Matches in SemOpenAlex for { <https://semopenalex.org/work/W2044894912> ?p ?o ?g. }
Showing items 1 to 63 of
63
with 100 items per page.
- W2044894912 abstract "The analysis of software similarity has many applications such as detecting code clones, software plagiarism, code theft, and polymorphic malware. Because often source code is unavailable and code obfuscation is used to avoid detection, there has been much research on developing effective models to capture runtime behavior to aid detection. Existing models focus on low-level information such as dependency or purely occurrence of function calls, and suffer from poor precision, poor scalability, or both. To overcome limitations of existing models, this paper introduces a precise and succinct behavior representation that characterizes high-level object-accessing patterns as regular expressions. We first distill a set of high-level patterns (the alphabet S of the regular language) based on two pieces of information: function call patterns to access objects and type state information of the objects. Then we abstract a runtime trace of a program P into a regular expression e over the pattern alphabet S to produce P's behavior signature. We show that software instances derived from the same code exhibit similar behavior signatures and develop effective algorithms to cluster and match behavior signatures. To evaluate the effectiveness of our behavior model, we have applied it to the similarity analysis of polymorphic malware. Our results on a large malware collection demonstrate that our model is both precise and succinct for effective and scalable matching and detection of polymorphic malware." @default.
- W2044894912 created "2016-06-24" @default.
- W2044894912 creator A5077610917 @default.
- W2044894912 creator A5086152499 @default.
- W2044894912 date "2011-12-01" @default.
- W2044894912 modified "2023-09-24" @default.
- W2044894912 title "Modeling High-Level Behavior Patterns for Precise Similarity Analysis of Software" @default.
- W2044894912 cites W1992419399 @default.
- W2044894912 cites W2038159719 @default.
- W2044894912 cites W2068211976 @default.
- W2044894912 cites W2084201645 @default.
- W2044894912 cites W2091694893 @default.
- W2044894912 cites W2104495462 @default.
- W2044894912 cites W2110335151 @default.
- W2044894912 cites W2117583561 @default.
- W2044894912 cites W2131523719 @default.
- W2044894912 cites W2144687590 @default.
- W2044894912 cites W2166647826 @default.
- W2044894912 cites W2167671111 @default.
- W2044894912 doi "https://doi.org/10.1109/icdm.2011.104" @default.
- W2044894912 hasPublicationYear "2011" @default.
- W2044894912 type Work @default.
- W2044894912 sameAs 2044894912 @default.
- W2044894912 citedByCount "7" @default.
- W2044894912 countsByYear W20448949122012 @default.
- W2044894912 countsByYear W20448949122013 @default.
- W2044894912 countsByYear W20448949122014 @default.
- W2044894912 countsByYear W20448949122015 @default.
- W2044894912 countsByYear W20448949122022 @default.
- W2044894912 crossrefType "proceedings-article" @default.
- W2044894912 hasAuthorship W2044894912A5077610917 @default.
- W2044894912 hasAuthorship W2044894912A5086152499 @default.
- W2044894912 hasConcept C103278499 @default.
- W2044894912 hasConcept C115961682 @default.
- W2044894912 hasConcept C124101348 @default.
- W2044894912 hasConcept C154945302 @default.
- W2044894912 hasConcept C199360897 @default.
- W2044894912 hasConcept C2777904410 @default.
- W2044894912 hasConcept C41008148 @default.
- W2044894912 hasConceptScore W2044894912C103278499 @default.
- W2044894912 hasConceptScore W2044894912C115961682 @default.
- W2044894912 hasConceptScore W2044894912C124101348 @default.
- W2044894912 hasConceptScore W2044894912C154945302 @default.
- W2044894912 hasConceptScore W2044894912C199360897 @default.
- W2044894912 hasConceptScore W2044894912C2777904410 @default.
- W2044894912 hasConceptScore W2044894912C41008148 @default.
- W2044894912 hasLocation W20448949121 @default.
- W2044894912 hasOpenAccess W2044894912 @default.
- W2044894912 hasPrimaryLocation W20448949121 @default.
- W2044894912 hasRelatedWork W2088791420 @default.
- W2044894912 hasRelatedWork W2347219288 @default.
- W2044894912 hasRelatedWork W2348097614 @default.
- W2044894912 hasRelatedWork W2348159088 @default.
- W2044894912 hasRelatedWork W2349125667 @default.
- W2044894912 hasRelatedWork W2354822586 @default.
- W2044894912 hasRelatedWork W2356158875 @default.
- W2044894912 hasRelatedWork W2406205719 @default.
- W2044894912 hasRelatedWork W2985134018 @default.
- W2044894912 hasRelatedWork W3213617985 @default.
- W2044894912 isParatext "false" @default.
- W2044894912 isRetracted "false" @default.
- W2044894912 magId "2044894912" @default.
- W2044894912 workType "article" @default.