{"id":"https://openalex.org/W2077747890","doi":"https://doi.org/10.1109/malware.2010.5665789","title":"Generic unpacking using entropy analysis","display_name":"Generic unpacking using entropy analysis","publication_year":2010,"publication_date":"2010-10-01","ids":{"openalex":"https://openalex.org/W2077747890","doi":"https://doi.org/10.1109/malware.2010.5665789","mag":"2077747890"},"language":"en","primary_location":{"id":"doi:10.1109/malware.2010.5665789","is_oa":false,"landing_page_url":"https://doi.org/10.1109/malware.2010.5665789","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2010 5th International Conference on Malicious and Unwanted Software","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005450543","display_name":"Guhyeon Jeong","orcid":null},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Guhyeon Jeong","raw_affiliation_strings":["Division of Computer & Communication Engineering, Korea University, Seoul, South Korea","Div. of Computer & Communication Engineering, Korea University, Seoul, Republic of Korea#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Computer & Communication Engineering, Korea University, Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]},{"raw_affiliation_string":"Div. of Computer & Communication Engineering, Korea University, Seoul, Republic of Korea#TAB#","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029121563","display_name":"Euijin Choo","orcid":"https://orcid.org/0000-0002-0055-050X"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Euijin Choo","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, USA","[Department of Computer Science North Carolina State University, USA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, USA","institution_ids":["https://openalex.org/I137902535"]},{"raw_affiliation_string":"[Department of Computer Science North Carolina State University, USA]","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072816835","display_name":"Joosuk Lee","orcid":"https://orcid.org/0000-0002-0221-0365"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Joosuk Lee","raw_affiliation_strings":["Division of Computer & Communication Engineering, Korea University, Seoul, South Korea","Div. of Computer & Communication Engineering, Korea University, Seoul, Republic of Korea#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Computer & Communication Engineering, Korea University, Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]},{"raw_affiliation_string":"Div. of Computer & Communication Engineering, Korea University, Seoul, Republic of Korea#TAB#","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006567957","display_name":"Munkhbayar Bat-Erdene","orcid":"https://orcid.org/0000-0001-6366-0805"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Munkhbayar Bat-Erdene","raw_affiliation_strings":["Division of Computer & Communication Engineering, Korea University, Seoul, South Korea","Div. of Computer & Communication Engineering, Korea University, Seoul, Republic of Korea#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Computer & Communication Engineering, Korea University, Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]},{"raw_affiliation_string":"Div. of Computer & Communication Engineering, Korea University, Seoul, Republic of Korea#TAB#","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101630726","display_name":"Heejo Lee","orcid":"https://orcid.org/0000-0002-5831-0787"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Heejo Lee","raw_affiliation_strings":["Division of Computer & Communication Engineering, Korea University, Seoul, South Korea","Div. of Computer & Communication Engineering, Korea University, Seoul, Republic of Korea#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Computer & Communication Engineering, Korea University, Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]},{"raw_affiliation_string":"Div. of Computer & Communication Engineering, Korea University, Seoul, Republic of Korea#TAB#","institution_ids":["https://openalex.org/I197347611"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":37,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"98","last_page":"105"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/unpacking","display_name":"Unpacking","score":0.9878016710281372},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.7837215662002563},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.7460005879402161},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6717334985733032},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.5742336511611938},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.48040154576301575},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.33896100521087646},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.21289926767349243},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.15915930271148682},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.08124548196792603}],"concepts":[{"id":"https://openalex.org/C2777256151","wikidata":"https://www.wikidata.org/wiki/Q7897273","display_name":"Unpacking","level":2,"score":0.9878016710281372},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7837215662002563},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.7460005879402161},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6717334985733032},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.5742336511611938},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.48040154576301575},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33896100521087646},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.21289926767349243},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15915930271148682},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.08124548196792603},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/malware.2010.5665789","is_oa":false,"landing_page_url":"https://doi.org/10.1109/malware.2010.5665789","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2010 5th International Conference on Malicious and Unwanted Software","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1508225132","https://openalex.org/W1515040589","https://openalex.org/W1522250664","https://openalex.org/W1549352151","https://openalex.org/W2010910232","https://openalex.org/W2096921767","https://openalex.org/W2105334567","https://openalex.org/W2114312434","https://openalex.org/W2119251836","https://openalex.org/W2126734536","https://openalex.org/W2150423842","https://openalex.org/W2159702664","https://openalex.org/W6631155369","https://openalex.org/W6677495220","https://openalex.org/W6678810912","https://openalex.org/W6922273519"],"related_works":["https://openalex.org/W2980032325","https://openalex.org/W2042188247","https://openalex.org/W2017714611","https://openalex.org/W4224995949","https://openalex.org/W2555789008","https://openalex.org/W2902937489","https://openalex.org/W4245435048","https://openalex.org/W2806976167","https://openalex.org/W2166462894","https://openalex.org/W2963598554"],"abstract_inverted_index":{"Malwares":[0],"attempt":[1],"to":[2,30,69],"evade":[3],"AV":[4],"scanners":[5],"using":[6,37,42],"various":[7],"obfuscation":[8,14],"techniques.":[9],"Packing":[10],"is":[11],"a":[12,26],"popular":[13],"technique":[15],"used":[16],"by":[17],"80%":[18],"of":[19,54,56],"malwares.":[20,71],"In":[21],"this":[22],"paper,":[23],"we":[24,61],"propose":[25],"generic":[27],"unpacking":[28],"mechanism":[29,49,65],"find":[31],"the":[32,47,52,57,64],"original":[33],"entry":[34],"point":[35],"(OEP)":[36],"entropy":[38],"analysis.":[39],"The":[40],"experiment":[41],"110":[43],"packed":[44,58,70],"executables":[45],"demonstrates":[46],"proposed":[48],"can":[50],"locate":[51],"OEPs":[53],"72%":[55],"executables.":[59],"Furthermore,":[60],"show":[62],"how":[63],"could":[66],"be":[67],"applied":[68]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":3},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}