<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01534762</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-20T03:15:50+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Code Type Revealing Using Experiments Framework</title>
            <author role="aut">
              <persName>
                <forename type="first">Rami</forename>
                <surname>Sharon</surname>
              </persName>
              <email type="md5">cc142aabc9b63ebce63bf2d007781e5f</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="numeric">1010023</idno>
              <idno type="halauthorid" notation="string">1178662-1010023</idno>
              <affiliation ref="#struct-452421"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Ehud</forename>
                <surname>Gudes</surname>
              </persName>
              <email type="md5">f27a16bb4ff0f7fafbc750a07d2bbe42</email>
              <email type="domain">cs.bgu.ac.il</email>
              <idno type="idhal" notation="numeric">978093</idno>
              <idno type="halauthorid" notation="string">858149-978093</idno>
              <affiliation ref="#struct-300759"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-06-08 11:06:27</date>
              <date type="whenModified">2024-01-14 11:56:04</date>
              <date type="whenReleased">2017-06-08 11:09:27</date>
              <date type="whenProduced">2012-07-11</date>
              <date type="whenEndEmbargoed">2015-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01534762v1/document">
                <date notBefore="2015-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01534762v1/file/978-3-642-31540-4_15_Chapter.pdf" id="file-1534762-1595491">
                <date notBefore="2015-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-31540-4_15.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01534762</idno>
            <idno type="halUri">https://inria.hal.science/hal-01534762</idno>
            <idno type="halBibtex">sharon:hal-01534762</idno>
            <idno type="halRefHtml">&lt;i&gt;26th Conference on Data and Applications Security and Privacy (DBSec)&lt;/i&gt;, Jul 2012, Paris, France. pp.193-206, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-31540-4_15"&gt;&amp;#x27E8;10.1007/978-3-642-31540-4_15&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">26th Conference on Data and Applications Security and Privacy (DBSec), Jul 2012, Paris, France. pp.193-206, &amp;#x27E8;10.1007/978-3-642-31540-4_15&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1534762-1595491"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-WG" corresp="IFIP">Working Groups</idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-WG11-3" corresp="IFIP-WG">WG 11.3: Data and Application Security and Privacy</idno>
            <idno type="stamp" n="IFIP-DBSEC" corresp="IFIP">DBSec: Data and Applications Security</idno>
            <idno type="stamp" n="IFIP-LNCS-7371" corresp="IFIP-LNCS">Data and Applications Security and Privacy XXVI</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 6: Data Management</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Code Type Revealing Using Experiments Framework</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Rami</forename>
                    <surname>Sharon</surname>
                  </persName>
                  <email type="md5">cc142aabc9b63ebce63bf2d007781e5f</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="numeric">1010023</idno>
                  <idno type="halauthorid" notation="string">1178662-1010023</idno>
                  <affiliation ref="#struct-452421"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Ehud</forename>
                    <surname>Gudes</surname>
                  </persName>
                  <email type="md5">f27a16bb4ff0f7fafbc750a07d2bbe42</email>
                  <email type="domain">cs.bgu.ac.il</email>
                  <idno type="idhal" notation="numeric">978093</idno>
                  <idno type="halauthorid" notation="string">858149-978093</idno>
                  <affiliation ref="#struct-300759"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer Science</title>
                <meeting>
                  <title>26th Conference on Data and Applications Security and Privacy (DBSec)</title>
                  <date type="start">2012-07-11</date>
                  <date type="end">2012-07-13</date>
                  <settlement>Paris</settlement>
                  <country key="FR">France</country>
                </meeting>
                <editor>Nora Cuppens-Boulahia</editor>
                <editor>Frédéric Cuppens</editor>
                <editor>Joaquin Garcia-Alfaro</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Data and Applications Security and Privacy XXVI</biblScope>
                  <biblScope unit="volume">LNCS-7371</biblScope>
                  <biblScope unit="pp">193-206</biblScope>
                  <date type="datePub">2012</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-31540-4_15</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Byte N-Gram statistical analysis</term>
                <term xml:lang="en">Code type</term>
                <term xml:lang="en">Content type revealing framework</term>
                <term xml:lang="en">File Type</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Identifying the type of a code, whether in a file or byte stream, is a challenge that many software companies are facing. Many applications, security and others, base their behavior on the type of code they receive as an input.Today’s traditional identification methods rely on file extensions, magic numbers, propriety headers and trailers or specific type identifying rules. All these are vulnerable to content tampering and discovering it requires investing long and tedious working hours of professionals. This study is aimed to find a method of identifying the best settings to automatically create type signatures that will effectively overcome the content manipulation problem.In this paper we lay out a framework for creating type signatures based on byte N-Grams. The framework allows setting various parameters such as NGram sizes and windows, selecting statistical tests and defining rules for score calculations. The framework serves as a test lab that allows finding the right parameters to satisfy a predefined threshold of type identification accuracy. We demonstrate the framework using basic settings that achieved an F-Measure success rate of 0.996 on 1400 test files.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
              <org type="consortium">WG 11.3</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-452421" status="VALID">
          <orgName>Open University of Israël</orgName>
          <desc>
            <address>
              <addrLine>Ra’anana 43100 Israel</addrLine>
              <country key="IL"/>
            </address>
            <ref type="url">http://www-e.openu.ac.il/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-300759" status="VALID">
          <idno type="IdRef">027957225</idno>
          <idno type="ISNI">0000000121828112</idno>
          <idno type="ROR">https://ror.org/05tkyf982</idno>
          <idno type="Wikidata">Q737332</idno>
          <orgName>Ben-Gurion University of the Negev</orgName>
          <orgName type="acronym">BGU</orgName>
          <desc>
            <address>
              <addrLine>P.O.B. 653 Beer-Sheva</addrLine>
              <country key="IL"/>
            </address>
            <ref type="url">http://in.bgu.ac.il/en/Pages/default.aspx</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>