<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-02023724</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-20T23:26:39+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Performance Improvements in Behavior Based Malware Detection Solutions</title>
            <author role="aut">
              <persName>
                <forename type="first">Gheorghe</forename>
                <surname>Hăjmăşan</surname>
              </persName>
              <email type="md5">7314356ca9acb52709e700579e169692</email>
              <email type="domain">cs.utcluj.ro</email>
              <idno type="idhal" notation="numeric">1023824</idno>
              <idno type="halauthorid" notation="string">1270754-1023824</idno>
              <affiliation ref="#struct-189574"/>
              <affiliation ref="#struct-522375"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Alexandra</forename>
                <surname>Mondoc</surname>
              </persName>
              <email type="md5">25aa9384df4b3853d1d959137f0721b2</email>
              <email type="domain">bitdefender.com</email>
              <idno type="idhal" notation="numeric">1023825</idno>
              <idno type="halauthorid" notation="string">1270755-1023825</idno>
              <affiliation ref="#struct-189614"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Radu</forename>
                <surname>Portase</surname>
              </persName>
              <email type="md5">2b47c10584f5e3c5cd0bee5cbe29e711</email>
              <email type="domain">bitdefender.com</email>
              <idno type="idhal" notation="numeric">1023826</idno>
              <idno type="halauthorid" notation="string">1270756-1023826</idno>
              <affiliation ref="#struct-189574"/>
              <affiliation ref="#struct-522375"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Octavian</forename>
                <surname>Creţ</surname>
              </persName>
              <email type="md5">d4610bba8deeacacc368bb0312372e04</email>
              <email type="domain">cs.utcluj.ro</email>
              <idno type="idhal" notation="numeric">1023827</idno>
              <idno type="halauthorid" notation="string">225820-1023827</idno>
              <affiliation ref="#struct-189574"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2019-02-21 15:45:53</date>
              <date type="whenModified">2026-04-30 10:40:04</date>
              <date type="whenReleased">2019-02-21 15:54:07</date>
              <date type="whenProduced">2018-09-18</date>
              <date type="whenEndEmbargoed">2021-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-02023724v1/document">
                <date notBefore="2021-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-02023724v1/file/472722_1_En_26_Chapter.pdf" id="file-2044667-2051540">
                <date notBefore="2021-01-01"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-02023724</idno>
            <idno type="halUri">https://inria.hal.science/hal-02023724</idno>
            <idno type="halBibtex">hjman:hal-02023724</idno>
            <idno type="halRefHtml">&lt;i&gt;33th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC)&lt;/i&gt;, Sep 2018, Poznan, Poland. pp.370-384, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-319-99828-2_26"&gt;&amp;#x27E8;10.1007/978-3-319-99828-2_26&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">33th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Sep 2018, Poznan, Poland. pp.370-384, &amp;#x27E8;10.1007/978-3-319-99828-2_26&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-2044667-2051540"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
            <idno type="stamp" n="IFIP-AICT-529" corresp="IFIP-AICT">ICT Systems Security and Privacy Protection</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 4: Software Security / Attacks</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Performance Improvements in Behavior Based Malware Detection Solutions</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Gheorghe</forename>
                    <surname>Hăjmăşan</surname>
                  </persName>
                  <email type="md5">7314356ca9acb52709e700579e169692</email>
                  <email type="domain">cs.utcluj.ro</email>
                  <idno type="idhal" notation="numeric">1023824</idno>
                  <idno type="halauthorid" notation="string">1270754-1023824</idno>
                  <affiliation ref="#struct-189574"/>
                  <affiliation ref="#struct-522375"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Alexandra</forename>
                    <surname>Mondoc</surname>
                  </persName>
                  <email type="md5">25aa9384df4b3853d1d959137f0721b2</email>
                  <email type="domain">bitdefender.com</email>
                  <idno type="idhal" notation="numeric">1023825</idno>
                  <idno type="halauthorid" notation="string">1270755-1023825</idno>
                  <affiliation ref="#struct-189614"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Radu</forename>
                    <surname>Portase</surname>
                  </persName>
                  <email type="md5">2b47c10584f5e3c5cd0bee5cbe29e711</email>
                  <email type="domain">bitdefender.com</email>
                  <idno type="idhal" notation="numeric">1023826</idno>
                  <idno type="halauthorid" notation="string">1270756-1023826</idno>
                  <affiliation ref="#struct-189574"/>
                  <affiliation ref="#struct-522375"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Octavian</forename>
                    <surname>Creţ</surname>
                  </persName>
                  <email type="md5">d4610bba8deeacacc368bb0312372e04</email>
                  <email type="domain">cs.utcluj.ro</email>
                  <idno type="idhal" notation="numeric">1023827</idno>
                  <idno type="halauthorid" notation="string">225820-1023827</idno>
                  <affiliation ref="#struct-189574"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>33th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC)</title>
                  <date type="start">2018-09-18</date>
                  <date type="end">2018-09-20</date>
                  <settlement>Poznan</settlement>
                  <country key="PL">Poland</country>
                </meeting>
                <editor>Lech Jan Janczewski</editor>
                <editor>Mirosław Kutyłowski</editor>
                <imprint>
                  <publisher>Springer International Publishing</publisher>
                  <biblScope unit="serie">ICT Systems Security and Privacy Protection</biblScope>
                  <biblScope unit="volume">AICT-529</biblScope>
                  <biblScope unit="pp">370-384</biblScope>
                  <date type="datePub">2018</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-319-99828-2_26</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>The constant evolution of malware, both in number and complexity, represents a severe threat to individual users and organizations. This is increasing the need for more advanced security solutions, such as dynamic behavior-based malware detection, that monitor and analyze actions performed on a system in real time. However, this approach comes with an intuitive downfall, the performance overhead. For this issue we propose two solutions that can be used separately or combined. The first approach takes advantage of the advances in hardware and uses asynchronous processing, thus reducing the impact on the monitored applications. The second approach relies on a dynamic reputation system, based on which different monitoring levels for applications can be defined. The differential monitoring of processes according to their dynamic reputation leads to a diminished general performance impact and also a lower false positive rate.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-189574" status="VALID">
          <idno type="ROR">https://ror.org/03r8nwp71</idno>
          <orgName>Technical University of Cluj-Napoca</orgName>
          <desc>
            <address>
              <addrLine>Str. Constantin Daicoviciu nr 15, 400020 Cluj - Napoca</addrLine>
              <country key="RO"/>
            </address>
            <ref type="url">http://www.utcluj.ro/english/index.php</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-522375" status="VALID">
          <orgName>Bitdefender [Bucharest]</orgName>
          <desc>
            <address>
              <addrLine>Bucharest</addrLine>
              <country key="RO"/>
            </address>
            <ref type="url">https://www.bitdefender.ro/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-189614" status="VALID">
          <orgName>Universitatea Babeş-Bolyai = Babes-Bolyai University</orgName>
          <orgName type="acronym">UBB</orgName>
          <date type="start">2016-12-14</date>
          <desc>
            <address>
              <addrLine>Str. Mihail Kogălniceanu, nr. 1400084, Cluj-Napoca</addrLine>
              <country key="RO"/>
            </address>
            <ref type="url">http://ubbcluj.academia.edu/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>