@InProceedings{kruegel05:polyworm, author = {C. Kruegel and E. Kirda and D. Mutz and W. Robertson and G. Vigna}, title = {{Polymorphic Worm Detection Using Structural Information of Executables}}, booktitle = {Proceedings of the International Symposium on Recent Advances in Intrusion Detection (RAID)}, year = 2005, series = {LNCS}, volume - 3858, pages = 207--226, address = {Seattle, WA}, month = {September}, publisher = {Springer-Verlag} }