{"id":"https://openalex.org/W2060863163","doi":"https://doi.org/10.1145/2659651.2659737","title":"Exploring Worm Behaviors using DTW","display_name":"Exploring Worm Behaviors using DTW","publication_year":2014,"publication_date":"2014-09-09","ids":{"openalex":"https://openalex.org/W2060863163","doi":"https://doi.org/10.1145/2659651.2659737","mag":"2060863163"},"language":"en","primary_location":{"id":"doi:10.1145/2659651.2659737","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2659651.2659737","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 7th International Conference on Security of Information and Networks","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074937791","display_name":"Smita Naval","orcid":"https://orcid.org/0000-0003-3533-5030"},"institutions":[{"id":"https://openalex.org/I83205935","display_name":"Malaviya National Institute of Technology Jaipur","ror":"https://ror.org/0077k1j32","country_code":"IN","type":"education","lineage":["https://openalex.org/I83205935"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Smita Naval","raw_affiliation_strings":["Malaviya National Institute of Technology, Jaipur, India"],"affiliations":[{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, India","institution_ids":["https://openalex.org/I83205935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087820056","display_name":"Vijay Laxmi","orcid":"https://orcid.org/0000-0002-3662-8487"},"institutions":[{"id":"https://openalex.org/I83205935","display_name":"Malaviya National Institute of Technology Jaipur","ror":"https://ror.org/0077k1j32","country_code":"IN","type":"education","lineage":["https://openalex.org/I83205935"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Vijay Laxmi","raw_affiliation_strings":["Malaviya National Institute of Technology, Jaipur, India"],"affiliations":[{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, India","institution_ids":["https://openalex.org/I83205935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101408359","display_name":"Neha Gupta","orcid":null},"institutions":[{"id":"https://openalex.org/I83205935","display_name":"Malaviya National Institute of Technology Jaipur","ror":"https://ror.org/0077k1j32","country_code":"IN","type":"education","lineage":["https://openalex.org/I83205935"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Neha Gupta","raw_affiliation_strings":["Malaviya National Institute of Technology, Jaipur, India"],"affiliations":[{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, India","institution_ids":["https://openalex.org/I83205935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028420263","display_name":"Manoj Singh Gaur","orcid":"https://orcid.org/0000-0002-0497-721X"},"institutions":[{"id":"https://openalex.org/I83205935","display_name":"Malaviya National Institute of Technology Jaipur","ror":"https://ror.org/0077k1j32","country_code":"IN","type":"education","lineage":["https://openalex.org/I83205935"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Manoj Singh Gaur","raw_affiliation_strings":["Malaviya National Institute of Technology, Jaipur, India"],"affiliations":[{"raw_affiliation_string":"Malaviya National Institute of Technology, Jaipur, India","institution_ids":["https://openalex.org/I83205935"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059640195","display_name":"Muttukrishnan Rajarajan","orcid":"https://orcid.org/0000-0001-5814-9922"},"institutions":[{"id":"https://openalex.org/I180825142","display_name":"City, University of London","ror":"https://ror.org/04489at23","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I180825142"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Muttukrishnan Rajarajan","raw_affiliation_strings":["City University of London, London, United Kingdom","[City University of London, London, United Kingdom]"],"affiliations":[{"raw_affiliation_string":"City University of London, London, United Kingdom","institution_ids":["https://openalex.org/I180825142"]},{"raw_affiliation_string":"[City University of London, London, United Kingdom]","institution_ids":["https://openalex.org/I180825142"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5074937791"],"corresponding_institution_ids":["https://openalex.org/I83205935"],"apc_list":null,"apc_paid":null,"fwci":0.3448,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.66120491,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"43","issue":null,"first_page":"379","last_page":"384"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7365777492523193},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6195915341377258},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.6121246814727783},{"id":"https://openalex.org/keywords/dynamic-time-warping","display_name":"Dynamic time warping","score":0.605105996131897},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.5999311208724976},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.509194552898407},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.4799673557281494},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4451175332069397},{"id":"https://openalex.org/keywords/damages","display_name":"Damages","score":0.43138206005096436},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4112895727157593},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1637895703315735},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09736204147338867},{"id":"https://openalex.org/keywords/ecology","display_name":"Ecology","score":0.07890474796295166},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.07200446724891663}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7365777492523193},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6195915341377258},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.6121246814727783},{"id":"https://openalex.org/C88516994","wikidata":"https://www.wikidata.org/wiki/Q1268863","display_name":"Dynamic time warping","level":2,"score":0.605105996131897},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.5999311208724976},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.509194552898407},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.4799673557281494},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4451175332069397},{"id":"https://openalex.org/C2777381055","wikidata":"https://www.wikidata.org/wiki/Q308922","display_name":"Damages","level":2,"score":0.43138206005096436},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4112895727157593},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1637895703315735},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09736204147338867},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.07890474796295166},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.07200446724891663},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2659651.2659737","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2659651.2659737","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 7th International Conference on Security of Information and Networks","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","score":0.5699999928474426,"display_name":"Reduced inequalities"},{"id":"https://metadata.un.org/sdg/16","score":0.4699999988079071,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1515180657","https://openalex.org/W1910686388","https://openalex.org/W1992110042","https://openalex.org/W1992419399","https://openalex.org/W2005662348","https://openalex.org/W2020880787","https://openalex.org/W2029674613","https://openalex.org/W2032151752","https://openalex.org/W2053744180","https://openalex.org/W2054093027","https://openalex.org/W2063411627","https://openalex.org/W2070333012","https://openalex.org/W2072617132","https://openalex.org/W2087461593","https://openalex.org/W2099499363","https://openalex.org/W2107510910","https://openalex.org/W2115175195","https://openalex.org/W2125826437","https://openalex.org/W2127898492","https://openalex.org/W2129066856","https://openalex.org/W2139542584","https://openalex.org/W2140807364","https://openalex.org/W2146910660","https://openalex.org/W2166924764","https://openalex.org/W2168412760","https://openalex.org/W2498597779","https://openalex.org/W2612166593","https://openalex.org/W2999729612","https://openalex.org/W4240592325","https://openalex.org/W4252476804","https://openalex.org/W4298882835","https://openalex.org/W6639864006"],"related_works":["https://openalex.org/W4205240985","https://openalex.org/W2314597598","https://openalex.org/W1527183021","https://openalex.org/W3125296675","https://openalex.org/W4235320026","https://openalex.org/W3124239800","https://openalex.org/W2341338763","https://openalex.org/W2365977737","https://openalex.org/W1577024311","https://openalex.org/W4387399630"],"abstract_inverted_index":{"Worms":[0],"are":[1],"becoming":[2],"a":[3,32,67,100],"potential":[4],"threat":[5],"to":[6,16,35,46,73,86,109,115],"Internet":[7],"users":[8],"across":[9],"the":[10,39,117],"globe.":[11],"The":[12,126],"financial":[13],"damages":[14],"due":[15],"computer":[17],"worms":[18,50],"increased":[19],"significantly":[20,59],"in":[21],"past":[22],"few":[23],"years.":[24],"Analyzing":[25],"these":[26,111],"hazardous":[27],"worm":[28,42,70,80,122],"attacks":[29],"has":[30],"become":[31],"crucial":[33],"issue":[34],"be":[36,58],"addressed.":[37],"Given":[38],"fact":[40],"that":[41,79],"analysts":[43],"would":[44],"prefer":[45],"analyze":[47],"classes":[48],"of":[49,135],"rather":[51],"than":[52],"individual":[53],"files,":[54],"their":[55,87],"task":[56],"will":[57],"reduced.":[60],"In":[61,113],"this":[62],"paper,":[63],"we":[64],"have":[65],"proposed":[66,93,118],"dynamic":[68],"host--based":[69],"categorization":[71],"approach":[72,94,119],"segregate":[74],"worms.":[75,137],"These":[76],"groups":[77],"indicate":[78],"samples":[81],"constitute":[82],"different":[83],"behavior":[84],"according":[85],"infection":[88],"and":[89,98,123],"anti--detection":[90],"vectors.":[91],"Our":[92],"utilizes":[95],"system--call":[96],"traces":[97],"computes":[99],"distance":[101],"matrix":[102],"using":[103],"Dynamic":[104],"Time":[105],"Warping":[106],"(DTW)":[107],"algorithm":[108],"form":[110],"groups.":[112],"conjunction":[114],"that,":[116],"also":[120],"discriminates":[121],"benign":[124],"executables.":[125],"constructed":[127],"model":[128],"is":[129],"further":[130],"evaluated":[131],"with":[132],"unknown":[133],"instances":[134],"real--world":[136]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2015,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
