{"id":"https://openalex.org/W2982994925","doi":"https://doi.org/10.1145/3338503.3357720","title":"MetaHunt","display_name":"MetaHunt","publication_year":2019,"publication_date":"2019-11-07","ids":{"openalex":"https://openalex.org/W2982994925","doi":"https://doi.org/10.1145/3338503.3357720","mag":"2982994925"},"language":"en","primary_location":{"id":"doi:10.1145/3338503.3357720","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338503.3357720","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd ACM Workshop on Software Protection","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100335820","display_name":"Li Wang","orcid":"https://orcid.org/0000-0001-6224-6469"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Li Wang","raw_affiliation_strings":["Pennsylvania State University, University Park, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087023767","display_name":"Dongpeng Xu","orcid":"https://orcid.org/0000-0001-6596-9101"},"institutions":[{"id":"https://openalex.org/I161057412","display_name":"University of New Hampshire","ror":"https://ror.org/01rmh9n78","country_code":"US","type":"education","lineage":["https://openalex.org/I161057412"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongpeng Xu","raw_affiliation_strings":["University of New Hampshire, Durham, NH, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New Hampshire, Durham, NH, USA","institution_ids":["https://openalex.org/I161057412"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101420644","display_name":"Jiang Ming","orcid":"https://orcid.org/0000-0001-9682-0502"},"institutions":[{"id":"https://openalex.org/I189196454","display_name":"The University of Texas at Arlington","ror":"https://ror.org/019kgqr73","country_code":"US","type":"education","lineage":["https://openalex.org/I189196454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiang Ming","raw_affiliation_strings":["University of Texas at Arlington, Arlington, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Texas at Arlington, Arlington, TX, USA","institution_ids":["https://openalex.org/I189196454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025582376","display_name":"Yu Fu","orcid":"https://orcid.org/0000-0002-8022-9002"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yu Fu","raw_affiliation_strings":["Pennsylvania State University, University Park, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008435786","display_name":"Dinghao Wu","orcid":"https://orcid.org/0000-0002-0741-5511"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dinghao Wu","raw_affiliation_strings":["Pennsylvania State University, University Park, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"12","issue":null,"first_page":"15","last_page":"26"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8296831846237183},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8061648607254028},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.688240110874176},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.5685449242591858},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.4356175661087036},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41856276988983154},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3387755751609802},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3226779103279114},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.29606205224990845},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.291770875453949}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8296831846237183},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8061648607254028},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.688240110874176},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.5685449242591858},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4356175661087036},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41856276988983154},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3387755751609802},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3226779103279114},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.29606205224990845},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.291770875453949}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3338503.3357720","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338503.3357720","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd ACM Workshop on Software Protection","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.5099999904632568}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W65379173","https://openalex.org/W140639879","https://openalex.org/W157156687","https://openalex.org/W200653874","https://openalex.org/W224410497","https://openalex.org/W844137998","https://openalex.org/W1515790419","https://openalex.org/W1549352151","https://openalex.org/W1571503777","https://openalex.org/W1573286687","https://openalex.org/W1595564425","https://openalex.org/W1690253345","https://openalex.org/W1979400615","https://openalex.org/W1980153792","https://openalex.org/W1985737284","https://openalex.org/W1994742583","https://openalex.org/W1997847700","https://openalex.org/W2008453980","https://openalex.org/W2009614414","https://openalex.org/W2011009207","https://openalex.org/W2026576099","https://openalex.org/W2027306900","https://openalex.org/W2029491280","https://openalex.org/W2051223603","https://openalex.org/W2082594235","https://openalex.org/W2095975118","https://openalex.org/W2099194862","https://openalex.org/W2104495462","https://openalex.org/W2105041868","https://openalex.org/W2110978214","https://openalex.org/W2119251836","https://openalex.org/W2119896695","https://openalex.org/W2129487583","https://openalex.org/W2131523719","https://openalex.org/W2140807364","https://openalex.org/W2143840485","https://openalex.org/W2153185479","https://openalex.org/W2163353162","https://openalex.org/W2167975832","https://openalex.org/W2171035369","https://openalex.org/W2242756467","https://openalex.org/W2407989913","https://openalex.org/W2414803796","https://openalex.org/W2627063456","https://openalex.org/W2752885492","https://openalex.org/W2914503388","https://openalex.org/W2946046356","https://openalex.org/W4246166885","https://openalex.org/W4247464060","https://openalex.org/W4285719527","https://openalex.org/W6634105385"],"related_works":["https://openalex.org/W2620652965","https://openalex.org/W2024170198","https://openalex.org/W4296272594","https://openalex.org/W2900526031","https://openalex.org/W2128507946","https://openalex.org/W2728713145","https://openalex.org/W2131332603","https://openalex.org/W2470502009","https://openalex.org/W2072617132","https://openalex.org/W4360993664"],"abstract_inverted_index":{"As":[0],"the":[1,30,34,53,64,86,89,93,101,109,120,167,176],"underground":[2],"industry":[3],"of":[4,52,66,92,103,169,175],"malware":[5,7,17,37,41,73,105,156],"prospers,":[6],"developers":[8],"consistently":[9],"attempt":[10,97],"to":[11,28,32,59,78,98,132,192,206,211],"camouflage":[12],"malicious":[13],"code":[14,45,135],"and":[15,68,80,137,150,173],"undermine":[16],"detection":[18],"with":[19,63,153],"various":[20],"obfuscation":[21],"schemes.":[22],"Among":[23],"them,":[24],"metamorphism":[25],"is":[26],"known":[27],"have":[29,144],"potential":[31],"defeat":[33],"popular":[35],"signature-based":[36],"detection.":[38],"A":[39],"metamorphic":[40,72,87,94,104,121,155,171,187],"sample":[42],"mutates":[43],"its":[44],"during":[46],"propagations":[47],"so":[48],"that":[49,162],"each":[50],"instance":[51],"same":[54],"family":[55],"exhibits":[56],"little":[57],"resemblance":[58],"another":[60],"variant.":[61],"Especially":[62],"development":[65],"compiler":[67],"binary":[69,130],"rewriting":[70],"techniques,":[71],"will":[74],"become":[75],"much":[76],"easier":[77],"develop":[79],"outbreak":[81],"eventually.":[82],"To":[83],"fully":[84],"understand":[85],"engine,":[88],"core":[90],"part":[91],"malware,":[95],"we":[96,112,126],"systematically":[99],"study":[100],"evolution":[102],"over":[106],"time.":[107,182],"Unlike":[108],"previous":[110],"work,":[111],"do":[113],"not":[114],"require":[115],"any":[116],"prior":[117],"knowledge":[118],"about":[119],"engine":[122,188],"in":[123,179],"use.":[124],"Instead,":[125],"perform":[127],"trace-based":[128],"semantic":[129],"diffing":[131],"compare":[133],"mutation":[134],"iteratively":[136],"memoize":[138],"semantically":[139],"equivalent":[140],"basic":[141],"blocks.":[142],"We":[143,196],"developed":[145],"a":[146,180,193],"prototype,":[147],"called":[148],"MetaHunt,":[149],"evaluated":[151],"it":[152],"1,400":[154],"variants.":[157],"Our":[158],"experimental":[159],"results":[160],"show":[161],"MetaHunt":[163,184],"can":[164],"accurately":[165],"capture":[166],"semantics":[168],"unknown":[170],"engines,":[172],"all":[174],"comparisons":[177],"converge":[178],"reasonable":[181],"Besides,":[183],"identifies":[185],"several":[186],"bugs,":[189],"which":[190],"lead":[191],"semantics-breaking":[194],"transformation.":[195],"summarize":[197],"our":[198,202],"experience":[199],"learned":[200],"from":[201],"empirical":[203],"study,":[204],"hoping":[205],"stimulate":[207],"designing":[208],"mutation-aware":[209],"solutions":[210],"defend":[212],"this":[213],"threat":[214],"proactively.":[215]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2019-11-22T00:00:00"}