Polymorphic worm detection using structural information of executables, (2005)

by C Kruegel, E Kirda, D Mutz, W Robertson, G Vigna
Venue:Proc. of the 8th Symposium on Recent Advances in Intrusion Detection (RAID),