Analyzing Memory Accesses in Obfuscated x86 Executables. - Michael Venable; Mohamed R. Chouchane; Md. Enamul Karim; Arun Lakhotia (DIMVA, 2005)

A Method for Detecting Obfuscated Calls in Malicious Binaries. - Arun Lakhotia; Eric Uday Kumar; Michael Venable (IEEE Trans. Software Eng., 2005)