{"id":"https://openalex.org/W2476470656","doi":"https://doi.org/10.4018/ijisp.2016070105","title":"Metamorphic malware detection using opcode frequency rate and decision tree","display_name":"Metamorphic malware detection using opcode frequency rate and decision tree","publication_year":2016,"publication_date":"2016-07-01","ids":{"openalex":"https://openalex.org/W2476470656","doi":"https://doi.org/10.4018/ijisp.2016070105","mag":"2476470656"},"language":"en","primary_location":{"id":"doi:10.4018/ijisp.2016070105","is_oa":false,"landing_page_url":"https://doi.org/10.4018/ijisp.2016070105","pdf_url":null,"source":{"id":"https://openalex.org/S191782446","display_name":"International Journal of Information Security and Privacy","issn_l":"1930-1650","issn":["1930-1650","1930-1669"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043743959","display_name":"Mahmood Fazlali","orcid":"https://orcid.org/0000-0002-1701-5562"},"institutions":[{"id":"https://openalex.org/I48379061","display_name":"Shahid Beheshti University","ror":"https://ror.org/0091vmj44","country_code":"IR","type":"education","lineage":["https://openalex.org/I48379061"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Mahmood Fazlali","raw_affiliation_strings":["Department of Computer Science, Cyberspace Research Institute, Shahid Beheshti University, GC, Tehran, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Cyberspace Research Institute, Shahid Beheshti University, GC, Tehran, Iran","institution_ids":["https://openalex.org/I48379061"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029317006","display_name":"Peyman Khodamoradi","orcid":null},"institutions":[{"id":"https://openalex.org/I2801954088","display_name":"Islamic Azad University of Kermanshah","ror":"https://ror.org/05sehyt57","country_code":"IR","type":"education","lineage":["https://openalex.org/I110525433","https://openalex.org/I2801954088"]},{"id":"https://openalex.org/I4210152146","display_name":"Islamic Azad University Kerman","ror":"https://ror.org/04ywz9252","country_code":"IR","type":"education","lineage":["https://openalex.org/I110525433","https://openalex.org/I4210152146"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Peyman Khodamoradi","raw_affiliation_strings":["Department of Computer Engineering, Kermanshah Branch, Islamic Azad University, Kermanshah, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Kermanshah Branch, Islamic Azad University, Kermanshah, Iran","institution_ids":["https://openalex.org/I2801954088","https://openalex.org/I4210152146"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067704527","display_name":"Farhad Mardukhi","orcid":"https://orcid.org/0000-0003-3098-3426"},"institutions":[{"id":"https://openalex.org/I1187138","display_name":"Razi University","ror":"https://ror.org/02ynb0474","country_code":"IR","type":"education","lineage":["https://openalex.org/I1187138"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Farhad Mardukhi","raw_affiliation_strings":["Department of Computer Engineering, Razi University, Kermanshah, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Razi University, Kermanshah, Iran","institution_ids":["https://openalex.org/I1187138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033175503","display_name":"Masoud Nosrati","orcid":"https://orcid.org/0000-0001-9348-2405"},"institutions":[{"id":"https://openalex.org/I2801954088","display_name":"Islamic Azad University of Kermanshah","ror":"https://ror.org/05sehyt57","country_code":"IR","type":"education","lineage":["https://openalex.org/I110525433","https://openalex.org/I2801954088"]},{"id":"https://openalex.org/I4210152146","display_name":"Islamic Azad University Kerman","ror":"https://ror.org/04ywz9252","country_code":"IR","type":"education","lineage":["https://openalex.org/I110525433","https://openalex.org/I4210152146"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Masoud Nosrati","raw_affiliation_strings":["Department of Computer Engineering, Kermanshah Branch, Islamic Azad University, Kermanshah, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Kermanshah Branch, Islamic Azad University, Kermanshah, Iran","institution_ids":["https://openalex.org/I2801954088","https://openalex.org/I4210152146"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065991691","display_name":"Mohammad Mahdi Dehshibi","orcid":"https://orcid.org/0000-0001-8112-5419"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mohammad Mahdi Dehshibi","raw_affiliation_strings":["Pattern Research Center, Tehran, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pattern Research Center, Tehran, Iran","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.7656,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.71514867,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"10","issue":"3","first_page":"67","last_page":"86"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9776999950408936,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/opcode","display_name":"Opcode","score":0.9779274463653564},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8708575963973999},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8145450353622437},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.579039454460144},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5023565292358398},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.5007688999176025},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.434808611869812},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37604767084121704},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.37357717752456665},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.179819256067276},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11885300278663635}],"concepts":[{"id":"https://openalex.org/C52173422","wikidata":"https://www.wikidata.org/wiki/Q766483","display_name":"Opcode","level":2,"score":0.9779274463653564},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8708575963973999},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8145450353622437},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.579039454460144},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5023565292358398},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.5007688999176025},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.434808611869812},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37604767084121704},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37357717752456665},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.179819256067276},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11885300278663635},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.4018/ijisp.2016070105","is_oa":false,"landing_page_url":"https://doi.org/10.4018/ijisp.2016070105","pdf_url":null,"source":{"id":"https://openalex.org/S191782446","display_name":"International Journal of Information Security and Privacy","issn_l":"1930-1650","issn":["1930-1650","1930-1669"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:igg:jisp00:v:10:y:2016:i:3:p:67-86","is_oa":false,"landing_page_url":"https://services.igi-global.com/resolvedoi/resolve.aspx?doi=10.4018/IJISP.2016070105","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.41999998688697815,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W9976069","https://openalex.org/W125917929","https://openalex.org/W1583484179","https://openalex.org/W1595564425","https://openalex.org/W1966021170","https://openalex.org/W1973211701","https://openalex.org/W1976107877","https://openalex.org/W1994001715","https://openalex.org/W2003960842","https://openalex.org/W2005662348","https://openalex.org/W2011009207","https://openalex.org/W2011039300","https://openalex.org/W2023764457","https://openalex.org/W2024170198","https://openalex.org/W2030906223","https://openalex.org/W2034042820","https://openalex.org/W2059780777","https://openalex.org/W2062508496","https://openalex.org/W2066220442","https://openalex.org/W2066833290","https://openalex.org/W2085562432","https://openalex.org/W2110978214","https://openalex.org/W2117477833","https://openalex.org/W2126753728","https://openalex.org/W2143840485","https://openalex.org/W2150795982","https://openalex.org/W2152825437","https://openalex.org/W2154529672","https://openalex.org/W2154554798","https://openalex.org/W2155535003","https://openalex.org/W2167975832","https://openalex.org/W2246811656","https://openalex.org/W2311576956","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W36091977","https://openalex.org/W2800331776","https://openalex.org/W4382794599","https://openalex.org/W2903602818","https://openalex.org/W2003791967","https://openalex.org/W4387382577","https://openalex.org/W3016048014","https://openalex.org/W4294976063","https://openalex.org/W2384735743","https://openalex.org/W2902612505"],"abstract_inverted_index":{"Malware":[0],"is":[1,10,82,104,112],"defined":[2],"as":[3,90,92],"any":[4],"type":[5],"of":[6,38,42,58,62,78,88,110,127,134,155,168,172,176,199],"malicious":[7],"code":[8],"that":[9,157,185],"the":[11,59,66,74,86,93,108,116,132,141,153,169,174,186,190],"potent":[12],"to":[13,34],"harm":[14],"a":[15,18,101,196],"computer":[16],"or":[17],"network.":[19],"Modern":[20],"malwares":[21,33,44],"are":[22,70,121,144],"accompanied":[23],"with":[24,195],"mutation":[25],"characteristics,":[26],"namely":[27],"polymorphism":[28],"and":[29,53,80,125,147,159,201],"metamorphism.":[30],"They":[31],"let":[32],"generate":[35],"enormous":[36],"number":[37,41],"variants.":[39],"Rising":[40],"metamorphic":[43],"entails":[45],"hardship":[46],"in":[47,65,95,106,152],"analyzing":[48],"them":[49],"for":[50,114,123,139],"signature":[51,94],"extraction":[52],"database":[54],"updates.":[55],"In":[56,98],"spite":[57],"broad":[60],"use":[61],"signature-based":[63],"methods":[64],"security":[67],"products,":[68],"they":[69],"not":[71,163],"able":[72],"detect":[73],"new":[75,117],"unseen":[76],"morphs":[77],"malware,":[79],"it":[81],"stemmed":[83],"from":[84,178],"changing":[85],"structure":[87],"malware":[89,128],"well":[91],"each":[96],"infection.":[97],"this":[99],"paper,":[100],"novel":[102],"method":[103,143,188],"proposed":[105,142,187],"which":[107],"proportion":[109],"opcodes":[111,177],"used":[113],"detecting":[115],"morphs.":[118],"Decision":[119],"trees":[120],"utilized":[122],"classification":[124],"detection":[126],"variants":[129],"based":[130],"on":[131],"rate":[133],"opcode":[135],"frequencies.":[136],"Three":[137],"metrics":[138],"evaluating":[140],"speed,":[145],"efficiency":[146,200],"accuracy.":[148,202],"It":[149],"was":[150],"observed":[151],"course":[154],"experiments":[156],"speed":[158],"time":[160],"complexity":[161],"will":[162],"be":[164],"challenging":[165],"factors;":[166],"because":[167],"fast":[170],"nature":[171],"extracting":[173],"frequencies":[175],"source":[179],"assembly":[180],"file.":[181],"Empirical":[182],"validation":[183],"reveals":[184],"outperforms":[189],"entire":[191],"commercial":[192],"antivirus":[193],"programs":[194],"high":[197],"level":[198]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1}],"updated_date":"2026-06-28T08:01:55.173337","created_date":"2025-10-10T00:00:00"}