{"id":"https://openalex.org/W4321496253","doi":"https://doi.org/10.1145/3579990.3580012","title":"A Game-Based Framework to Compare Program Classifiers and Evaders","display_name":"A Game-Based Framework to Compare Program Classifiers and Evaders","publication_year":2023,"publication_date":"2023-02-17","ids":{"openalex":"https://openalex.org/W4321496253","doi":"https://doi.org/10.1145/3579990.3580012"},"language":"en","primary_location":{"id":"doi:10.1145/3579990.3580012","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3579990.3580012","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st ACM/IEEE International Symposium on Code Generation and Optimization","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012565073","display_name":"Tha\u00eds Dam\u00e1sio","orcid":null},"institutions":[{"id":"https://openalex.org/I110200422","display_name":"Universidade Federal de Minas Gerais","ror":"https://ror.org/0176yjw32","country_code":"BR","type":"education","lineage":["https://openalex.org/I110200422"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Tha\u00eds Dam\u00e1sio","raw_affiliation_strings":["Federal University of Minas Gerais, Minas Gerais, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Federal University of Minas Gerais, Minas Gerais, Brazil","institution_ids":["https://openalex.org/I110200422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078552438","display_name":"Michael Canesche","orcid":"https://orcid.org/0000-0001-7882-0787"},"institutions":[{"id":"https://openalex.org/I110200422","display_name":"Universidade Federal de Minas Gerais","ror":"https://ror.org/0176yjw32","country_code":"BR","type":"education","lineage":["https://openalex.org/I110200422"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Michael Canesche","raw_affiliation_strings":["Federal University of Minas Gerais, Minas Gerais, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Federal University of Minas Gerais, Minas Gerais, Brazil","institution_ids":["https://openalex.org/I110200422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019580198","display_name":"Vin\u00edcius Pacheco","orcid":null},"institutions":[{"id":"https://openalex.org/I110200422","display_name":"Universidade Federal de Minas Gerais","ror":"https://ror.org/0176yjw32","country_code":"BR","type":"education","lineage":["https://openalex.org/I110200422"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Vin\u00edcius Pacheco","raw_affiliation_strings":["Federal University of Minas Gerais, Minas Gerais, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Federal University of Minas Gerais, Minas Gerais, Brazil","institution_ids":["https://openalex.org/I110200422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060510652","display_name":"Marcus Botacin","orcid":"https://orcid.org/0000-0001-6870-1178"},"institutions":[{"id":"https://openalex.org/I91045830","display_name":"Texas A&M University","ror":"https://ror.org/01f5ytq51","country_code":"US","type":"education","lineage":["https://openalex.org/I91045830"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Marcus Botacin","raw_affiliation_strings":["Texas A&M University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Texas A&M University, USA","institution_ids":["https://openalex.org/I91045830"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074854183","display_name":"Anderson Faustino da Silva","orcid":"https://orcid.org/0000-0002-8588-8197"},"institutions":[{"id":"https://openalex.org/I123443094","display_name":"Universidade Estadual de Maring\u00e1","ror":"https://ror.org/04bqqa360","country_code":"BR","type":"education","lineage":["https://openalex.org/I123443094"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Anderson Faustino da Silva","raw_affiliation_strings":["State University of Maring\u00e1, Maring\u00e1, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State University of Maring\u00e1, Maring\u00e1, Brazil","institution_ids":["https://openalex.org/I123443094"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5112234604","display_name":"Fernando Magno Quint\u00e3o Pereira","orcid":null},"institutions":[{"id":"https://openalex.org/I110200422","display_name":"Universidade Federal de Minas Gerais","ror":"https://ror.org/0176yjw32","country_code":"BR","type":"education","lineage":["https://openalex.org/I110200422"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Fernando M. Quint\u00e3o Pereira","raw_affiliation_strings":["Federal University of Minas Gerais, Minas Gerais, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Federal University of Minas Gerais, Minas Gerais, Brazil","institution_ids":["https://openalex.org/I110200422"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.0324,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.87062028,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"108","last_page":"121"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/opcode","display_name":"Opcode","score":0.8087981343269348},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8054581880569458},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6400746703147888},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5636711716651917},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.5541627407073975},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5485445261001587},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.5232419371604919},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4721679091453552},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4683033227920532},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.43982064723968506},{"id":"https://openalex.org/keywords/program-analysis","display_name":"Program analysis","score":0.43016722798347473},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.38065844774246216},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37365639209747314},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3580746352672577},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.156405508518219},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.10364338755607605}],"concepts":[{"id":"https://openalex.org/C52173422","wikidata":"https://www.wikidata.org/wiki/Q766483","display_name":"Opcode","level":2,"score":0.8087981343269348},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8054581880569458},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6400746703147888},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5636711716651917},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5541627407073975},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5485445261001587},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.5232419371604919},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4721679091453552},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4683033227920532},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.43982064723968506},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.43016722798347473},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.38065844774246216},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37365639209747314},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3580746352672577},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.156405508518219},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.10364338755607605},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3579990.3580012","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3579990.3580012","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st ACM/IEEE International Symposium on Code Generation and Optimization","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Life in Land","id":"https://metadata.un.org/sdg/15","score":0.6499999761581421}],"awards":[{"id":"https://openalex.org/G4270446769","display_name":null,"funder_award_id":"00002","funder_id":"https://openalex.org/F4320321091","funder_display_name":"Coordena\u00e7\u00e3o de Aperfei\u00e7oamento de Pessoal de N\u00edvel Superior"},{"id":"https://openalex.org/G8747812308","display_name":null,"funder_award_id":"00001","funder_id":"https://openalex.org/F4320322025","funder_display_name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico"}],"funders":[{"id":"https://openalex.org/F4320321091","display_name":"Coordena\u00e7\u00e3o de Aperfei\u00e7oamento de Pessoal de N\u00edvel Superior","ror":"https://ror.org/00x0ma614"},{"id":"https://openalex.org/F4320322025","display_name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico","ror":"https://ror.org/03swz6y49"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W140259279","https://openalex.org/W2009614414","https://openalex.org/W2024170198","https://openalex.org/W2049208027","https://openalex.org/W2050703362","https://openalex.org/W2076290291","https://openalex.org/W2138756793","https://openalex.org/W2282866165","https://openalex.org/W2314464932","https://openalex.org/W2627063456","https://openalex.org/W2749008552","https://openalex.org/W2752559890","https://openalex.org/W2768013588","https://openalex.org/W2788919350","https://openalex.org/W2792247670","https://openalex.org/W2808279976","https://openalex.org/W2888320512","https://openalex.org/W2888698761","https://openalex.org/W2926178846","https://openalex.org/W2935199837","https://openalex.org/W2963625196","https://openalex.org/W2963935794","https://openalex.org/W2964150020","https://openalex.org/W3007205676","https://openalex.org/W3045898733","https://openalex.org/W3085939759","https://openalex.org/W3086481683","https://openalex.org/W3105926539","https://openalex.org/W3108623714","https://openalex.org/W3116350821","https://openalex.org/W3166956180","https://openalex.org/W3202406966","https://openalex.org/W4247464060","https://openalex.org/W4249297534","https://openalex.org/W4281862314","https://openalex.org/W4297584465","https://openalex.org/W4306145873","https://openalex.org/W4394664141","https://openalex.org/W6846168407","https://openalex.org/W6950498763"],"related_works":["https://openalex.org/W3211159634","https://openalex.org/W4388157251","https://openalex.org/W3126761238","https://openalex.org/W4214835142","https://openalex.org/W2008514616","https://openalex.org/W3115123383","https://openalex.org/W3088492727","https://openalex.org/W2982588003","https://openalex.org/W2470029541","https://openalex.org/W2947729775"],"abstract_inverted_index":{"Algorithm":[0],"classification":[1,51,108,140],"consists":[2],"in":[3,19],"determining":[4],"which":[5],"algorithm":[6],"a":[7,11,63,92],"program":[8,100,125,139,148],"implements,":[9],"given":[10,83],"finite":[12],"set":[13],"of":[14,65,79,98,122,130,171,186],"candidates.":[15],"Classifiers":[16],"are":[17,35,141,150],"used":[18],"applications":[20],"such":[21],"malware":[22],"identification":[23],"and":[24,52,71,105,177],"plagiarism":[25],"detection.":[26],"There":[27,34],"exist":[28],"many":[29,37],"ways":[30,38],"to":[31,39,42,76,84,158,181],"implement":[32,40],"classifiers.":[33,45],"also":[36],"evaders":[41],"deceive":[43],"the":[44,49,77,96,168,183],"This":[46,87],"paper":[47,60],"analyzes":[48],"state-of-the-art":[50],"evasion":[53,169],"techniques.":[54],"To":[55],"organize":[56],"this":[57,59,112],"analysis,":[58],"brings":[61],"forward":[62],"system":[64],"four":[66],"games":[67],"that":[68,81],"matches":[69],"classifiers":[70],"evaders.":[72],"Games":[73],"vary":[74],"according":[75],"amount":[78],"information":[80],"is":[82],"each":[85],"player.":[86],"setup":[88],"lets":[89],"us":[90],"analyze":[91],"space":[93],"formed":[94],"by":[95],"combination":[97],"nine":[99],"encodings;":[101],"seven":[102],"obfuscation":[103,156],"passes;":[104],"six":[106],"stochastic":[107],"models.":[109],"Observations":[110],"from":[111],"study":[113],"include:":[114],"(i)":[115],"we":[116],"could":[117],"not":[118],"measure":[119],"substantial":[120],"advantages":[121],"recent":[123],"vector-based":[124],"representations":[126],"over":[127],"simple":[128],"histograms":[129],"opcodes;":[131],"(ii)":[132],"deep":[133],"neural":[134],"networks":[135],"recently":[136],"proposed":[137],"for":[138],"no":[142],"better":[143],"than":[144],"random":[145],"forests;":[146],"(iii)":[147],"optimizations":[149,164],"almost":[151],"as":[152,154],"effective":[153],"classic":[155],"techniques":[157],"evade":[159],"classifiers;":[160],"(iv)":[161],"off-the-shelf":[162],"code":[163,187],"can":[165],"completely":[166],"remove":[167],"power":[170,185],"na\u00efve":[172],"obfuscators;":[173],"(v)":[174],"control-flow":[175],"flattening":[176],"bogus-control":[178],"flow":[179],"tend":[180],"resist":[182],"normalizing":[184],"optimizations.":[188]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}