Christopher Krügel Engin Kirda Darren Mutz William K. Robertson Giovanni Vigna Polymorphic Worm Detection Using Structural Information of Executables. 207-226 2005 conf/raid/2005 RAID http://dx.doi.org/10.1007/11663812_11 db/conf/raid/raid2005.html#KrugelKMRV05