Analyzing Memory Accesses in Obfuscated x86 Executables. - Michael Venable; Mohamed R. Chouchane; Md. Enamul Karim; Arun Lakhotia (DIMVA, 2005)

Normalizing Metamorphic Malware Using Term Rewriting. - Andrew Walenstein; Rachit Mathur; Mohamed R. Chouchane; Arun Lakhotia (SCAM, 2006)

Using engine signature to detect metamorphic malware. - Mohamed R. Chouchane; Arun Lakhotia (WORM, 2006)

Using Markov chains to filter machine-morphed variants of malicious programs. - Mohamed R. Chouchane; Andrew Walenstein; Arun Lakhotia (MALWARE, 2008)

Constructing malware normalizers using term rewriting. - Andrew Walenstein; Rachit Mathur; Mohamed R. Chouchane; Arun Lakhotia (J. Comput. Virol., 2008)