{"id":"https://openalex.org/W3125868980","doi":"https://doi.org/10.1145/3429741","title":"One Size Does Not Fit All","display_name":"One Size Does Not Fit All","publication_year":2021,"publication_date":"2021-01-21","ids":{"openalex":"https://openalex.org/W3125868980","doi":"https://doi.org/10.1145/3429741","mag":"3125868980"},"language":"en","primary_location":{"id":"doi:10.1145/3429741","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3429741","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060510652","display_name":"Marcus Botacin","orcid":"https://orcid.org/0000-0001-6870-1178"},"institutions":[{"id":"https://openalex.org/I52418104","display_name":"Universidade Federal do Paran\u00e1","ror":"https://ror.org/05syd6y78","country_code":"BR","type":"education","lineage":["https://openalex.org/I52418104"]}],"countries":["BR"],"is_corresponding":true,"raw_author_name":"Marcus Botacin","raw_affiliation_strings":["Federal University of Paran\u00e1 (UFPR), UFPR, Curitiba-PR, Brazil"],"affiliations":[{"raw_affiliation_string":"Federal University of Paran\u00e1 (UFPR), UFPR, Curitiba-PR, Brazil","institution_ids":["https://openalex.org/I52418104"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072290972","display_name":"Hojjat Aghakhani","orcid":null},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hojjat Aghakhani","raw_affiliation_strings":["University of California at Santa Barbara (UCSB), UCSB, Santa Barbara, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California at Santa Barbara (UCSB), UCSB, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045644624","display_name":"Stefano Ortolani","orcid":"https://orcid.org/0009-0003-5857-5755"},"institutions":[{"id":"https://openalex.org/I74786994","display_name":"Kitware (United States)","ror":"https://ror.org/02s2acn37","country_code":"US","type":"company","lineage":["https://openalex.org/I74786994"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stefano Ortolani","raw_affiliation_strings":["VMware, USA"],"affiliations":[{"raw_affiliation_string":"VMware, USA","institution_ids":["https://openalex.org/I74786994"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["University of California at Santa Barbara (UCSB) and VMware, UCSB, Santa Barbara, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California at Santa Barbara (UCSB) and VMware, UCSB, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Giovanni Vigna","raw_affiliation_strings":["University of California at Santa Barbara (UCSB) and VMware, UCSB, Santa Barbara, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California at Santa Barbara (UCSB) and VMware, UCSB, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082282267","display_name":"Daniela S Oliveira","orcid":"https://orcid.org/0000-0003-3488-0053"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniela Oliveira","raw_affiliation_strings":["University of Florida (UF), UF, Gainesville, FL, USA"],"affiliations":[{"raw_affiliation_string":"University of Florida (UF), UF, Gainesville, FL, USA","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024273591","display_name":"Paulo L\u00edcio de Geus","orcid":"https://orcid.org/0000-0002-6540-8686"},"institutions":[{"id":"https://openalex.org/I181391015","display_name":"Universidade Estadual de Campinas (UNICAMP)","ror":"https://ror.org/04wffgt70","country_code":"BR","type":"education","lineage":["https://openalex.org/I181391015"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Paulo L\u00edcio De Geus","raw_affiliation_strings":["University of Campinas (UNICAMP), UNICAMP, Campinas-SP, Brazil"],"affiliations":[{"raw_affiliation_string":"University of Campinas (UNICAMP), UNICAMP, Campinas-SP, Brazil","institution_ids":["https://openalex.org/I181391015"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059851424","display_name":"Andr\u00e9 Gr\u00e9gio","orcid":"https://orcid.org/0000-0003-1766-5757"},"institutions":[{"id":"https://openalex.org/I52418104","display_name":"Universidade Federal do Paran\u00e1","ror":"https://ror.org/05syd6y78","country_code":"BR","type":"education","lineage":["https://openalex.org/I52418104"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Andr\u00e9 Gr\u00e9gio","raw_affiliation_strings":["Federal University of Paran\u00e1 (UFPR), UFPR, Curitiba-PR, Brazil"],"affiliations":[{"raw_affiliation_string":"Federal University of Paran\u00e1 (UFPR), UFPR, Curitiba-PR, Brazil","institution_ids":["https://openalex.org/I52418104"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5060510652"],"corresponding_institution_ids":["https://openalex.org/I52418104"],"apc_list":null,"apc_paid":null,"fwci":2.1516,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.87713402,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"24","issue":"2","first_page":"1","last_page":"31"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8721733093261719},{"id":"https://openalex.org/keywords/population","display_name":"Population","score":0.6288573741912842},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.6038186550140381},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5307165384292603},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5267360210418701},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4980025291442871},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48515328764915466},{"id":"https://openalex.org/keywords/personalization","display_name":"Personalization","score":0.45462679862976074},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3955433964729309},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3659489154815674},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.260966420173645},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.08507198095321655},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.08270350098609924}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8721733093261719},{"id":"https://openalex.org/C2908647359","wikidata":"https://www.wikidata.org/wiki/Q2625603","display_name":"Population","level":2,"score":0.6288573741912842},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.6038186550140381},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5307165384292603},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5267360210418701},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4980025291442871},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48515328764915466},{"id":"https://openalex.org/C183003079","wikidata":"https://www.wikidata.org/wiki/Q1000371","display_name":"Personalization","level":2,"score":0.45462679862976074},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3955433964729309},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3659489154815674},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.260966420173645},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.08507198095321655},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.08270350098609924},{"id":"https://openalex.org/C149923435","wikidata":"https://www.wikidata.org/wiki/Q37732","display_name":"Demography","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3429741","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3429741","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals","score":0.46000000834465027}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W657933876","https://openalex.org/W1516960038","https://openalex.org/W1592632010","https://openalex.org/W1953683851","https://openalex.org/W1970867218","https://openalex.org/W1973697585","https://openalex.org/W2065147106","https://openalex.org/W2065339563","https://openalex.org/W2082180526","https://openalex.org/W2109860693","https://openalex.org/W2121646779","https://openalex.org/W2125011234","https://openalex.org/W2160988289","https://openalex.org/W2167464078","https://openalex.org/W2170470412","https://openalex.org/W2211880739","https://openalex.org/W2247056159","https://openalex.org/W2334842536","https://openalex.org/W2491928626","https://openalex.org/W2516354798","https://openalex.org/W2538335023","https://openalex.org/W2591653665","https://openalex.org/W2611817064","https://openalex.org/W2753871665","https://openalex.org/W2756936951","https://openalex.org/W2765227388","https://openalex.org/W2794801050","https://openalex.org/W2912095101","https://openalex.org/W2958937393","https://openalex.org/W2969014101","https://openalex.org/W4298869031"],"related_works":["https://openalex.org/W2768892939","https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W2134874482","https://openalex.org/W4285507391","https://openalex.org/W2397240470","https://openalex.org/W2602767565","https://openalex.org/W170652726","https://openalex.org/W2883822334","https://openalex.org/W3164408430"],"abstract_inverted_index":{"Malware":[0,21],"analysis":[1,22,43],"is":[2],"an":[3,73],"essential":[4],"task":[5],"to":[6,18,106,129,163,180,187,192,210],"understand":[7],"infection":[8],"campaigns,":[9],"the":[10,45,95,136,143,146,171,189,201],"behavior":[11],"of":[12,27,37,44,76,81,109,112,116,145,198,203],"malicious":[13],"codes,":[14],"and":[15,31,53,70,125,148,215],"possible":[16],"ways":[17],"mitigate":[19],"threats.":[20,218],"also":[23],"allows":[24],"better":[25],"assessment":[26],"attackers\u2019":[28],"capabilities,":[29],"techniques,":[30],"processes.":[32],"Although":[33],"a":[34,41,67,110,139,195],"substantial":[35],"amount":[36],"previous":[38],"work":[39],"provided":[40],"comprehensive":[42,71],"international":[46],"malware":[47,55,85,99],"ecosystem,":[48],"research":[49],"on":[50,121,135,142],"regionalized,":[51],"country-,":[52],"population-specific":[54],"campaigns":[56],"have":[57],"been":[58,101],"scarce.":[59],"Moving":[60],"towards":[61,213],"addressing":[62],"this":[63,183],"gap,":[64],"we":[65,185],"conducted":[66],"longitudinal":[68],"(2012-2020)":[69],"(encompassing":[72],"entire":[74],"population":[75,141],"online":[77],"banking":[78],"users)":[79],"study":[80,134],"MS":[82],"Windows":[83],"desktop":[84,98],"that":[86,94,159,174],"actually":[87],"infected":[88],"Brazilian":[89,96],"banks\u2019":[90],"users.":[91],"We":[92],"found":[93],"financial":[97],"has":[100],"evolving":[102],"quickly:":[103],"it":[104],"started":[105],"make":[107],"use":[108],"variety":[111],"file":[113],"formats":[114],"instead":[115],"typical":[117],"PE":[118],"binaries,":[119],"relied":[120],"native":[122],"system":[123],"resources,":[124],"abused":[126],"obfuscation":[127],"techniques":[128],"bypass":[130],"detection":[131],"mechanisms.":[132],"Our":[133],"threats":[137],"targeting":[138],"significant":[140],"ecosystem":[144],"largest":[147],"most":[149],"populous":[150],"country":[151],"in":[152,170],"Latin":[153],"America":[154],"can":[155],"provide":[156],"invaluable":[157],"insights":[158],"may":[160],"be":[161],"applied":[162],"other":[164],"countries\u2019":[165],"user":[166],"populations,":[167],"especially":[168],"those":[169],"developing":[172],"world":[173],"might":[175],"face":[176],"cultural":[177],"peculiarities":[178],"similar":[179],"Brazil\u2019s.":[181],"With":[182],"evaluation,":[184],"expect":[186],"motivate":[188],"security":[190],"community/industry":[191],"seriously":[193],"consider":[194],"deeper":[196],"level":[197],"customization":[199],"during":[200],"development":[202],"next-generation":[204],"anti-malware":[205],"solutions,":[206],"as":[207,209],"well":[208],"raise":[211],"awareness":[212],"regionalized":[214],"targeted":[216],"Internet":[217]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":3},{"year":2021,"cited_by_count":3}],"updated_date":"2026-03-09T08:58:05.943551","created_date":"2025-10-10T00:00:00"}