"https://orcid.org/0000-0001-6078-2014"},"institutions":[{"id":"https://openalex.org/I83205935","display_name":"Malaviya National Institute of Technology Jaipur","ror":"https://ror.org/0077k1j32","country_code":"IN","type":"education","lineage":["https://openalex.org/I83205935"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"P. Vinod","raw_affiliation_strings":["Malaviya National Institute of Technology, Jaipur, Rajasthan","Malaviya National Institute of Technology, Jaipur, Rajasthan#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, Rajasthan","institution_ids":["https://openalex.org/I83205935"]},{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, Rajasthan#TAB#","institution_ids":["https://openalex.org/I83205935"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I83205935"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"197","last_page":"200"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9868999719619751,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.9047966003417969},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.9022861123085022},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8840664625167847},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7927528619766235},{"id":"https://openalex.org/keywords/unpacking","display_name":"Unpacking","score":0.7467129826545715},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.689247190952301},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.550041675567627},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4593525230884552},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3202289342880249},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.266240656375885}],"concepts":[{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.9047966003417969},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.9022861123085022},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8840664625167847},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7927528619766235},{"id":"https://openalex.org/C2777256151","wikidata":"https://www.wikidata.org/wiki/Q7897273","display_name":"Unpacking","level":2,"score":0.7467129826545715},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.689247190952301},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.550041675567627},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4593525230884552},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3202289342880249},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.266240656375885},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2388576.2388607","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2388576.2388607","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fifth International Conference on Security of Information and Networks","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","score":0.699999988079071,"display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W1558357780","https://openalex.org/W1598779648","https://openalex.org/W1725430864","https://openalex.org/W2002562485","https://openalex.org/W2140807364","https://openalex.org/W2150423842","https://openalex.org/W2164049479","https://openalex.org/W2165357553","https://openalex.org/W6634120640"],"related_works":["https://openalex.org/W2620652965","https://openalex.org/W2024170198","https://openalex.org/W2555789008","https://openalex.org/W4296272594","https://openalex.org/W2900526031","https://openalex.org/W2902937489","https://openalex.org/W2289039654","https://openalex.org/W2728713145","https://openalex.org/W2903528773","https://openalex.org/W2470502009"],"abstract_inverted_index":{"Malware":[0,55],"developers":[1],"hide":[2],"the":[3,23,32,38,86,91,100,108,114],"malicious":[4],"payload":[5],"of":[6,34,40,94,104,107,119],"malware":[7,130],"binary":[8],"by":[9],"employing":[10],"various":[11],"obfuscation":[12],"techniques.":[13],"One":[14],"such":[15],"technique":[16],"commonly":[17],"applied":[18],"is":[19,28,43,117],"packing.":[20],"Packer":[21],"transforms":[22],"original":[24],"bytes":[25],"so":[26],"it":[27],"difficult":[29],"to":[30,58,63,68,89],"recognize":[31],"behaviour":[33],"any":[35,64],"executable.":[36,109],"Although":[37],"contents":[39],"a":[41,79],"file":[42],"changed,":[44],"some":[45],"byte":[46,105],"patterns":[47],"may":[48],"be":[49],"preserved":[50],"across":[51],"different":[52,129],"packed":[53,83,121,127],"executables.":[54],"detectors":[56],"need":[57],"apply":[59],"unpacking":[60],"mechanism":[61],"prior":[62],"detection":[65],"or":[66],"analysis":[67],"every":[69],"sample":[70],"under":[71],"consideration.":[72],"In":[73],"this":[74],"paper,":[75],"we":[76],"have":[77,98],"proposed":[78,115],"method":[80,116],"that":[81,113],"discriminate":[82],"binaries":[84],"from":[85],"native":[87,123],"files":[88],"minimize":[90],"processing":[92],"time":[93],"AV":[95],"scanners.":[96],"We":[97],"used":[99],"blockwise":[101],"entropy":[102],"score":[103],"features":[106],"Experimental":[110],"results":[111],"show":[112],"capable":[118],"identifying":[120],"and":[122],"executable":[124],"which":[125],"are":[126],"using":[128],"packers.":[131]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2015,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2016-06-24T00:00:00"}