I
AE
S In
t
er
na
t
io
na
l J
o
urna
l o
f
Art
if
icia
l In
t
ellig
ence
(
I
J
-
AI
)
Vo
l.
1
5
,
No
.
4
,
A
u
g
u
s
t 2
0
2
6
,
p
p
.
3
8
6
5
~
3
8
7
7
I
SS
N:
2
2
5
2
-
8
9
3
8
,
DOI
: 1
0
.
1
1
5
9
1
/ijai.v
15
.i
4
.
p
p
3
8
6
5
-
3
8
7
7
3865
J
o
ur
na
l ho
m
ep
a
g
e
:
h
ttp
:
//ij
a
i
.
ia
esco
r
e.
co
m
Prioritizing
ra
nso
mwa
re indicato
rs
of comp
ro
mis
e u
sing
a
lg
o
rithmic scorin
g
f
o
r enhance
d t
hrea
t
de
tectio
n
K
rish
na
P
ra
s
a
d D.
Su
bra
m
a
ny
a
1,
2
,
P
ra
s
a
nn
a
K
um
a
r
H
.
Ra
m
a
k
rish
na
2,
3
1
D
e
p
a
r
t
me
n
t
o
f
C
o
m
p
u
t
e
r
a
n
d
C
o
mm
u
n
i
c
a
t
i
o
n
En
g
i
n
e
e
r
i
n
g
,
N
M
A
M
I
n
st
i
t
u
t
e
o
f
Te
c
h
n
o
l
o
g
y
,
N
i
t
t
e
(
D
e
e
me
d
t
o
b
e
U
n
i
v
e
r
s
i
t
y
)
,
K
a
r
n
a
t
a
k
a
,
I
n
d
i
a
2
D
e
p
a
r
t
me
n
t
o
f
C
o
m
p
u
t
e
r
S
c
i
e
n
c
e
a
n
d
E
n
g
i
n
e
e
r
i
n
g
,
V
i
s
v
e
s
v
a
r
a
y
a
T
e
c
h
n
o
l
o
g
i
c
a
l
U
n
i
v
e
r
s
i
t
y
,
B
e
l
a
g
a
v
i
,
I
n
d
i
a
3
D
e
p
a
r
t
me
n
t
o
f
C
o
m
p
u
t
e
r
S
c
i
e
n
c
e
a
n
d
E
n
g
i
n
e
e
r
i
n
g
,
P
ES I
n
st
i
t
u
t
e
o
f
T
e
c
h
n
o
l
o
g
y
a
n
d
M
a
n
a
g
e
me
n
t
,
S
h
i
v
a
m
o
g
g
a
,
I
n
d
i
a
Art
icle
I
nfo
AB
S
T
RAC
T
A
r
ticle
his
to
r
y:
R
ec
eiv
ed
J
u
n
1
3
,
2
0
2
5
R
ev
is
ed
J
u
n
7
,
2
0
2
6
Acc
ep
ted
J
u
l 9
,
2
0
2
6
Ra
n
so
m
wa
re
is
a
v
e
ry
se
rio
u
s
c
y
b
e
rse
c
u
rit
y
t
h
re
a
t.
Its
a
tt
a
c
k
m
e
th
o
d
s
a
re
c
o
n
ti
n
u
a
ll
y
e
v
o
lv
i
n
g
,
wh
ich
m
e
a
n
s
th
a
t
it
is
n
o
t
v
e
ry
e
a
sy
t
o
d
e
tec
t
it
q
u
ick
ly
.
A
b
ig
c
h
a
ll
e
n
g
e
fa
c
e
d
in
th
e
ra
n
so
m
wa
re
d
e
fe
n
se
is
h
o
w
to
p
rio
ri
ti
z
e
in
d
ica
to
rs
o
f
c
o
m
p
r
o
m
ise
(Io
C)
e
fficie
n
tl
y
.
T
h
is
p
a
p
e
r
in
tro
d
u
c
e
s
a
h
y
b
rid
Io
C
ra
n
k
i
n
g
sc
h
e
m
e
b
a
se
d
o
n
sta
ti
c
a
n
d
d
y
n
a
m
ic
a
n
a
ly
sis
o
f
th
e
b
e
h
a
v
i
o
r
o
f
c
o
m
m
o
n
ly
c
ircu
lati
n
g
ra
n
s
o
m
wa
re
v
a
rian
ts.
Eac
h
Io
C
is
g
iv
e
n
a
we
ig
h
ted
sc
o
re
a
c
c
o
rd
i
n
g
to
it
s
sig
n
ifi
c
a
n
c
e
fo
r
in
v
e
stig
a
ti
o
n
s
b
a
se
d
o
n
act
u
a
l
p
a
tt
e
rn
s
o
f
o
c
c
u
rre
n
c
e
a
n
d
c
o
n
tex
t
u
a
l
b
e
h
a
v
io
r
.
E
x
p
e
rime
n
t
a
l
re
su
lt
s
c
lea
rly
se
p
a
ra
te
h
ig
h
-
c
o
n
fid
e
n
c
e
in
d
ica
to
rs
fro
m
lo
w
-
c
o
n
fid
e
n
c
e
o
n
e
s
.
De
letin
g
sh
a
d
o
w
c
o
p
y
a
n
d
c
o
n
n
e
c
ti
n
g
t
o
To
r
2
we
b
re
c
e
iv
e
th
e
h
i
g
h
e
st
ra
n
k
sc
o
re
s
o
f
a
b
o
u
t
9
9
.
9
9
,
wh
i
le
o
ld
e
r
b
e
h
a
v
i
o
rs
li
k
e
l
o
c
k
i
n
g
sc
re
e
n
sh
o
w
lo
we
r
re
lev
a
n
c
e
,
a
ro
u
n
d
7
3
.
1
1
.
Th
e
p
ro
p
o
se
d
a
l
g
o
rit
h
m
h
a
s
a
li
n
e
a
r
ti
m
e
c
o
m
p
lex
it
y
o
f
(
·
)
fo
r
sc
o
re
c
a
l
c
u
latio
n
a
n
d
a
b
o
u
n
d
e
d
s
p
a
c
e
c
o
m
p
lex
it
y
o
f
(
·
)
,
a
ll
o
win
g
it
t
o
sc
a
le
fo
r
larg
e
Io
C
se
ts.
Th
e
fi
n
d
in
g
s
sh
o
w
th
a
t
t
h
is
ra
n
k
e
d
Io
C
fra
m
e
wo
rk
e
n
h
a
n
c
e
s
e
a
rly
ra
n
so
m
wa
re
d
e
tec
ti
o
n
a
n
d
h
e
l
p
s p
r
io
rit
ize
re
sp
o
n
se
s b
a
s
e
d
o
n
e
v
i
d
e
n
c
e
in
c
u
rre
n
t
se
c
u
rit
y
sy
ste
m
s.
K
ey
w
o
r
d
s
:
Dy
n
am
ic
an
aly
s
is
Hy
b
r
id
an
al
y
s
is
I
n
d
icato
r
s
o
f
co
m
p
r
o
m
is
e
R
a
n
k
i
n
g
i
n
d
i
c
a
t
o
r
s
o
f
c
o
m
p
r
o
m
i
s
e
R
an
s
o
m
war
e
Static a
n
aly
s
is
T
h
is i
s
a
n
o
p
e
n
a
c
c
e
ss
a
rticle
u
n
d
e
r th
e
CC B
Y
-
SA
li
c
e
n
se
.
C
o
r
r
e
s
p
o
nd
ing
A
uth
o
r
:
Kr
is
h
n
a
Pra
s
ad
D.
Su
b
r
am
a
n
y
a
Dep
ar
tm
en
t o
f
C
o
m
p
u
ter
a
n
d
C
o
m
m
u
n
icatio
n
E
n
g
in
ee
r
i
n
g
,
NM
AM
I
n
s
titu
te
o
f
T
ec
h
n
o
l
o
g
y
Nitte
(
Dee
m
ed
to
b
e
Un
iv
e
r
s
ity
)
Kar
n
atak
a
,
I
n
d
ia
E
m
ail:
k
r
is
h
n
a2
7
0
5
7
2
@
g
m
ail.
co
m
1.
I
NT
RO
D
UCT
I
O
N
T
h
e
r
an
s
o
m
war
e
attac
k
s
th
r
e
aten
in
d
iv
id
u
als,
o
r
g
an
izatio
n
s
,
an
d
cr
itical
in
f
r
astru
ctu
r
e
g
lo
b
ally
.
R
an
s
o
m
war
e
is
a
ty
p
e
o
f
m
alwa
r
e
th
at
en
cr
y
p
ts
im
p
o
r
tan
t d
ata
o
r
en
tire
s
y
s
tem
an
d
d
em
an
d
s
a
r
an
s
o
m
f
o
r
its
r
elea
s
e
[
1
]
.
T
h
ese
attac
k
s
h
av
e
ch
an
g
ed
d
r
am
atica
lly
in
th
e
last
f
ew
y
ea
r
s
m
o
v
in
g
f
r
o
m
a
s
im
p
le
lo
ck
er
s
o
f
twar
e
to
co
m
p
lex
d
o
u
b
le
-
e
x
to
r
tio
n
s
ch
em
es wh
er
e
d
ata
is
en
cr
y
p
ted
b
ef
o
r
e
b
ein
g
th
r
ea
ten
ed
to
b
e
p
u
b
licly
r
elea
s
ed
to
m
ax
im
ize
f
in
an
ci
al
g
ain
[
2
]
,
[
3
]
.
R
ec
en
t
s
tatis
tics
f
o
r
2
0
2
4
s
h
o
w
th
at
5
9
%
o
f
o
r
g
an
izatio
n
s
ex
p
er
ien
ce
d
r
an
s
o
m
war
e
attac
k
s
,
a
s
lig
h
t
d
ec
r
ea
s
e
s
in
ce
p
r
ev
io
u
s
two
y
ea
r
s
(
6
6
%).
A
b
o
u
t
7
0
%
o
f
th
ese
attac
k
s
in
v
o
lv
ed
d
ata
en
cr
y
p
t
io
n
,
p
o
in
tin
g
o
u
t
th
e
s
u
cc
ess
o
f
r
an
s
o
m
wa
r
e
tactics
[
4
]
.
T
h
e
av
er
ag
e
r
an
s
o
m
d
em
an
d
i
n
2
0
2
4
was
$
2
.
7
3
m
illi
o
n
,
an
in
cr
ea
s
e
o
f
alm
o
s
t
$
1
m
illi
o
n
f
r
o
m
2
0
2
3
.
W
h
at'
s
m
o
r
e,
th
e
av
er
a
g
e
co
s
t
o
f
r
ec
o
v
er
in
g
f
r
o
m
a
r
a
n
s
o
m
war
e
attac
k
in
2
0
2
3
wa
s
$
1
.
8
5
m
illi
o
n
[
4
]
,
[
5
]
,
p
o
in
tin
g
o
u
t
th
e
s
ev
er
e
f
in
an
cial
b
u
r
d
en
o
n
th
e
af
f
ec
te
d
o
r
g
a
n
izatio
n
s
.
Dete
ctin
g
an
d
p
r
e
v
en
tin
g
r
an
s
o
m
war
e
attac
k
s
q
u
ick
ly
is
cr
u
cial
to
lim
it
f
in
a
n
cial
lo
s
s
es,
o
p
er
atio
n
al
in
ter
r
u
p
tio
n
s
,
an
d
d
am
ag
e
to
it
s
r
ep
u
tatio
n
.
I
n
d
icato
r
s
o
f
co
m
p
r
o
m
is
e
s
(
I
o
C
s
)
ar
e
v
er
y
im
p
o
r
tan
t f
o
r
d
etec
tin
g
r
an
s
o
m
war
e
ac
tiv
ities
in
s
id
e
an
o
r
g
an
izatio
n
’
s
n
etwo
r
k
[
6
]
,
[
7
]
.
I
o
C
s
ar
e
ar
tifa
cts
o
r
p
iece
s
o
f
f
o
r
en
s
ic
Evaluation Warning : The document was created with Spire.PDF for Python.
I
SS
N
:
2
2
5
2
-
8
9
3
8
I
n
t J Ar
tif
I
n
tell
,
Vo
l.
1
5
,
No
.
4
,
Au
g
u
s
t 2
0
2
6
:
3
8
6
5
-
3
8
7
7
3866
ev
id
en
ce
s
u
ch
as
u
n
u
s
u
al
n
e
two
r
k
tr
af
f
ic
p
atter
n
s
,
f
ile
h
ash
es,
r
eg
is
tr
y
ch
an
g
es
,
an
d
s
u
s
p
icio
u
s
d
o
m
ain
co
n
n
ec
tio
n
s
,
th
at
in
d
icate
a
p
o
ten
tial
s
ec
u
r
ity
b
r
ea
ch
.
H
o
wev
er
,
th
e
v
ast
am
o
u
n
t
an
d
r
an
g
e
o
f
I
o
C
s
m
ak
e
it
d
if
f
icu
lt
f
o
r
cy
b
er
s
ec
u
r
ity
p
r
o
f
ess
io
n
als
to
f
o
cu
s
o
n
th
e
m
o
s
t
r
elev
an
t
in
d
icato
r
s
f
o
r
ea
r
ly
d
etec
tio
n
an
d
p
r
ev
en
tio
n
[
8
]
.
I
n
th
is
way
,
it
is
n
ec
ess
ar
y
to
p
r
i
o
r
itize
t
h
e
I
o
C
s
ac
co
r
d
in
g
t
o
th
eir
r
eliab
ilit
y
an
d
th
eir
b
eh
av
io
r
im
p
o
r
tan
ce
to
en
h
a
n
ce
th
e
c
y
b
er
d
e
f
en
s
e
s
tr
ateg
ie
s
[
9
]
.
Fo
r
en
s
ic
i
n
v
esti
g
atio
n
s
ar
e
m
o
r
e
r
elev
an
t
t
o
s
p
ec
if
ic
b
eh
a
v
io
r
s
o
f
r
an
s
o
m
war
e,
s
u
ch
as
d
eletio
n
o
f
s
h
a
d
o
w
co
p
ies
o
r
co
m
m
u
n
icatio
n
with
c
o
m
m
an
d
a
n
d
co
n
tr
o
l
(
C
&
C
)
with
an
o
n
y
m
ized
n
etwo
r
k
s
.
Oth
er
ar
tif
ac
ts
,
lik
e
d
y
n
am
ic
-
lin
k
li
b
r
a
r
y
(
DL
L
)
im
p
o
r
ts
,
o
r
cr
y
p
t
o
g
r
ap
h
ic
f
u
n
ctio
n
s
u
s
ag
e,
th
at
m
ay
b
e
p
r
esen
t
in
leg
itima
te
ap
p
licatio
n
s
,
m
ay
c
au
s
e
co
n
f
u
s
io
n
in
d
etec
tio
n
[
1
0
]
.
T
o
a
d
d
r
ess
th
is
p
r
o
b
lem
,
I
o
C
s
n
ee
d
to
b
e
p
r
io
r
itized
ac
c
o
r
d
in
g
to
t
h
eir
r
elev
an
ce
a
n
d
r
eliab
ilit
y
o
f
a
s
ig
n
al
o
f
a
r
a
n
s
o
m
war
e
attac
k
[
1
1
]
.
I
o
C
r
a
n
k
in
g
is
ef
f
ec
tiv
e
b
y
allo
win
g
s
ec
u
r
ity
team
s
to
allo
ca
te
r
eso
u
r
ce
s
wis
ely
,
im
p
r
o
v
e
ac
cu
r
ac
y
o
f
d
etec
tio
n
,
a
n
d
b
e
q
u
ick
to
r
esp
o
n
d
to
th
r
ea
ts
.
W
h
ile
th
er
e
ar
e
m
an
y
av
ailab
le,
s
o
m
e
ar
e
m
o
r
e
im
p
o
r
tan
t
th
an
o
t
h
er
s
wh
en
it
co
m
es
to
r
an
s
o
m
war
e
d
etec
tio
n
.
A
well
-
o
r
g
an
ized
r
an
k
in
g
s
y
s
tem
ca
n
h
elp
to
d
is
tin
g
u
is
h
b
en
ig
n
an
d
m
alicio
u
s
ac
tiv
ities
.
T
h
is
s
tu
d
y
p
r
o
p
o
s
es
a
s
y
s
tem
atic
ap
p
r
o
ac
h
f
o
r
r
atin
g
I
o
C
s
r
elate
d
to
r
a
n
s
o
m
war
e
b
y
u
tili
zin
g
a
h
y
b
r
id
a
n
aly
s
is
u
s
in
g
b
o
th
s
t
atic
an
d
d
y
n
a
m
ic
an
aly
s
es
o
f
k
n
o
wn
r
a
n
s
o
m
war
e
v
a
r
ian
ts
.
I
t
b
eg
in
s
with
a
liter
atu
r
e
r
ev
iew
th
at
ex
p
lain
s
th
e
ty
p
ical
r
an
s
o
m
war
e
attac
k
life
cy
cle,
an
d
ex
am
i
n
es
b
o
th
s
tatic
an
d
d
y
n
am
ic
an
aly
s
is
tech
n
iq
u
es f
o
r
r
ec
o
g
n
izin
g
an
d
ev
alu
atin
g
r
a
n
s
o
m
w
ar
e
th
r
ea
ts
,
an
d
g
iv
es c
o
n
tex
t f
o
r
r
ec
o
g
n
izin
g
an
d
ev
alu
atin
g
r
an
s
o
m
war
e
th
r
ea
t
s
.
T
h
en
,
th
e
m
eth
o
d
o
lo
g
y
o
u
t
lin
es
th
e
ap
p
r
o
ac
h
to
th
e
a
n
al
y
s
is
o
f
well
-
k
n
o
wn
r
an
s
o
m
war
e
v
a
r
ian
ts
b
y
u
s
in
g
a
s
p
ec
if
ic
lis
t
o
f
I
o
C
s
an
d
t
h
e
i
n
f
o
r
m
atio
n
ab
o
u
t
th
e
m
o
s
t
o
u
t
s
tan
d
in
g
ac
tiv
ities
o
f
th
em
.
A
r
an
k
i
n
g
alg
o
r
ith
m
f
o
r
I
o
C
is
th
en
p
r
o
p
o
s
ed
,
wh
e
r
e
th
e
in
d
icato
r
s
a
r
e
p
r
io
r
itize
d
ac
co
r
d
in
g
to
h
o
w
im
p
o
r
tan
t
th
ey
ar
e
f
o
r
th
e
d
ia
g
n
o
s
tics
.
L
astl
y
,
in
th
e
r
esu
lts
s
ec
tio
n
,
th
e
alg
o
r
ith
m
p
er
f
o
r
m
an
ce
is
an
aly
ze
d
,
ass
es
s
in
g
its
ef
f
icien
cy
in
ter
m
s
o
f
tim
e
co
m
p
le
x
ity
an
d
s
p
ac
e
co
m
p
le
x
ity
an
d
d
is
cu
s
s
i
n
g
its
u
s
ab
ilit
y
an
d
ap
p
licab
ilit
y
in
r
ea
l
-
tim
e
t
h
r
ea
t d
etec
tio
n
en
v
ir
o
n
m
e
n
ts
.
2.
L
I
T
E
R
AT
U
RE
R
E
VI
E
W
C
y
b
er
attac
k
s
ar
e
g
en
er
ally
ca
r
r
ied
o
u
t
in
a
well
-
d
ef
in
ed
m
a
n
n
er
.
W
h
en
it
co
m
es
to
r
an
s
o
m
war
e
th
is
cy
cle
g
en
er
ally
in
clu
d
es
th
e
f
o
llo
win
g
:
m
alwa
r
e
d
is
tr
ib
u
tio
n
,
m
alwa
r
e
in
f
ec
tio
n
,
C
&
C
c
o
m
m
u
n
icatio
n
,
f
ile
en
cr
y
p
tio
n
,
d
em
an
d
o
f
r
an
s
o
m
,
an
d
p
o
ten
tial
d
ec
r
y
p
tio
n
.
T
h
e
r
an
s
o
m
war
e
attac
k
cy
c
le
is
a
s
y
s
tem
atic
p
r
o
ce
s
s
cy
b
e
r
cr
im
in
als
u
s
e
to
b
r
ea
k
in
to
a
s
y
s
tem
,
en
cr
y
p
t
ess
en
tial
d
ata,
r
e
q
u
ir
em
en
t
f
o
r
ex
t
o
r
tin
g
m
o
n
ey
f
r
o
m
th
e
v
ictim
s
.
A
ty
p
ical
att
ac
k
cy
cle
is
s
h
o
wn
in
Fig
u
r
e
1
.
I
t
b
eg
in
s
with
m
alwa
r
e
b
ein
g
d
eliv
er
ed
p
r
im
ar
ily
v
ia
p
h
is
h
in
g
e
-
m
ails
[
1
2
]
to
en
tice
u
s
er
s
to
o
p
en
m
alwa
r
e
-
lad
en
attac
h
m
e
n
ts
o
r
click
o
n
m
alicio
u
s
lin
k
s
.
Af
t
er
th
e
m
alwa
r
e
is
ex
ec
u
te
d
,
it
is
lin
k
ed
to
a
C
&
C
s
er
v
er
to
r
etr
iev
e
p
u
b
lic
en
cr
y
p
tio
n
k
ey
[
1
3
]
.
I
t
th
en
en
cr
y
p
t
s
f
iles
o
r
lo
ck
s
d
o
wn
th
e
s
y
s
te
m
,
an
d
co
m
m
o
n
ly
m
ak
es
it
d
if
f
icu
lt
to
r
ec
o
v
er
,
i
n
clu
d
in
g
s
h
ad
o
w
co
p
ies
[
3
]
,
[
1
4
]
.
T
y
p
ically
,
a
r
an
s
o
m
n
o
te
ap
p
ea
r
s
,
o
u
tlin
i
n
g
th
e
p
ay
m
en
t
co
n
d
itio
n
s
,
u
s
u
ally
in
th
e
f
o
r
m
o
f
c
r
y
p
to
c
u
r
r
e
n
c
y
f
o
r
th
e
d
ec
r
y
p
tio
n
k
e
y
[
1
5
]
.
B
u
t
it
i
s
n
o
t
a
s
u
r
e
th
in
g
th
at
r
a
n
s
o
m
will p
r
o
v
id
e
r
ec
o
v
er
y
o
f
d
ata,
m
a
k
in
g
it a
v
er
y
s
o
p
h
is
ticated
an
d
v
e
r
y
d
a
m
ag
in
g
attac
k
.
Fig
u
r
e
1
.
R
an
s
o
m
war
e
attac
k
life
cy
cle
2
.
1
.
Ra
ns
o
m
wa
re
a
na
ly
s
is
R
an
s
o
m
war
e
attac
k
s
ar
e
in
cr
ea
s
in
g
in
co
m
p
lex
ity
an
d
ar
e
a
g
r
o
win
g
th
r
ea
t
to
in
d
iv
i
d
u
als
an
d
b
u
s
in
ess
es
alik
e.
T
h
er
e
ar
e
s
e
v
er
al
ap
p
r
o
ac
h
es
th
at
h
av
e
b
e
en
d
ev
elo
p
ed
f
o
r
an
aly
zin
g
t
h
ese
r
is
k
s
,
s
u
ch
as
s
tatic,
d
y
n
am
ic
,
an
d
h
y
b
r
id
ap
p
r
o
ac
h
es.
I
n
t
h
is
p
ap
er
,
th
eir
ap
p
licab
ilit
y
an
d
v
alu
e
in
id
en
tific
atio
n
a
n
d
p
r
ev
en
tio
n
o
f
r
a
n
s
o
m
war
e
att
ac
k
s
wer
e
d
is
cu
s
s
ed
.
Static
a
n
aly
s
is
is
th
e
r
ev
iew
o
f
a
p
r
o
g
r
am
'
s
co
d
e
with
o
u
t
ex
ec
u
tin
g
th
e
p
r
o
g
r
am
.
I
t'
s
a
r
ap
id
an
d
ef
f
ec
tiv
e
way
t
o
id
en
tify
k
n
o
wn
m
alwa
r
e:
c
o
d
e
s
ig
n
atu
r
es
an
d
p
atter
n
s
.
I
t
is
f
ast,
ca
n
s
ca
n
f
iles
f
o
r
k
n
o
wn
s
ig
n
atu
r
es
in
a
q
u
ick
tim
e,
an
d
ca
n
b
e
u
s
ed
to
d
etec
t
k
n
o
wn
m
alwa
r
e
[
1
6
]
.
I
t'
s
n
o
t
as
ef
f
ec
tiv
e
with
p
o
ly
m
o
r
p
h
ic
o
r
m
et
am
o
r
p
h
ic
m
alwa
r
e
th
at
ca
n
c
h
an
g
e
th
ei
r
co
d
e
to
ev
ad
e
d
etec
tio
n
,
h
o
wev
e
r
,
a
n
d
is
n
o
t
v
er
y
e
f
f
ec
tiv
e
a
g
ain
s
t
n
ew
o
r
u
n
k
n
o
wn
v
ar
ian
ts
o
f
m
alwa
r
e
[
1
6
]
–
[
1
8
]
.
Evaluation Warning : The document was created with Spire.PDF for Python.
I
n
t J Ar
tif
I
n
tell
I
SS
N:
2252
-
8
9
3
8
P
r
io
r
itiz
in
g
r
a
n
s
o
mw
a
r
e
in
d
ica
to
r
s
o
f c
o
mp
r
o
mis
e
u
s
in
g
a
lg
o
r
ith
mic
…
(
K
r
i
s
h
n
a
P
r
a
s
a
d
D
.
S
u
b
r
a
ma
n
ya
)
3867
Dy
n
am
ic
an
aly
s
is
is
th
e
p
r
o
ce
s
s
o
f
ex
ec
u
tin
g
th
e
p
r
o
g
r
a
m
o
n
a
c
o
n
tr
o
lled
en
v
ir
o
n
m
en
t
to
o
b
s
er
v
e
th
e
p
r
o
g
r
a
m
b
eh
a
v
io
r
an
d
its
in
ter
ac
tio
n
with
th
e
en
v
ir
o
n
m
en
t.
T
h
is
is
a
p
o
wer
f
u
l
m
eth
o
d
,
s
in
ce
a
ze
r
o
d
ay
an
d
a
p
o
ly
m
o
r
p
h
ic
m
alwa
r
e
ca
n
b
e
ea
s
ily
d
etec
ted
,
as
well
as
g
i
v
in
g
in
s
ig
h
ts
ab
o
u
t
th
e
b
eh
a
v
io
r
al
p
atter
n
s
[
1
8
]
.
I
t
is
v
er
y
c
o
m
p
u
te
in
ten
s
iv
e
a
n
d
tim
e
c
o
n
s
u
m
in
g
,
h
o
wev
er
,
it
ca
n
b
e
f
o
o
led
b
y
m
alwa
r
e
th
at
ca
n
tell
if
it
is
r
u
n
n
in
g
in
a
v
ir
tu
al
en
v
ir
o
n
m
e
n
t a
n
d
a
d
ju
s
t its
b
eh
av
io
r
to
ev
ad
e
d
etec
tio
n
[
1
7
]
,
[
1
9
]
.
Hy
b
r
id
an
al
y
s
is
co
m
b
in
es
s
tatic
an
d
d
y
n
am
ic
an
aly
s
is
tech
n
iq
u
es
to
ca
p
italize
o
n
th
e
b
en
ef
its
o
f
ea
ch
,
wh
ile
o
v
er
co
m
i
n
g
its
lim
itatio
n
s
.
I
t
p
r
o
v
id
es
co
m
p
r
eh
en
s
iv
e
d
etec
tio
n
b
y
a
n
aly
zin
g
c
o
d
es
an
d
o
b
s
er
v
in
g
b
eh
a
v
io
r
s
,
an
d
ea
r
ly
d
etec
tio
n
b
y
an
al
y
zin
g
b
o
th
s
tatic
an
d
r
u
n
tim
e
f
ea
tu
r
e
s
[
1
9
]
–
[
2
1
]
.
I
t
ca
n
d
is
co
v
er
r
an
s
o
m
war
e
ea
r
ly
o
n
b
y
ass
ess
in
g
b
o
th
th
ese
attr
ib
u
tes
[
2
2
]
.
Alth
o
u
g
h
h
y
b
r
id
an
aly
s
is
h
as
ad
v
an
tag
es,
its
im
p
lem
e
n
tatio
n
is
co
m
p
lex
,
an
d
it
r
e
q
u
ir
es
a
s
ig
n
if
ican
t
n
u
m
b
er
o
f
r
eso
u
r
ce
s
[
2
3
]
wh
ich
ca
n
b
e
m
itig
ated
b
y
o
p
tim
ized
a
p
p
r
o
ac
h
es.
I
n
m
o
s
t
ca
s
es,
h
y
b
r
id
an
aly
s
is
wil
l
b
e
m
o
r
e
ac
cu
r
ate
in
d
etec
tin
g
th
an
eith
er
s
tatic
o
r
d
y
n
am
ic
an
a
ly
s
is
will
b
e
alo
n
e.
I
n
p
ar
ti
cu
lar
,
s
tatic
an
aly
s
is
ac
h
iev
e
d
b
etwe
en
4
0
-
5
5
%
ac
cu
r
ac
y
,
wh
e
r
ea
s
in
s
o
m
e
s
tu
d
ies,
1
0
0
%
ac
cu
r
ac
y
was
ac
h
iev
ed
wh
en
u
s
in
g
d
y
n
am
ic
a
n
aly
s
is
.
T
h
e
h
y
b
r
id
m
eth
o
d
h
as
y
ield
ed
p
o
s
itiv
e
r
esu
lts
,
an
d
d
etec
tio
n
r
ates
o
f
m
o
r
e
th
a
n
9
5
%
ar
e
co
m
m
o
n
ly
r
e
p
o
r
ted
[
2
4
]
.
Hy
b
r
id
s
y
s
tem
s
ca
n
b
e
im
p
r
o
v
ed
b
y
u
s
in
g
s
tatic
an
aly
s
is
to
elim
in
ate
in
n
o
cu
o
u
s
p
r
o
g
r
am
s
f
r
o
m
f
u
r
th
e
r
an
aly
s
is
,
an
d
u
s
in
g
d
y
n
am
ic
a
n
aly
s
is
o
n
ly
f
o
r
s
u
s
p
icio
u
s
p
r
o
g
r
am
s
,
th
er
e
b
y
r
ed
u
cin
g
th
e
co
m
p
u
tatio
n
al
c
o
s
t.
Hy
b
r
id
a
n
aly
s
is
h
as
p
r
o
v
en
t
o
b
e
e
f
f
ec
tiv
e
in
th
e
d
etec
tio
n
o
f
u
n
iq
u
e
b
eh
av
io
r
s
an
d
in
th
e
im
p
r
o
v
em
en
t
o
f
d
etec
tio
n
r
ates f
o
r
r
an
s
o
m
war
e
f
am
ilies
s
u
ch
as
p
ety
a,
cr
y
p
t
in
f
in
ite,
an
d
l
o
ck
y
[
2
5
]
,
[
2
6
]
.
Hy
b
r
id
a
n
aly
s
is
is
th
e
m
o
s
t
ef
f
ec
tiv
e
tech
n
iq
u
e
to
d
etec
t
r
an
s
o
m
war
e,
c
o
m
b
in
in
g
th
e
s
tr
en
g
th
an
d
d
ep
th
o
f
d
y
n
am
ic
an
al
y
s
is
,
an
d
th
e
s
p
ee
d
an
d
ef
f
icien
c
y
o
f
s
tatic
an
aly
s
is
.
I
t
s
th
o
r
o
u
g
h
d
etec
tio
n
ca
p
ab
ilit
ies
m
ak
e
it
an
ess
en
tial
to
o
l
in
t
h
e
f
ig
h
t
ag
ain
s
t
r
an
s
o
m
war
e,
n
o
twith
s
tan
d
in
g
th
e
p
r
ac
tica
l
h
u
r
d
les
it
p
o
s
es.
Hy
b
r
id
a
n
aly
s
is
ca
n
b
e
a
c
o
m
p
r
eh
en
s
iv
e
an
d
ef
f
ec
tiv
e
s
o
lu
tio
n
to
th
e
e
v
o
lv
in
g
th
r
ea
t
o
f
r
a
n
s
o
m
war
e
b
y
co
m
b
in
in
g
th
e
s
tr
en
g
th
s
o
f
b
o
th
s
tatic
an
d
d
y
n
am
ic
a
p
p
r
o
ac
h
es,
r
esu
ltin
g
in
m
o
r
e
a
cc
u
r
ate
an
d
tim
ely
d
etec
tio
n
an
d
lim
itin
g
p
o
te
n
tial d
am
ag
e.
T
h
is
wo
r
k
f
o
cu
s
es
o
n
h
y
b
r
id
an
aly
s
is
,
i.e
.
,
d
y
n
am
ic
an
aly
s
is
co
m
b
in
ed
with
s
tatic
an
aly
s
is
to
ex
tr
ac
t
I
o
C
s
.
R
an
s
o
m
war
e
s
am
p
les
co
n
tain
a
r
an
g
e
o
f
in
d
icato
r
s
an
d
p
atter
n
s
th
at
ca
n
b
e
s
tr
u
ctu
r
ally
an
d
b
eh
av
io
r
ally
im
p
o
r
ta
n
t
f
o
r
ac
cu
r
ate
id
en
tific
atio
n
,
i
n
ad
d
it
io
n
to
th
e
co
m
m
o
n
in
d
icato
r
s
s
u
ch
as
in
ter
n
et
p
r
o
to
co
l
(
IP
)
an
d
f
ile
h
ash
es.
I
n
th
is
r
esear
ch
,
an
ap
p
r
o
ac
h
to
r
atin
g
an
d
p
r
i
o
r
itizin
g
th
ese
I
o
C
s
b
ased
o
n
th
eir
r
elev
an
ce
a
n
d
f
r
e
q
u
en
c
y
o
f
o
c
cu
r
r
en
ce
in
th
e
c
o
n
tex
t
o
f
th
ei
r
th
r
ea
t
is
p
r
o
p
o
s
ed
.
B
y
s
y
s
te
m
atica
lly
an
aly
zin
g
th
ese
in
d
icato
r
s
,
it
is
ex
p
ec
ted
to
en
h
an
ce
th
e
ef
f
ec
tiv
e
n
ess
o
f
r
an
s
o
m
war
e
d
etec
tio
n
an
d
aid
in
b
etter
th
r
ea
t
r
esp
o
n
s
e
an
d
m
itig
atio
n
s
tr
ateg
ies.
2
.
2
.
I
nd
ica
t
o
rs o
f
c
o
m
pro
m
i
s
e
f
o
r
ra
ns
o
m
wa
re
T
h
e
al
g
o
r
i
th
m
m
a
in
tai
n
s
a
lis
t
o
f
I
o
C
n
am
es
to
p
r
o
c
ess
t
h
e
e
x
t
r
a
cte
d
d
ata
e
f
f
ic
ie
n
tl
y
.
T
a
b
le
1
lis
ts
t
h
e
I
o
C
s
c
o
n
s
i
d
e
r
e
d
i
n
t
h
is
in
v
es
ti
g
at
io
n
.
T
h
e
s
ele
cte
d
I
o
C
s
ar
e
i
m
p
o
r
ta
n
t
f
o
r
r
e
v
ea
l
in
g
k
ey
r
a
n
s
o
m
wa
r
e
s
tr
at
eg
ies
an
d
b
e
h
a
v
i
o
r
s
.
E
a
ch
I
o
C
is
i
m
p
o
r
t
a
n
t
f
o
r
a
g
o
o
d
d
ete
cti
o
n
a
n
d
a
n
a
ly
s
is
b
ec
au
s
e
it
p
r
o
v
id
es
u
n
i
q
u
e
i
n
s
i
g
h
ts
i
n
t
o
th
e
r
a
n
s
o
m
w
a
r
e'
s
p
r
o
c
ess
o
f
in
f
e
cti
n
g
,
s
u
r
v
i
v
i
n
g
,
h
i
d
i
n
g
,
c
o
m
m
u
n
i
ca
t
in
g
,
a
n
d
e
n
c
r
y
p
ti
n
g
d
a
ta
in
a
s
y
s
te
m
.
T
ab
le
1
.
L
is
t o
f
r
an
s
o
m
war
e
I
o
C
s
an
d
its
ty
p
e
co
n
s
id
er
ed
f
o
r
th
e
s
tu
d
y
S
l
.
N
o
.
I
o
C
D
e
scri
p
t
i
o
n
Ty
p
e
1
D
e
l
e
t
e
s
h
a
d
o
w
c
o
p
y
U
sed
t
o
p
r
e
v
e
n
t
v
i
c
t
i
ms
f
r
o
m
r
e
c
o
v
e
r
i
n
g
f
i
l
e
s
w
i
t
h
o
u
t
p
a
y
i
n
g
t
h
e
r
a
n
so
m
.
Th
e
r
a
n
so
mw
a
r
e
e
x
e
c
u
t
e
s
c
o
mm
a
n
d
s
l
i
k
e
v
ss
a
d
mi
n
d
e
l
e
t
e
sh
a
d
o
w
s
[
2
7
]
.
D
y
n
a
mi
c
2
I
2
P
a
n
o
n
y
mi
t
y
n
e
t
w
o
r
k
I
n
v
i
si
b
l
e
i
n
t
e
r
n
e
t
p
r
o
j
e
c
t
(
I
2
P
)
n
e
t
w
o
r
k
b
y
r
a
n
s
o
mw
a
r
e
i
n
d
i
c
a
t
e
s
a
t
t
e
m
p
t
s
t
o
h
i
d
e
c
o
mm
u
n
i
c
a
t
i
o
n
w
i
t
h
C
&
C
ser
v
e
r
s
[
2
8
]
.
S
t
a
t
i
c
3
C
o
n
n
e
c
t
t
o
T
o
r
2
w
e
b
U
s
e
o
f
a
n
o
n
y
m
o
u
s
n
e
t
w
o
r
k
s
l
i
k
e
T
o
r
o
r
I
2
P
t
o
c
o
m
m
u
n
i
c
a
t
e
w
i
t
h
C
&
C
s
e
r
v
e
r
s
t
o
a
v
o
i
d
d
e
t
e
c
t
i
o
n
.
P
r
e
v
e
n
t
s
t
r
a
c
k
i
n
g
a
n
d
i
d
e
n
t
i
f
i
c
a
t
i
o
n
o
f
o
p
e
r
a
t
o
r
s
b
y
l
a
w
e
n
f
o
r
c
e
m
e
n
t
o
r
r
e
s
e
a
r
c
h
e
r
s
[
2
9
]
.
D
y
n
a
mi
c
4
R
e
q
u
e
s
t
t
o
h
i
g
h
e
n
t
r
o
p
y
d
o
m
a
i
n
n
a
m
e
G
e
n
e
r
a
t
e
a
n
d
c
o
n
n
e
c
t
t
o
d
o
m
a
i
n
n
a
mes
w
i
t
h
h
i
g
h
e
n
t
r
o
p
y
,
o
f
t
e
n
a
ss
o
c
i
a
t
e
d
w
i
t
h
d
o
m
a
i
n
g
e
n
e
r
a
t
i
o
n
a
l
g
o
r
i
t
h
ms
(
D
G
A
s)
,
m
a
k
i
n
g
t
h
e
m
d
i
f
f
i
c
u
l
t
t
o
t
r
a
c
k
[
3
0
]
.
D
y
n
a
mi
c
5
F
i
l
e
e
n
c
r
y
p
t
i
o
n
R
a
n
s
o
m
w
a
r
e
u
s
e
s
s
t
r
o
n
g
e
n
c
r
y
p
t
i
o
n
a
l
g
o
r
i
t
h
m
s
(
e
.
g
.
,
a
d
v
a
n
c
e
d
e
n
c
r
y
p
t
i
o
n
s
t
a
n
d
a
r
d
(
A
E
S
)
,
R
i
v
e
s
t
–
S
h
a
m
i
r
–
A
d
l
e
m
a
n
(
R
S
A
)
)
t
o
e
n
c
r
y
p
t
f
i
l
e
s
a
n
d
s
t
o
r
e
t
h
e
d
e
c
r
y
p
t
i
o
n
k
e
y
w
i
t
h
a
t
t
a
c
k
e
r
[
3
1
]
–
[
3
3
]
.
D
y
n
a
mi
c
6
En
c
r
y
p
t
s f
i
l
e
n
a
me
R
e
n
a
m
e
s
f
i
l
e
s u
s
i
n
g
s
p
e
c
i
f
i
c
p
a
t
t
e
r
n
s o
r
a
p
p
e
n
d
s
u
n
i
q
u
e
e
x
t
e
n
s
i
o
n
s.
A
d
d
s v
i
su
a
l
i
n
d
i
c
a
t
i
o
n
o
f
e
n
c
r
y
p
t
i
o
n
t
o
i
n
t
i
mi
d
a
t
e
v
i
c
t
i
ms
a
n
d
mak
e
f
i
l
e
r
e
c
o
v
e
r
y
mo
r
e
d
i
f
f
i
c
u
l
t
[
2
9
]
.
D
y
n
a
mi
c
7
Lo
c
k
s s
c
r
e
e
n
Lo
c
k
s
t
h
e
v
i
c
t
i
m's
scre
e
n
w
i
t
h
a
r
a
n
s
o
m
n
o
t
e
,
b
l
o
c
k
i
n
g
a
c
c
e
ss
t
o
t
h
e
s
y
s
t
e
m
u
n
t
i
l
p
a
y
me
n
t
i
s
mad
e
.
T
h
e
r
a
n
s
o
mw
a
r
e
ma
y
d
i
sa
b
l
e
Ta
sk
M
a
n
a
g
e
r
,
o
v
e
r
r
i
d
e
sy
st
e
m
p
r
o
c
e
sses,
o
r
d
i
s
p
l
a
y
a
f
u
l
l
scre
e
n
r
a
n
so
m me
s
sa
g
e
[
3
3
]
.
D
y
n
a
mi
c
8
D
e
l
e
t
e
s
o
r
i
g
i
n
a
l
f
i
l
e
s
f
r
o
m d
i
s
k
A
f
t
e
r
e
n
c
r
y
p
t
i
n
g
f
i
l
e
s
,
r
a
n
s
o
mw
a
r
e
o
f
t
e
n
d
e
l
e
t
e
s
t
h
e
o
r
i
g
i
n
a
l
v
e
r
si
o
n
s
t
o
p
r
e
v
e
n
t
r
e
c
o
v
e
r
y
.
En
s
u
r
e
s
t
h
e
v
i
c
t
i
m
c
a
n
n
o
t
r
e
t
r
i
e
v
e
u
n
e
n
c
r
y
p
t
e
d
d
a
t
a
u
s
i
n
g
st
a
n
d
a
r
d
r
e
c
o
v
e
r
y
t
o
o
l
s
[
3
4
]
.
D
y
n
a
mi
c
9
I
mp
o
r
t
a
n
d
l
i
n
k
s
t
o
c
r
y
p
t
o
l
i
b
r
a
r
i
e
s
Th
e
p
r
e
se
n
c
e
o
f
i
m
p
o
r
t
s
r
e
l
a
t
e
d
t
o
c
r
y
p
t
o
g
r
a
p
h
i
c
l
i
b
r
a
r
i
e
s,
su
c
h
a
s
O
p
e
n
S
S
L
o
r
W
i
n
d
o
w
s
C
r
y
p
t
o
A
P
I
,
i
s a
st
r
o
n
g
i
n
d
i
c
a
t
o
r
o
f
r
a
n
so
mw
a
r
e
a
t
t
e
m
p
t
i
n
g
t
o
e
n
c
r
y
p
t
f
i
l
e
s
[
3
5
]
.
S
t
a
t
i
c
10
P
a
c
k
e
d
/
o
b
f
u
sc
a
t
e
d
U
sed
t
o
e
v
a
d
e
st
a
t
i
c
a
n
a
l
y
si
s.
T
h
e
e
n
t
r
o
p
y
v
a
l
u
e
i
s
a
c
r
u
c
i
a
l
me
t
r
i
c
u
se
d
t
o
d
e
t
e
r
m
i
n
e
t
h
e
p
r
e
se
n
c
e
o
f
p
a
c
k
e
d
o
r
o
b
f
u
s
c
a
t
e
d
c
o
d
e
[
3
6
]
,
[
3
7
]
.
S
t
a
t
i
c
11
C
r
e
a
t
e
R
W
X
m
e
m
o
r
y
M
a
l
w
a
r
e
a
l
l
o
c
a
t
e
s
me
mo
r
y
r
e
g
i
o
n
s
w
i
t
h
r
e
a
d
-
w
r
i
t
e
-
e
x
e
c
u
t
e
(
R
W
X
)
p
e
r
mi
ssi
o
n
s
t
o
e
x
e
c
u
t
e
mal
i
c
i
o
u
s
c
o
d
e
i
n
m
e
mo
r
y
[
3
8
]
,
[
3
9
]
.
D
y
n
a
mi
c
Evaluation Warning : The document was created with Spire.PDF for Python.
I
SS
N
:
2
2
5
2
-
8
9
3
8
I
n
t J Ar
tif
I
n
tell
,
Vo
l.
1
5
,
No
.
4
,
Au
g
u
s
t 2
0
2
6
:
3
8
6
5
-
3
8
7
7
3868
3.
M
E
T
H
O
D
T
h
e
m
ajo
r
co
n
tr
ib
u
tio
n
o
f
th
is
p
ap
er
is
to
p
r
esen
t
a
u
n
iq
u
e
m
eth
o
d
to
p
r
i
o
r
itize
an
d
r
an
k
I
o
C
s
ac
co
r
d
in
g
to
th
eir
i
m
p
o
r
ta
n
c
e
an
d
o
cc
u
r
r
e
n
ce
in
r
a
n
s
o
m
war
e
d
etec
tio
n
.
T
h
is
m
eth
o
d
in
clu
d
es
f
ea
tu
r
e
ex
tr
ac
tio
n
u
s
in
g
b
o
th
s
tatic
an
d
d
y
n
am
ic
an
aly
s
is
o
f
r
a
n
s
o
m
war
e
v
ar
ian
ts
,
r
a
n
k
ca
lcu
l
atio
n
an
d
p
r
io
r
itize
I
o
C
s
lis
t.
Fig
u
r
e
2
g
iv
es
a
g
o
o
d
o
u
tlin
e
o
f
th
e
wh
o
le
p
r
o
ce
s
s
.
T
o
b
e
s
u
r
e
th
at
th
e
r
an
k
in
g
alg
o
r
ith
m
r
ec
eiv
es
co
r
r
ec
t
an
d
s
tr
u
ctu
r
e
d
in
p
u
t
d
ata,
ea
ch
I
o
C
h
as
its
f
r
eq
u
e
n
c
y
o
f
o
cc
u
r
r
en
ce
a
n
d
weig
h
t.
T
h
e
r
an
k
in
g
s
y
s
tem
s
u
cc
ess
f
u
lly
id
en
tifie
s
m
o
s
t
i
m
p
o
r
tan
t
I
o
C
s
f
o
r
r
an
s
o
m
war
e
d
etec
tio
n
b
y
co
m
b
in
in
g
I
o
C
o
cc
u
r
r
en
ce
,
th
r
ea
t
s
ig
n
if
ican
ce
weig
h
ts
a
n
d
f
ea
tu
r
e
id
en
tific
atio
n
.
T
h
e
m
ain
p
r
o
ce
s
s
o
f
I
o
C
r
an
k
in
g
m
eth
o
d
in
v
o
lv
es
e
x
am
in
in
g
r
an
s
o
m
war
e
s
am
p
les
b
y
s
tatic
an
d
d
y
n
am
ic
a
n
aly
s
is
ap
p
r
o
ac
h
es.
C
r
itical
I
o
C
s
ar
e
ex
tr
ac
ted
b
y
th
ese
an
aly
s
es,
an
d
th
ey
ar
e
u
s
ed
f
o
r
r
an
k
in
g
.
Fig
u
r
e
2
.
Pro
ce
s
s
o
f
r
an
k
i
n
g
I
o
C
s
r
elate
d
to
r
an
s
o
m
war
e
3
.
1
.
St
a
t
ic
a
nd
dy
na
m
ic
a
na
ly
s
is
o
f
ra
ns
o
m
wa
re
v
a
ria
nts
T
h
e
m
eth
o
d
o
lo
g
y
ap
p
lied
h
y
b
r
id
an
aly
s
is
wh
ich
in
cl
u
d
e
s
b
o
th
s
tatic
an
d
d
y
n
am
ic
a
n
aly
s
is
o
f
s
elec
ted
r
an
s
o
m
war
e
v
ar
ian
ts
to
co
m
p
r
eh
e
n
s
iv
ely
ex
tr
ac
t
an
d
v
alid
ate
m
ajo
r
I
o
C
s
r
elev
an
t
to
r
an
s
o
m
war
e
s
ig
n
atu
r
e
an
d
b
e
h
av
io
r
.
Fo
r
s
tatic
an
aly
s
is
,
PEStu
d
io
was
u
s
ed
to
an
al
y
ze
f
ile
attr
ib
u
tes
with
o
u
t
r
u
n
n
in
g
it
an
d
f
o
cu
s
in
g
o
n
m
etad
ata,
i
m
p
o
r
t
f
u
n
ctio
n
s
,
s
u
s
p
icio
u
s
s
tr
in
g
s
,
o
b
f
u
s
ca
tio
n
m
ar
k
e
r
s
,
an
d
k
n
o
wn
h
ash
es.
C
u
ck
o
o
San
d
b
o
x
to
o
l
was
u
s
ed
to
e
x
tr
ac
t
d
y
n
am
ic
b
eh
a
v
io
r
s
o
f
r
a
n
s
o
m
war
e
s
am
p
le
b
y
ex
ec
u
tin
g
th
e
s
am
p
le
u
n
d
er
a
clo
s
ed
an
d
s
af
e
en
v
ir
o
n
m
en
t.
T
h
e
r
esu
lts
o
b
tain
ed
f
r
o
m
b
o
th
m
eth
o
d
s
o
f
an
aly
s
is
wer
e
co
m
p
ar
e
d
to
id
e
n
tify
co
m
m
o
n
an
d
im
p
o
r
tan
t
ar
tifa
cts.
T
h
ese
wer
e
th
en
lin
k
ed
to
I
o
C
s
o
f
ch
o
ice
f
o
r
th
is
s
tu
d
y
.
T
h
ey
in
clu
d
e
en
cr
y
p
tio
n
tech
n
iq
u
es,
f
ile
m
o
d
if
icatio
n
s
,
r
eg
is
tr
y
m
o
d
if
icatio
n
s
f
o
r
p
er
s
is
ten
ce
,
cr
ea
tio
n
o
f
r
an
s
o
m
n
o
te
f
iles
,
co
m
m
u
n
icatio
n
with
a
n
o
n
y
m
izin
g
n
etwo
r
k
s
,
o
r
in
d
icat
io
n
s
o
f
p
ac
k
in
g
an
d
/o
r
o
b
f
u
s
ca
tio
n
.
T
ab
le
2
s
u
m
m
ar
izes
th
ese
o
b
s
er
v
atio
n
s
an
d
g
iv
es
a
g
o
o
d
v
iew
o
f
th
e
b
eh
av
io
r
al
f
o
o
tp
r
in
t o
f
th
e
r
a
n
s
o
m
war
e
s
am
p
les.
I
t
also
co
n
f
ir
m
s
th
e
p
r
esen
ce
o
f
I
o
Cs
th
at
ar
e
n
ee
d
ed
f
o
r
t
h
e
n
ex
t
s
tep
s
o
f
s
co
r
in
g
an
d
r
an
k
in
g
.
T
h
ese
two
lay
er
ed
ap
p
r
o
ac
h
es
h
elp
i
n
en
s
u
r
in
g
a
wid
e
an
d
d
ee
p
id
en
tif
icatio
n
o
f
I
o
C
s
,
en
h
an
cin
g
t
h
e
th
r
ea
t
in
tellig
en
ce
b
ase
f
o
r
th
e
p
r
o
p
o
s
ed
r
a
n
k
in
g
alg
o
r
ith
m
.
Evaluation Warning : The document was created with Spire.PDF for Python.
I
n
t J Ar
tif
I
n
tell
I
SS
N:
2252
-
8
9
3
8
P
r
io
r
itiz
in
g
r
a
n
s
o
mw
a
r
e
in
d
ica
to
r
s
o
f c
o
mp
r
o
mis
e
u
s
in
g
a
lg
o
r
ith
mic
…
(
K
r
i
s
h
n
a
P
r
a
s
a
d
D
.
S
u
b
r
a
ma
n
ya
)
3869
T
ab
le
2
.
Su
m
m
a
r
y
o
f
I
o
C
s
o
f
v
ar
io
u
s
r
an
s
o
m
wa
r
e
v
ar
ia
n
ts
an
aly
ze
d
d
u
r
in
g
th
e
s
tu
d
y
R
a
n
so
mw
a
r
e
v
a
r
i
a
n
t
F
i
l
e
e
x
t
e
n
s
i
o
n
s
En
c
r
y
p
t
i
o
n
a
l
g
o
r
i
t
h
m(
s)
u
s
e
d
R
a
n
so
m
n
o
t
e
s
R
e
g
i
s
t
r
y
c
h
a
n
g
e
s
C
r
y
p
t
o
w
a
l
l
.
d
e
c
r
y
p
t
,
.
l
o
c
k
,
.
a
a
a
,
.
z
z
z
,
.
c
r
y
p
t
o
w
a
l
l
R
C
4
,
R
S
A
-
2
0
4
8
H
ELP_
D
E
C
R
Y
P
T
.
TX
T,
H
ELP_
D
E
C
R
Y
P
T
.
H
TM
L,
H
ELP_
D
E
C
R
Y
P
T
.
P
N
G
C
r
e
a
t
e
s
a
n
a
u
t
o
r
u
n
r
e
g
i
st
r
y
e
n
t
r
y
C
r
y
p
t
o
l
o
c
k
e
r
.
e
n
c
r
y
p
t
e
d
,
.
c
r
y
p
t
o
,
.
l
o
c
k
e
d
R
S
A
-
2
0
4
8
D
EC
R
Y
P
T
_
I
N
S
TR
U
C
TI
O
N
.
TX
T,
D
EC
R
Y
P
T
_
I
N
S
TR
U
C
TI
O
N
.
H
TM
L
D
i
sab
l
e
s
w
i
n
d
o
w
s
s
y
st
e
m
r
e
st
o
r
e
C
TB
-
l
o
c
k
e
r
.
c
t
b
,
.
c
t
b
2
,
.
l
o
c
k
y
El
l
i
p
t
i
c
C
u
r
v
e
C
r
y
p
t
o
g
r
a
p
h
y
!
D
e
c
r
y
p
t
-
A
l
l
-
F
i
l
e
s.
t
x
t
,
H
o
w
_
T
o
_
D
e
c
r
y
p
t
.
t
x
t
C
r
e
a
t
e
s
a
p
e
r
s
i
st
e
n
c
e
e
n
t
r
y
Lo
c
k
y
.
l
o
c
k
y
,
.
z
e
p
t
o
,
.
o
d
i
n
,
.
o
si
r
i
s
A
ES
-
1
2
8
a
n
d
R
S
A
-
2
0
4
8
Lo
c
k
y
_
R
e
c
o
v
e
r
y
_
I
n
st
r
u
c
t
i
o
n
s.
t
x
t
,
LO
C
K
Y
_
H
ELP
.
t
x
t
A
l
t
e
r
s
w
i
n
d
o
w
s
p
o
l
i
c
i
e
s
t
o
d
i
s
a
b
l
e
r
e
c
o
v
e
r
y
Te
sl
a
C
r
y
p
t
.
v
v
v
,
.
t
t
t
,
.
m
i
c
r
o
,
.
m
p
3
,
.
x
x
x
A
ES
H
E
L
P
_
R
E
S
T
O
R
E
_
F
I
L
E
S
.
T
X
T
,
H
E
L
P
_
T
O
_
D
E
C
R
Y
P
T
_
Y
O
U
R
_
F
I
L
E
S
.
T
X
T
C
r
e
a
t
e
s
p
e
r
s
i
st
e
n
c
e
e
n
t
r
y
To
r
r
e
n
t
L
o
c
k
e
r
.
e
n
c
,
.
c
r
y
p
t
e
d
,
.
l
o
c
k
e
d
A
ES
-
2
5
6
a
n
d
R
S
A
-
2
0
4
8
EC
R
Y
P
T
_
I
N
S
TR
U
C
TI
O
N
.
TX
T,
R
EA
D
M
E_
F
O
R
_
D
E
C
R
Y
P
T
.
t
x
t
D
e
l
e
t
e
s
w
i
n
d
o
w
s
sh
a
d
o
w
c
o
p
i
e
s
W
i
n
L
o
c
k
e
r
D
o
e
s
n
o
t
e
n
c
r
y
p
t
f
i
l
e
s
b
u
t
l
o
c
k
s
t
h
e
scre
e
n
A
ES
-
2
5
6
D
i
sp
l
a
y
s fu
l
l
-
s
c
r
e
e
n
r
a
n
s
o
m m
e
ssa
g
e
s
‒
B
l
o
c
k
s
t
a
s
k
m
a
n
a
g
e
r
‒
A
l
t
e
r
s s
h
e
l
l
se
t
t
i
n
g
s
t
o
p
r
e
v
e
n
t
a
c
c
e
ss
W
a
n
n
a
C
r
y
.
W
N
C
R
Y
C
o
m
b
i
n
a
t
i
o
n
o
f
t
h
e
R
S
A
a
n
d
A
ES
G
U
I
r
a
n
so
m
n
o
t
e
f
r
o
m
@
W
a
n
a
D
e
c
r
y
p
t
o
r
@
.
e
x
e
‒
M
o
d
i
f
i
e
s
t
h
e
r
e
g
i
st
r
y
t
o
e
n
s
u
r
e
p
e
r
s
i
st
e
n
c
e
o
n
r
e
b
o
o
t
‒
D
i
sab
l
e
s
w
i
n
d
o
w
s
d
e
f
e
n
d
e
r
a
n
d
s
e
c
u
r
i
t
y
t
o
o
l
s
3
.
2
.
Ra
n
k
ing
ind
ica
t
o
rs o
f
c
o
m
pro
m
is
e
a
l
g
o
rit
hm
T
h
e
s
tatic
an
d
d
y
n
am
ic
I
o
C
s
co
llected
ar
e
s
to
r
e
d
in
an
I
o
C
_
Occ
u
r
r
en
ce
f
ile.
T
h
is
f
ile
tr
ac
k
s
h
o
w
o
f
ten
ea
c
h
I
o
C
is
s
p
r
ea
d
ac
r
o
s
s
d
if
f
er
en
t
v
ar
ian
ts
o
f
r
an
s
o
m
war
e.
T
h
is
i
n
f
o
r
m
atio
n
is
cr
u
cial
to
t
h
e
r
a
n
k
in
g
alg
o
r
ith
m
.
I
o
C
s
th
at
ar
e
co
m
m
o
n
ac
r
o
s
s
s
ev
er
al
r
an
s
o
m
wa
r
e
s
am
p
les
lik
ely
will
b
e
m
o
r
e
im
p
o
r
tan
t
f
o
r
th
r
ea
t
d
etec
tio
n
.
Af
ter
co
llectin
g
t
h
e
I
o
C
s
o
f
r
an
s
o
m
war
e
s
am
p
l
es,
th
ey
b
ec
o
m
e
i
n
p
u
ts
o
f
th
e
r
an
k
in
g
p
r
o
c
ess
.
I
n
th
is
p
r
o
ce
s
s
,
im
p
o
r
tan
ce
o
f
th
e
m
o
s
t
im
p
o
r
tan
t
in
d
icato
r
s
is
g
iv
en
p
r
io
r
ity
.
T
h
e
alg
o
r
ith
m
tak
es
th
r
ee
m
ajo
r
in
p
u
ts
:
I
o
C
n
am
es,
th
eir
o
cc
u
r
r
en
ce
s
,
an
d
th
eir
weig
h
ts
.
T
h
e
m
eth
o
d
m
ain
tain
s
a
clea
r
lis
t
o
f
th
e
I
o
C
n
am
es
s
u
ch
as
th
at
in
T
ab
le
1
.
T
o
m
ak
e
s
u
r
e
th
e
r
an
k
in
g
alg
o
r
ith
m
r
ec
eiv
es
th
e
co
r
r
ec
t
an
d
o
r
g
an
ized
in
p
u
t
d
ata,
ev
er
y
I
o
C
is
ass
o
ciate
d
wit
h
its
f
r
eq
u
e
n
cy
o
f
o
cc
u
r
r
e
n
ce
an
d
weig
h
t.
T
h
r
o
u
g
h
a
c
o
m
b
in
atio
n
o
f
I
o
C
o
cc
u
r
r
e
n
ce
,
th
r
ea
t
s
ig
n
if
ican
c
e
weig
h
ts
,
an
d
f
ea
tu
r
e
id
e
n
tific
atio
n
,
th
e
r
an
k
in
g
alg
o
r
ith
m
is
d
esig
n
ed
to
ef
f
ec
tiv
ely
p
r
io
r
itize
I
o
C
'
s
m
o
s
t
r
elev
an
t
f
o
r
r
an
s
o
m
wa
r
e
d
etec
tio
n
.
T
h
e
f
r
e
q
u
en
c
y
o
f
o
cc
u
r
r
en
ce
is
an
in
d
icatio
n
o
f
h
o
w
o
f
ten
a
p
ar
ti
cu
lar
I
o
C
is
f
o
u
n
d
in
r
an
s
o
m
war
e
f
am
ilies
.
T
h
e
h
i
g
h
er
th
e
f
r
eq
u
e
n
cy
,
th
e
m
o
r
e
lik
ely
th
e
I
o
C
is
to
ap
p
ea
r
in
r
an
s
o
m
war
e
s
am
p
les,
m
ak
in
g
i
t a
g
o
o
d
in
d
icato
r
o
f
r
an
s
o
m
w
ar
e
ac
tiv
ity
.
T
h
e
I
o
C
_
o
cc
u
r
r
en
ce
f
ile
is
s
et
u
p
as
a
b
i
n
ar
y
m
atr
ix
,
wh
ich
s
h
o
ws
th
e
f
ea
tu
r
es
o
f
d
if
f
er
en
t
r
an
s
o
m
war
e.
E
ac
h
r
o
w
i
n
th
e
m
atr
ix
r
ep
r
esen
ts
a
u
n
iq
u
e
r
an
s
o
m
war
e
f
a
m
ily
.
E
ac
h
c
o
lu
m
n
r
e
p
r
esen
ts
a
s
p
ec
if
ic
I
o
C
.
Fo
r
a
g
iv
en
r
an
s
o
m
war
e
f
am
ily
,
ea
ch
ce
ll in
th
e
m
atr
ix
h
as b
in
ar
y
v
alu
e
o
f
1
an
d
0
.
A
v
alu
e
o
f
1
in
d
icate
s
th
at
a
s
p
ec
if
ic
I
o
C
h
as
b
ee
n
o
b
s
er
v
ed
an
d
th
at
t
h
is
b
eh
av
io
r
is
a
p
a
r
t
o
f
t
h
e
h
ar
m
in
g
b
eh
av
i
o
r
.
I
n
c
o
n
tr
ast,
a
v
alu
e
o
f
0
m
ea
n
s
th
at
th
e
r
an
s
o
m
war
e
v
ar
ia
n
t
d
o
es
n
o
t
d
is
p
lay
th
e
I
o
C
.
T
h
is
b
in
ar
y
co
d
in
g
m
ak
es
ca
lcu
latio
n
ea
s
ier
a
n
d
m
ak
es
it
ea
s
ier
to
r
ep
r
esen
t
th
e
d
ata.
T
h
e
m
at
r
ix
ap
p
lied
f
o
r
th
e
p
r
o
p
o
s
ed
m
eth
o
d
is
p
r
esen
ted
in
T
ab
le
3
.
T
h
is
s
etu
p
is
im
p
o
r
tan
t
b
ec
au
s
e
it
ca
n
b
e
u
s
ed
to
ea
s
ily
co
m
p
ar
e
d
if
f
e
r
en
t
s
tr
ain
s
o
f
r
a
n
s
o
m
war
e.
B
y
o
r
g
an
izin
g
th
e
f
am
ilies
in
to
r
o
ws,
r
esear
ch
er
s
ca
n
ass
ess
th
e
s
im
ilar
ities
an
d
d
is
s
im
ilar
itie
s
in
b
eh
av
io
r
s
o
f
r
an
s
o
m
war
e
f
am
ilies
,
an
d
wh
i
ch
o
n
es
h
av
e
u
n
i
q
u
e
tr
aits
.
R
e
p
r
esen
tin
g
I
o
C
s
as
co
lu
m
n
s
also
h
elp
s
id
e
n
tify
c
o
m
m
o
n
in
d
icato
r
s
in
a
v
a
r
iety
o
f
r
a
n
s
o
m
war
e
f
am
ilies
,
h
e
lp
in
g
to
d
etec
t
an
d
class
if
y
n
ew
th
r
ea
ts
.
B
ased
o
n
its
p
r
ac
ticality
in
r
an
s
o
m
war
e
d
etec
tio
n
,
ea
ch
I
o
C
is
g
iv
en
a
p
r
ed
eter
m
in
e
d
th
r
ea
t sig
n
if
ican
ce
weig
h
t.
T
h
e
weig
h
ts
f
all
in
to
th
r
ee
ca
te
g
o
r
ies an
d
ju
s
tifie
d
in
T
a
b
le
4
.
T
ab
le
3
.
B
in
ar
y
m
atr
ix
r
e
p
r
esen
tin
g
I
o
C
p
r
esen
ce
ac
r
o
s
s
r
an
s
o
m
war
e
v
ar
ia
n
t
R
a
n
so
mw
a
r
e
f
a
mi
l
y
I
o
C
s
D
e
l
e
t
e
sh
a
d
o
w
c
o
p
y
I
2
P
a
n
o
n
y
m
i
t
y
n
e
t
w
o
r
k
C
o
n
n
e
c
t
t
o
t
o
r
2
w
e
b
R
e
q
u
e
st
t
o
h
i
g
h
e
n
t
r
o
p
y
d
o
m
a
i
n
n
a
m
e
F
i
l
e
e
n
c
r
y
p
t
i
o
n
En
c
r
y
p
t
s
f
i
l
e
n
a
me
Lo
c
k
s
scree
n
D
e
l
e
t
e
s
o
r
i
g
i
n
a
l
f
i
l
e
s
f
r
o
m
d
i
s
k
I
mp
o
r
t
a
n
d
l
i
n
k
s
t
o
c
r
y
p
t
o
l
i
b
r
a
r
i
e
s
P
a
c
k
e
d
/
o
b
f
u
sc
a
t
e
d
C
r
e
a
t
e
R
W
X
memo
r
y
W
a
n
n
a
C
r
y
1
1
1
1
1
0
0
1
1
1
1
C
r
y
p
t
o
W
a
l
l
1
1
1
1
1
0
0
0
1
1
1
C
r
y
p
t
o
L
o
c
k
e
r
1
0
1
1
1
0
0
0
1
1
1
C
TB
-
l
o
c
k
e
r
0
0
0
1
1
1
0
0
1
1
1
Lo
c
k
y
1
0
1
1
1
1
0
1
1
1
1
Te
sl
a
C
r
y
p
t
0
0
1
0
1
1
0
0
1
1
0
To
r
r
e
n
t
L
o
c
k
e
r
1
0
1
1
1
1
0
1
1
1
1
W
i
n
L
o
c
k
e
r
0
0
0
0
1
0
1
0
0
0
0
Evaluation Warning : The document was created with Spire.PDF for Python.
I
SS
N
:
2
2
5
2
-
8
9
3
8
I
n
t J Ar
tif
I
n
tell
,
Vo
l.
1
5
,
No
.
4
,
Au
g
u
s
t 2
0
2
6
:
3
8
6
5
-
3
8
7
7
3870
T
ab
le
4
.
W
eig
h
t a
llo
ca
tio
n
f
o
r
th
e
I
o
C
s
an
d
th
e
j
u
s
tific
atio
n
f
o
r
ch
o
o
s
in
g
th
e
weig
h
t a
llo
ca
tio
n
W
e
i
g
h
t
g
i
v
e
n
t
o
I
o
C
s
Ju
st
i
f
i
c
a
t
i
o
n
f
o
r
t
h
e
w
e
i
g
h
t
a
l
l
o
c
a
t
i
o
n
I
o
C
s
l
i
s
t
3
H
i
g
h
-
r
i
sk
I
o
C
s
a
r
e
a
s
si
g
n
e
d
a
h
i
g
h
e
r
w
e
i
g
h
t
o
f
‘
3
’
d
u
e
t
o
t
h
e
i
r
st
r
o
n
g
a
sso
c
i
a
t
i
o
n
w
i
t
h
r
a
n
s
o
mw
a
r
e
a
c
t
i
v
i
t
y
.
S
h
a
d
o
w
c
o
p
y
d
e
l
e
t
i
o
n
,
r
e
q
u
e
st
t
o
h
i
g
h
e
n
t
r
o
p
y
d
o
m
a
i
n
n
a
m
e
,
c
o
n
n
e
c
t
t
o
t
o
r
2
w
e
b
,
d
e
l
e
t
e
s
o
r
i
g
i
n
a
l
f
i
l
e
s
f
r
o
m
d
i
s
k
,
e
n
c
r
y
p
t
s fi
l
e
n
a
me
.
2
I
o
C
s
w
i
t
h
m
o
d
e
r
a
t
e
r
i
s
k
a
r
e
g
i
v
e
n
m
e
d
i
u
m
w
e
i
g
h
t
s
w
i
t
h
a
v
a
l
u
e
o
f
‘
2
’
,
i
n
d
i
c
a
t
i
n
g
t
h
e
p
o
ss
i
b
i
l
i
t
y
o
f
r
a
n
so
mw
a
r
e
a
c
t
i
v
i
t
y
b
u
t
a
l
s
o
t
h
e
p
o
ssi
b
i
l
i
t
y
o
f
l
e
g
a
l
a
p
p
s
u
si
n
g
t
h
e
m
.
I
2
P
a
n
o
n
y
mi
t
y
n
e
t
w
o
r
k
,
p
a
c
k
e
d
/
o
b
f
u
sca
t
e
d
,
i
m
p
o
r
t
a
n
d
l
i
n
k
s
t
o
c
r
y
p
t
o
l
i
b
r
a
r
i
e
s
1
Th
e
y
a
r
e
l
e
ss
s
u
g
g
e
st
i
v
e
o
f
r
a
n
so
mw
a
r
e
-
s
p
e
c
i
f
i
c
a
c
t
i
v
i
t
y
,
l
o
w
-
r
i
s
k
I
o
C
s
a
r
e
g
i
v
e
n
l
o
w
e
r
w
e
i
g
h
t
s
w
i
t
h
a
v
a
l
u
e
o
f
‘
1
’
.
F
i
l
e
e
n
c
r
y
p
t
i
o
n
,
l
o
c
k
s
scre
e
n
,
c
r
e
a
t
e
R
W
X
mem
o
r
y
A
co
llectio
n
o
f
I
o
C
s
'
s
co
r
e
is
d
eter
m
in
ed
b
y
Alg
o
r
ith
m
1
u
s
in
g
th
eir
weig
h
ts
an
d
th
e
f
r
eq
u
e
n
cy
with
wh
ich
th
ey
ap
p
ea
r
in
r
a
n
s
o
m
war
e
s
am
p
les.
As
s
tated
in
(
1
)
,
th
e
s
co
r
es
ar
e
ca
lcu
la
ted
b
y
m
u
ltip
ly
in
g
th
e
I
o
C
o
cc
u
r
r
en
ce
s
b
y
th
e
weig
h
ts
allo
ca
ted
to
th
em
an
d
ad
d
in
g
u
p
th
e
weig
h
ted
v
a
lu
es
f
o
r
ea
ch
I
o
C
.
T
h
e
p
ar
am
eter
s
a
n
d
th
eir
d
escr
ip
tio
n
ar
e
as f
o
llo
ws
:
i)
I
OC
s
[
]
:
a
lis
t o
r
ar
r
ay
co
n
tain
i
n
g
all
th
e
I
o
C
s
.
ii)
n
=
len
(
I
OC
s
)
:
t
h
is
d
eter
m
in
es
th
e
n
u
m
b
er
o
f
I
o
C
s
.
iii)
I
o
C
_
Occ
u
r
en
ce
s
[
]
[
]
:
a
2
D
m
atr
ix
(
lis
t
o
f
lis
ts
)
wh
er
e
ea
c
h
elem
en
t
I
OC
_
Occ
u
r
en
ce
s
[
j]
[
i]
r
ep
r
esen
ts
h
o
w
m
an
y
tim
es th
e
ith
I
o
C
o
cc
u
r
s
in
th
e
jth
r
a
n
s
o
m
war
e
s
a
m
p
le.
iv
)
W
eig
h
ts
[
]
:
a
v
ec
to
r
o
r
lis
t
in
wh
ich
th
e
weig
h
t
allo
ca
ted
to
th
e
ith
I
o
C
is
r
ep
r
esen
ted
b
y
weig
h
ts
[
i]
.
T
h
e
s
ig
n
if
ican
ce
o
f
th
e
I
o
C
f
o
r
r
an
s
o
m
war
e
d
etec
tio
n
is
in
d
icate
d
b
y
th
is
weig
h
t.
v)
Sco
r
es[]
:
a
lis
t
co
n
tain
in
g
ea
ch
I
o
C
'
s
f
in
al
s
co
r
es.
A
ce
r
tain
I
o
C
'
s
weig
h
ted
o
cc
u
r
r
e
n
ce
ac
r
o
s
s
all
r
an
s
o
m
war
e
s
am
p
les is
r
ep
r
es
en
ted
b
y
ea
ch
s
co
r
e.
T
h
e
g
o
al
is
to
ca
lcu
late
s
co
r
es
f
o
r
ea
ch
I
o
C
as
a
weig
h
ted
s
u
m
o
f
its
o
cc
u
r
r
en
ce
s
ac
r
o
s
s
all
r
an
s
o
m
war
e
s
am
p
les.
T
h
e
m
ath
em
atica
l f
o
r
m
u
latio
n
o
f
th
e
s
co
r
e
f
o
r
an
I
o
C
i is
as in
(
1
)
.
=
∑
(
_
[
]
[
]
×
ℎ
[
]
)
−
1
=
0
(
1
)
W
h
er
e
is
th
e
in
d
e
x
o
f
th
e
I
o
C
,
is
th
e
in
d
e
x
o
f
a
r
a
n
s
o
m
war
e
s
am
p
le,
an
d
is
th
e
to
tal
n
u
m
b
er
o
f
r
an
s
o
m
war
e
s
am
p
les.
Alg
o
r
ith
m
1
.
Alg
o
r
ith
m
to
f
in
d
th
e
r
an
k
in
g
o
f
io
cs to
d
etec
t
r
an
s
o
m
war
e
Input
:
1. Array of n ransomwares
2. Array of m IoCs
3. Array of weights of each IoC
4.
2D array where each row gives the occurrence of an IoCs in the given
ransomwares
Output
: All m IoCs score
1:
Initialize: sum=0, scores[]
2:
for i=0 to m
-
1 do
3:
for j= 0 to n
-
1do
4:
sum = sum + IOC_Occurrence[i][j]*weights[i]
5:
end for
6:
scores[i]=sum
7:
sum=0 // sum is reset to 0 for the next IoC
8:
end for
9:
end
Alg
o
r
ith
m
2
ap
p
lies
th
e
s
ig
m
o
id
f
u
n
ctio
n
as
s
h
o
wn
in
(
2
)
to
a
lis
t
o
f
s
co
r
es,
g
e
n
er
ated
b
y
A
lg
o
r
ith
m
1
,
wh
er
e
ea
ch
I
o
C
h
as b
ee
n
ass
ig
n
ed
a
r
aw
s
co
r
e
b
ased
o
n
its
f
r
eq
u
en
cy
an
d
weig
h
t.
T
h
e
lo
o
p
r
u
n
s
f
r
o
m
i
=
0
to
m
-
1
,
wh
er
e
m
r
ep
r
esen
ts
th
e
to
tal
n
u
m
b
er
o
f
I
o
C
s
b
ein
g
ev
alu
ated
.
T
h
e
s
ig
m
o
id
f
u
n
ctio
n
is
ap
p
lied
to
ea
ch
r
aw
s
co
r
e.
T
h
is
f
u
n
ctio
n
m
ap
s
r
ea
l
-
v
alu
e
d
n
u
m
b
er
s
in
to
a
r
an
g
e
b
et
wee
n
0
an
d
1
.
I
t
is
esp
ec
ially
u
s
ef
u
l in
th
is
co
n
tex
t to
n
o
r
m
alize
s
co
r
es,
m
ak
in
g
th
em
ea
s
ier
to
in
ter
p
r
et
an
d
co
m
p
ar
e.
T
h
e
o
u
tp
u
t
o
f
th
e
s
ig
m
o
id
is
th
en
m
u
ltip
lied
b
y
1
0
0
,
co
n
v
e
r
tin
g
it
in
to
a
p
er
ce
n
tag
e
r
ep
r
esen
tatio
n
an
d
s
to
r
ed
in
p
er
ce
n
tag
es lis
t a
t in
d
ex
.
(
)
=
1
1
+
−
(
2
)
Alg
o
r
ith
m
2
.
Alg
o
r
ith
m
to
co
n
v
er
t sco
r
es in
to
p
er
ce
n
tag
e
a
n
d
s
o
r
t th
e
s
co
r
es
Input
: Array of scores computed in Algorithm 1
Output
: Sorted IoCs with their percentage score
1:
for i=0 to m
-
1 do
2:
percentage
=1/(1+e^(
-
Scores[i]))*100
Evaluation Warning : The document was created with Spire.PDF for Python.
I
n
t J Ar
tif
I
n
tell
I
SS
N:
2252
-
8
9
3
8
P
r
io
r
itiz
in
g
r
a
n
s
o
mw
a
r
e
in
d
ica
to
r
s
o
f c
o
mp
r
o
mis
e
u
s
in
g
a
lg
o
r
ith
mic
…
(
K
r
i
s
h
n
a
P
r
a
s
a
d
D
.
S
u
b
r
a
ma
n
ya
)
3871
3:
Percentages[i]=percentage
4:
end for
5:
indexes=[0,..,m
-
1]
6:
sort(scores[0,..,m
-
1],indexes[0,..,m
-
1]) //Use any sorting algorithm to sort the scores
7:
for i=0 to m
-
1 do
8:
print IOCs[indexes[i]] and Percentages[indexes[i]]
9:
end for
10:
end
4.
RE
SU
L
T
S AN
D
D
I
SCU
SS
I
O
N
T
h
e
alg
o
r
ith
m
ex
am
in
es
th
e
f
r
eq
u
en
c
y
o
f
ea
c
h
in
d
icato
r
o
f
th
e
I
o
C
,
an
d
th
eir
r
elev
an
ce
.
I
t
u
s
es
a
s
co
r
in
g
f
u
n
ctio
n
to
tr
a
n
s
f
o
r
m
th
is
in
f
o
r
m
atio
n
a
n
d
ar
e
u
s
ed
to
n
o
r
m
alize
t
h
e
r
esu
lt
s
th
r
o
u
g
h
a
s
ig
m
o
id
tr
an
s
f
o
r
m
atio
n
.
T
h
is
g
iv
es
a
p
er
ce
n
tag
e
-
b
ased
r
an
k
in
g
o
f
I
o
C
s
b
ased
o
n
h
o
w
im
p
o
r
tan
t
th
ey
ar
e
in
s
p
o
ttin
g
an
d
d
ef
i
n
in
g
r
an
s
o
m
war
e
b
eh
av
io
r
.
T
h
e
alg
o
r
ith
m
was
ap
p
lied
b
y
ass
e
s
s
in
g
th
e
I
o
C
s
li
s
ted
in
T
ab
le
1
ag
ain
s
t
th
e
r
an
s
o
m
war
e
v
ar
ian
ts
s
h
o
wn
in
T
ab
le
2
.
T
h
is
p
r
o
ce
s
s
g
en
er
ated
o
cc
u
r
r
en
ce
d
ata
o
f
ea
ch
I
o
C
ac
r
o
s
s
th
ese
v
ar
i
an
ts
in
to
a
m
atr
ix
,
wh
ich
is
d
is
p
lay
ed
in
T
ab
le
3
.
B
ased
o
n
th
is
m
atr
ix
,
th
e
alg
o
r
ith
m
ca
lcu
lates
a
r
an
k
s
co
r
e
f
o
r
ea
ch
I
o
C
,
with
th
e
r
esu
ltin
g
s
co
r
es su
m
m
ar
iz
ed
in
T
ab
le
5
.
T
ab
le
5
.
R
an
k
s
co
r
e
f
o
r
th
e
r
a
n
s
o
m
war
e
I
o
C
s
r
ec
eiv
ed
f
r
o
m
th
e
alg
o
r
ith
m
S
l
.
N
o
.
R
a
n
so
mw
a
r
e
I
o
C
s
R
a
n
k
sc
o
r
e
1
D
e
l
e
t
e
s
h
a
d
o
w
c
o
p
y
9
9
.
9
9
9
9
6
9
4
0
9
7
7
7
3
1
2
C
o
n
n
e
c
t
t
o
T
o
r
2
w
e
b
9
9
.
9
9
9
9
6
9
4
0
9
7
7
7
3
1
3
P
a
c
k
e
d
/
o
b
f
u
sc
a
t
e
d
9
9
.
9
9
5
4
6
0
2
1
3
1
2
9
7
6
4
F
i
l
e
e
n
c
r
y
p
t
i
o
n
9
9
.
7
5
2
7
3
7
6
8
4
3
3
6
5
4
5
R
e
q
u
e
st
t
o
h
i
g
h
e
n
t
r
o
p
y
d
o
ma
i
n
n
a
me
9
9
.
7
5
2
7
3
7
6
8
4
3
3
6
5
4
6
D
e
l
e
t
e
s
o
r
i
g
i
n
a
l
f
i
l
e
s
f
r
o
m
d
i
s
k
9
5
.
2
5
7
4
1
2
6
8
2
2
4
3
3
4
7
I
2
P
a
n
o
n
y
mi
t
y
n
e
t
w
o
r
k
8
8
.
0
7
9
7
0
7
7
9
7
7
8
8
2
3
8
I
mp
o
r
t
a
n
d
l
i
n
k
s
t
o
c
r
y
p
t
o
l
i
b
r
a
r
i
e
s
8
8
.
0
7
9
7
0
7
7
9
7
7
8
8
2
3
9
En
c
r
y
p
t
s
f
i
l
e
n
a
me
8
8
.
0
7
9
7
0
7
7
9
7
7
8
8
2
3
10
C
r
e
a
t
e
R
W
X
m
e
mo
r
y
8
8
.
0
7
9
7
0
7
7
9
7
7
8
8
2
3
11
Lo
c
k
s
s
c
r
e
e
n
7
3
.
1
0
5
8
5
7
8
6
3
0
0
0
5
T
h
e
to
p
-
r
an
k
e
d
in
d
icato
r
s
with
9
9
.
9
9
9
9
co
n
f
id
en
ce
n
u
m
b
er
s
ar
e
b
o
t
h
id
en
tifie
d
as
r
a
n
s
o
m
war
e
in
d
icato
r
s
:
“De
lete
s
h
ad
o
w
co
p
y
”
an
d
“Co
n
n
ec
t
to
T
o
r
2
w
eb
”.
T
h
o
u
g
h
T
o
r
2
web
co
m
m
u
n
icatio
n
is
a
g
o
o
d
s
ig
n
o
f
a
cr
im
in
al
in
ten
t
to
h
id
e
C
&
C
ch
an
n
els,
d
eletio
n
o
f
s
h
ad
o
w
co
p
ies
is
a
ce
r
tain
way
o
f
p
r
ev
en
tin
g
d
ata
r
etr
iev
al.
Pack
ed
/o
b
f
u
s
ca
ted
c
o
d
e
(
9
9
.
9
9
5
4
)
h
as
a
h
ig
h
s
co
r
e,
an
d
is
o
f
ten
in
clu
d
ed
in
b
e
n
ig
n
s
o
f
twar
e,
to
o
.
I
n
th
e
m
id
d
le
tier
o
f
th
e
s
c
o
r
e,
I
o
C
s
ar
e
f
o
u
n
d
th
at
ar
e
cr
itical
to
r
an
s
o
m
war
e,
b
u
t
n
o
t
e
x
clu
s
iv
e
to
r
an
s
o
m
war
e,
lo
we
r
in
g
t
h
e
tr
io
'
s
d
is
cr
im
in
atin
g
p
o
wer
,
s
u
ch
as
“File
en
cr
y
p
tio
n
”
a
n
d
“Req
u
est
to
h
ig
h
en
tr
o
p
y
d
o
m
ai
n
n
am
e
”
with
s
co
r
es:
9
9
.
7
5
2
7
.
R
an
s
o
m
war
e
o
f
ten
“De
letes
o
r
ig
in
al
f
iles
f
r
o
m
d
is
k
”,
wit
h
9
5
.
2
5
7
4
b
ein
g
u
s
ed
,
b
u
t th
er
e
ar
e
o
th
er
m
eth
o
d
s
o
f
s
ec
u
r
e
d
e
letio
n
u
s
ed
b
y
leg
itima
te
to
o
ls
.
A
f
ew
m
o
d
e
r
ately
s
co
r
e
d
in
d
i
ca
to
r
s
with
≈
8
8
.
0
8
ea
ch
a
d
d
c
o
n
tex
t,
b
u
t
ar
e
n
o
t
h
ig
h
l
y
d
is
tin
g
u
is
h
ab
l
e
f
r
o
m
r
an
s
o
m
wa
r
e
in
d
iv
id
u
ally
:
“I
2
P
an
o
n
y
m
it
y
n
etwo
r
k
”,
“
I
m
p
o
r
t
an
d
lin
k
s
to
cr
y
p
to
li
b
r
ar
ies
”
,
“E
n
cr
y
p
ts
f
ile
n
am
e
”
,
an
d
“Cre
ate
R
W
X
m
em
o
r
y
”.
E
x
am
p
les
in
clu
d
e
s
ec
u
r
e
ap
p
s
th
at
r
ely
o
n
cr
y
p
to
g
r
ap
h
ic
API
s
,
an
d
R
W
X
m
em
o
r
y
g
en
er
ati
o
n
th
at
o
cc
u
r
s
in
ju
s
t
-
in
-
tim
e
(
J
I
T
)
co
m
p
iler
s
.
Fin
ally
,
in
th
e
co
n
tex
t
o
f
t
o
d
ay
'
s
r
an
s
o
m
war
e,
“L
o
ck
s
s
cr
ee
n
”
h
as
lo
west
s
co
r
e
o
f
7
3
.
1
0
5
8
.
T
h
is
alig
n
s
with
th
e
r
e
ality
th
at
to
d
ay
'
s
r
an
s
o
m
war
e
attac
k
s
ar
e
b
ec
o
m
in
g
m
o
r
e
f
o
cu
s
ed
o
n
d
a
ta
en
cr
y
p
tio
n
an
d
d
ata
ex
f
i
ltra
tio
n
,
an
d
t
h
u
s
s
cr
ee
n
-
lo
ck
in
g
attac
k
s
ar
e
b
ec
o
m
in
g
less
co
m
m
o
n
.
A
t
r
u
e
a
n
d
a
c
c
u
r
a
t
e
l
i
n
e
a
r
r
e
p
r
ese
n
t
a
t
i
o
n
o
f
t
h
e
I
o
C
r
a
n
k
i
n
g
s
is
g
i
v
e
n
i
n
t
h
e
b
a
r
c
h
a
r
t
o
f
F
i
g
u
r
e
3
.
T
h
i
s
c
h
a
r
t
i
s
s
u
p
p
l
e
m
e
n
t
e
d
w
it
h
c
o
l
o
r
-
c
o
d
e
d
zo
n
e
s
o
f
c
o
n
f
i
d
e
n
c
e
t
o
i
n
d
i
c
a
t
e
i
n
d
i
c
a
t
o
r
s
b
y
t
h
e
ir
l
e
v
e
l
o
f
co
n
f
id
en
ce
,
with
h
ig
h
co
n
f
id
en
ce
(
s
co
r
es
ab
o
v
e
9
0
)
c
o
lo
r
ed
r
ed
,
m
o
d
er
ate
c
o
n
f
id
e
n
ce
(
s
co
r
es
b
etwe
en
8
0
an
d
9
0
)
co
l
o
r
ed
o
r
an
g
e
,
a
n
d
lo
w
co
n
f
id
en
ce
(
s
co
r
es
u
n
d
er
8
0
)
co
lo
r
ed
y
ello
w.
T
h
is
d
esig
n
cl
ea
r
ly
id
en
tifie
s
wh
ich
b
e
h
av
io
r
s
ar
e
m
o
s
t
in
d
icativ
e
o
f
r
an
s
o
m
war
e,
an
d
wh
ic
h
b
eh
av
io
r
s
a
r
e
lik
ely
to
ca
u
s
e
f
alse
p
o
s
itiv
es
(
e.
g
.
,
lo
ck
s
s
cr
ee
n
)
.
T
h
e
th
r
esh
o
ld
-
z
o
n
ed
b
ar
ch
a
r
t
h
elp
s
th
e
p
r
io
r
itizatio
n
an
d
th
r
esh
o
ld
d
e
cisi
o
n
-
m
ak
in
g
f
o
r
t
h
r
ea
t d
etec
tio
n
s
y
s
tem
s
.
Descr
ip
tiv
e
b
eh
av
io
r
al
p
atter
n
s
p
r
o
v
id
e
a
n
o
r
g
an
ized
p
r
io
r
itizatio
n
o
f
I
o
C
s
an
d
th
e
t
h
r
ea
t
d
etec
tio
n
s
y
s
tem
s
ar
e
b
etter
at
allo
ca
ti
n
g
r
eso
u
r
ce
s
an
d
r
ea
ctio
n
tactics
ac
co
r
d
in
g
t
o
th
e
o
b
s
er
v
e
d
b
eh
a
v
io
r
p
atter
n
s
.
T
h
e
r
an
k
in
g
r
esu
lts
o
f
f
er
an
o
r
d
er
e
d
lis
t
o
f
I
o
C
s
b
ased
o
n
lev
el
o
f
cr
iticality
an
d
ac
tu
al
o
cc
u
r
r
en
ce
in
th
e
wild
.
T
h
ese
r
esu
lts
ca
n
b
e
u
s
ed
b
y
s
ec
u
r
ity
a
n
aly
s
ts
to
d
ev
elo
p
d
etec
tio
n
m
eth
o
d
o
lo
g
ies
b
ased
o
n
I
o
C
with
h
ig
h
r
a
n
k
in
g
,
e.
g
.
,
f
ile
en
c
r
y
p
tio
n
,
co
d
e
o
b
f
u
s
ca
tio
n
,
an
d
s
h
ad
o
w
co
p
y
r
em
o
v
al.
I
n
s
tead
o
f
tr
y
in
g
to
b
u
ild
a
h
o
lis
tic
an
aly
tical
f
r
am
ewo
r
k
,
f
o
cu
s
in
g
o
n
th
ese
to
p
in
d
icato
r
s
ca
n
s
ig
n
if
ican
tly
e
n
h
an
ce
ea
r
ly
d
etec
tio
n
an
d
m
itig
atio
n
o
f
r
an
s
o
m
war
e
atta
ck
s
,
wh
ile
th
e
lo
wer
r
a
n
k
ed
I
o
C
s
ca
n
b
e
ad
d
ed
as su
p
p
lem
en
tal
ev
id
en
ce
.
Evaluation Warning : The document was created with Spire.PDF for Python.
I
SS
N
:
2
2
5
2
-
8
9
3
8
I
n
t J Ar
tif
I
n
tell
,
Vo
l.
1
5
,
No
.
4
,
Au
g
u
s
t 2
0
2
6
:
3
8
6
5
-
3
8
7
7
3872
Fig
u
r
e
3
.
T
h
e
co
n
f
id
en
ce
le
v
el
o
f
th
e
I
o
C
s
in
in
d
icatin
g
a
r
an
s
o
m
war
e
4
.
1
.
Alg
o
rit
hm
ef
f
iciency
a
na
ly
s
is
T
h
e
alg
o
r
ith
m
s
tar
ts
b
y
r
e
ad
in
g
4
f
iles
,
n
am
el
y
r
a
n
s
o
m
n
am
es.tx
t
,
io
cs.tx
t
,
weig
h
ts
.
tx
t
,
an
d
I
OC
o
cc
u
r
en
ce
s
.
tx
t
.
T
h
e
r
e
is
a
p
ar
s
in
g
o
f
th
e
lin
es
in
v
o
lv
ed
in
r
ea
d
in
g
th
e
f
ile,
s
o
t
h
e
tim
e
co
m
p
lex
ity
o
f
th
is
p
r
o
ce
s
s
is
O
(
L1
+
L2
+
L3
+
L4
)
,
wh
er
e
L1
,
L2
,
L3
,
an
d
L4
d
en
o
t
e
th
e
n
u
m
b
er
o
f
lin
es
in
ea
ch
r
esp
ec
tiv
e
f
ile.
T
h
e
s
p
ac
e
co
m
p
lex
ity
f
o
r
s
to
r
in
g
th
e
p
a
r
s
ed
co
n
ten
ts
is
O
(
∣
R
a
n
s
omw
a
r
e
N
a
me
s
∣
+
∣
IOCs
∣
+
∣
we
ig
hts
∣
+
∣
IOC
_
Occ
ure
n
c
e
s
∣
)
,
ac
co
u
n
tin
g
f
o
r
th
e
s
to
r
a
g
e
o
f
r
an
s
o
m
war
e
n
am
es,
I
o
C
s
,
w
eig
h
ts
,
an
d
th
eir
o
cc
u
r
r
e
n
ce
s
.
Nex
t,
th
e
p
ar
s
ed
d
ata
is
p
r
o
ce
s
s
ed
a
n
d
a
p
p
en
d
ed
to
lis
ts
.
Sin
ce
in
s
er
tin
g
an
elem
en
t
in
to
a
lis
t
tak
es
O
(
1
)
tim
e
p
er
ele
m
en
t,
th
e
o
v
er
all
tim
e
co
m
p
lex
ity
is
p
r
o
p
o
r
tio
n
al
to
th
e
to
tal
n
u
m
b
e
r
o
f
elem
en
ts
ac
r
o
s
s
all
f
iles
.
T
h
e
m
ain
co
m
p
u
tatio
n
al
s
tep
o
f
m
atr
ix
-
v
ec
to
r
m
u
ltip
licati
o
n
f
o
r
s
co
r
e
ca
lc
u
latio
n
c
o
n
t
ain
s
two
n
ested
lo
o
p
s
.
T
h
e
o
u
ter
lo
o
p
i
ter
ates
o
v
er
n
elem
en
ts
(
n
u
m
b
e
r
o
f
I
o
C
s
)
,
wh
ile
th
e
in
n
er
lo
o
p
iter
ates
o
v
er
m
elem
en
ts
(
n
u
m
b
er
o
f
r
an
s
o
m
war
e
n
am
es).
T
h
is
r
esu
lts
in
a
to
tal
tim
e
co
m
p
lex
ity
o
f
O
(
n
.
m
)
.
T
h
e
s
p
ac
e
co
m
p
lex
ity
f
o
r
s
to
r
in
g
th
e
c
o
m
p
u
ted
s
co
r
es is
O
(
n
)
,
as a
s
in
g
le
s
co
r
e
is
m
ain
tain
ed
f
o
r
ea
c
h
I
o
C
.
T
h
e
n
ex
t
s
tep
ap
p
lies
th
e
s
ig
m
o
id
f
u
n
ctio
n
to
ea
c
h
s
co
r
e.
C
alcu
latin
g
th
e
s
ig
m
o
id
f
u
n
ctio
n
f
o
r
a
s
in
g
le
elem
en
t
tak
es
O
(
1
)
tim
e.
Sin
ce
th
er
e
ar
e
n
s
co
r
es,
th
e
to
tal
tim
e
co
m
p
lex
ity
is
O
(
n
)
.
T
h
e
s
p
ac
e
co
m
p
lex
ity
is
also
O
(
n
)
,
as it r
eq
u
ir
es st
o
r
in
g
in
ter
m
ed
iate
r
esu
lts
an
d
p
er
ce
n
tag
es.
T
h
e
f
in
al
s
tep
c
o
n
tain
s
s
o
r
tin
g
th
e
ca
lcu
lated
s
co
r
es
u
s
in
g
b
u
b
b
le
s
o
r
t
.
I
n
th
e
wo
r
s
t
ca
s
e,
b
u
b
b
le
s
o
r
t
r
eq
u
ir
es
O
(
n
2
)
co
m
p
ar
is
o
n
s
an
d
s
wap
s
,
lead
in
g
to
a
to
tal
tim
e
co
m
p
lex
ity
o
f
O
(
n
2
)
.
Sin
ce
b
u
b
b
le
s
o
r
t
o
p
er
ates
in
p
lace
,
it
d
o
es
n
o
t
r
eq
u
ir
e
ad
d
itio
n
al
m
e
m
o
r
y
b
ey
o
n
d
th
e
i
n
p
u
t
ar
r
ay
,
r
esu
ltin
g
in
a
s
p
ac
e
co
m
p
lex
ity
o
f
O
(
1
)
.
4
.
2
.
O
v
er
a
ll
co
m
plex
it
y
a
na
l
y
s
is
W
h
en
ev
alu
atin
g
th
e
o
v
er
all
tim
e
co
m
p
lex
ity
,
th
e
two
d
o
m
in
an
t
o
p
er
atio
n
s
ar
e:
i)
m
atr
ix
-
v
ec
to
r
m
u
ltip
licatio
n
:
(
.
)
an
d
ii)
b
u
b
b
l
e
s
o
r
t
:
(
2
)
.
T
h
u
s
,
th
e
c
o
m
b
in
e
d
tim
e
co
m
p
lex
ity
is
(
.
+
2
)
.
If
≫
,
m
ea
n
in
g
th
e
n
u
m
b
er
o
f
I
o
C
s
i
s
s
ig
n
if
ican
tly
lar
g
er
th
an
th
e
n
u
m
b
er
o
f
r
an
s
o
m
war
e
n
am
es.
T
h
e
(
2
)
ter
m
d
o
m
in
ates,
s
im
p
lif
y
in
g
th
e
to
tal
tim
e
co
m
p
le
x
ity
to
(
2
)
.
T
h
e
p
er
f
o
r
m
a
n
ce
o
f
t
h
e
p
r
o
p
o
s
ed
I
o
C
r
an
k
in
g
alg
o
r
ith
m
was
ev
al
u
ated
b
y
is
o
latin
g
two
co
r
e
co
m
p
o
n
en
ts
o
f
th
e
ex
ec
u
tio
n
:
m
atr
ix
-
v
ec
t
o
r
m
u
ltip
licatio
n
(
u
s
ed
f
o
r
ca
lcu
l
atin
g
I
o
C
s
co
r
es)
a
n
d
s
o
r
tin
g
(
u
s
ed
to
r
a
n
k
I
o
C
s
b
ased
o
n
s
co
r
es).
T
h
e
r
esu
lts
,
m
ea
s
u
r
ed
ac
r
o
s
s
in
cr
ea
s
in
g
d
a
taset si
ze
s
,
ar
e
s
u
m
m
ar
ized
in
T
ab
le
6
.
T
h
e
p
er
f
o
r
m
an
ce
o
f
th
e
s
u
g
g
ested
I
o
C
r
an
k
in
g
alg
o
r
ith
m
was
m
ea
s
u
r
ed
in
ter
m
s
o
f
th
e
to
tal
ex
ec
u
tio
n
tim
e
f
o
r
d
i
f
f
er
en
t
n
u
m
b
er
s
o
f
I
o
C
s
an
d
r
a
n
s
o
m
war
e
f
am
ilies
.
T
h
e
r
esu
lts
ar
e
cl
ea
r
f
r
o
m
th
e
p
lo
t
in
Fig
u
r
e
4
.
T
h
e
alg
o
r
ith
m
tak
es
n
ex
t
to
n
o
tim
e
wh
en
th
e
n
u
m
b
er
o
f
I
o
C
s
is
s
m
all
(
1
0
to
5
0
)
,
an
d
it
is
f
in
is
h
ed
in
f
ew
m
illi
s
ec
o
n
d
s
.
T
h
e
alg
o
r
ith
m
h
as
s
u
s
tain
ab
le
ex
ec
u
tio
n
tim
es
with
o
n
ly
a
1
0
0
in
cr
ea
s
e
in
th
e
n
u
m
b
er
o
f
I
o
C
s
,
wh
ich
it
r
eq
u
ir
es
to
co
m
p
lete.
in
ab
o
u
t
0
.
1
5
s
ec
o
n
d
s
.
A
n
o
ticea
b
le
in
cr
ea
s
e
in
ex
ec
u
tio
n
tim
e
o
cc
u
r
s
as
ap
p
r
o
ac
h
5
0
0
I
o
C
s
,
wh
er
e
ex
ec
u
tio
n
tak
es
ar
o
u
n
d
7
.
5
1
s
ec
o
n
d
s
.
W
ith
1
0
0
0
I
o
C
s
,
th
e
ex
ec
u
tio
n
tim
e
clim
b
s
to
1
1
0
.
0
2
s
ec
o
n
d
s
.
T
h
is
in
cr
ea
s
e
s
h
o
ws th
at
tim
e
co
m
p
lex
ity
g
r
o
ws s
ig
n
if
ican
tly
with
lar
g
e
r
d
atasets
.
Evaluation Warning : The document was created with Spire.PDF for Python.
I
n
t J Ar
tif
I
n
tell
I
SS
N:
2252
-
8
9
3
8
P
r
io
r
itiz
in
g
r
a
n
s
o
mw
a
r
e
in
d
ica
to
r
s
o
f c
o
mp
r
o
mis
e
u
s
in
g
a
lg
o
r
ith
mic
…
(
K
r
i
s
h
n
a
P
r
a
s
a
d
D
.
S
u
b
r
a
ma
n
ya
)
3873
T
ab
le
6
.
Per
f
o
r
m
an
ce
ev
alu
ati
o
n
o
f
th
e
p
r
o
p
o
s
ed
I
o
C
r
an
k
in
g
alg
o
r
ith
m
N
u
mb
e
r
o
f
I
o
C
s (n
)
F
a
mi
l
i
e
s
(
m)
M
a
t
r
i
x
c
o
m
p
u
t
a
t
i
o
n
t
i
me
(
s)
S
o
r
t
i
n
g
t
i
me
(
s)
To
t
a
l
e
x
e
c
u
t
i
o
n
t
i
me
(
s)
10
5
0
.
0
0
2
0
.
0
0
0
5
0
.
0
0
2
6
50
10
0
.
0
1
0
.
0
1
2
5
0
.
0
2
3
5
1
0
0
20
0
.
0
5
0
.
1
0
.
1
5
2
5
0
0
50
1
.
2
5
6
.
2
5
7
.
5
1
1
0
0
0
1
0
0
10
1
0
0
1
1
0
.
0
2
Fig
u
r
e
4
.
B
r
ea
k
d
o
wn
o
f
ex
ec
u
tio
n
tim
e
o
f
alg
o
r
ith
m
f
o
r
m
atr
ix
co
m
p
u
tatio
n
an
d
s
o
r
tin
g
B
o
th
s
o
r
tin
g
an
d
m
atr
ix
co
m
p
u
tatio
n
ar
e
ex
tr
em
ely
f
ast
with
u
p
to
1
0
0
I
o
C
s
an
d
tak
e
less
th
an
a
ten
th
o
f
a
s
ec
o
n
d
.
T
h
e
wh
o
le
r
ak
in
g
p
r
o
ce
s
s
is
d
o
n
e
in
m
illi
s
ec
o
n
d
s
o
r
f
r
ac
tio
n
s
o
f
a
s
ec
o
n
d
an
d
is
th
er
ef
o
r
e
,
f
ast.
I
t
s
u
its
b
est
with
r
ea
l
-
ti
m
e
th
r
ea
t
i
n
tellig
en
ce
.
As
th
e
n
u
m
b
er
o
f
I
o
C
s
an
d
r
an
s
o
m
war
e
f
am
ilies
r
is
es,
m
atr
ix
-
v
ec
to
r
m
u
ltip
licatio
n
ti
m
e
s
ca
les
lin
ea
r
ly
.
E
v
en
at
1
0
0
0
I
o
C
s
,
th
e
m
atr
ix
o
p
er
atio
n
r
em
ain
s
ef
f
icien
t
at
ju
s
t
1
0
s
ec
o
n
d
s
,
s
h
o
win
g
th
at
th
is
co
m
p
o
n
en
t
is
co
m
p
u
tatio
n
ally
m
a
n
ag
ea
b
le,
ev
en
in
la
r
g
e
-
s
ca
le
s
ce
n
ar
io
s
.
So
r
tin
g
b
ec
o
m
es
th
e
d
o
m
in
a
n
t
co
s
t
at
lar
g
er
v
alu
es
o
f
‘
n
’
a
s
s
h
o
wn
in
Fig
u
r
e
4
.
At
1
0
0
0
I
o
C
s
,
s
o
r
tin
g
alo
n
e
tak
es
ap
p
r
o
x
im
ately
1
0
0
s
ec
o
n
d
s
,
w
h
ich
is
9
0
%
o
f
th
e
to
tal
e
x
ec
u
tio
n
tim
e.
T
h
e
m
atr
ix
-
b
ased
s
co
r
e
co
m
p
u
tatio
n
c
o
m
p
o
n
en
t
o
f
t
h
e
alg
o
r
ith
m
is
p
r
o
v
e
n
to
b
e
h
ig
h
ly
ef
f
icien
t
an
d
s
ca
lab
le,
r
ein
f
o
r
cin
g
th
e
alg
o
r
ith
m
’
s
s
u
itab
ilit
y
f
o
r
r
e
al
-
tim
e
u
s
e
ca
s
es.
T
h
e
b
r
ea
k
d
o
wn
h
el
p
s
p
in
p
o
in
t
p
e
r
f
o
r
m
an
ce
b
o
ttlen
ec
k
s
,
allo
win
g
tar
g
eted
o
p
tim
izatio
n
with
o
u
t r
ed
esig
n
i
n
g
th
e
e
n
tire
alg
o
r
ith
m
.
Fo
r
th
e
o
v
e
r
all
s
p
ac
e
c
o
m
p
l
ex
ity
,
th
e
p
r
im
ar
y
s
to
r
ag
e
c
o
m
p
o
n
en
ts
in
clu
d
e
th
e
p
ar
s
e
d
d
ata
an
d
co
m
p
u
ted
s
co
r
es.
Giv
en
th
a
t
∣
∣
≈
,
∣
∣
≈
,
th
e
to
tal
s
p
ac
e
co
m
p
lex
ity
is
(
.
)
.
T
h
e
r
esu
lts
ar
e
s
u
m
m
ar
ized
in
T
ab
le
7
.
T
h
e
tab
le
in
d
ica
tes
th
at
ev
en
if
y
o
u
h
ad
1
0
0
0
I
o
C
s
an
d
1
0
0
r
an
s
o
m
war
e
f
am
ilies
,
to
t
al
s
p
ac
e
u
s
ag
e
wo
u
ld
r
em
ain
lo
w,
ar
o
u
n
d
1
0
0
,
0
0
0
u
n
its
.
T
h
e
alg
o
r
ith
m
is
th
u
s
ap
p
licab
le
to
r
ea
l
-
life
s
y
s
tem
s
h
av
in
g
m
o
d
e
r
ate
m
em
o
r
y
r
eso
u
r
ce
s
.
I
n
a
d
d
itio
n
,
s
p
ac
e
g
r
o
wth
is
ea
s
ily
p
r
ed
ictab
le
a
n
d
lin
ea
r
with
in
p
u
t
s
ize.
T
h
is
will
m
ak
e
it
s
ca
lab
le
an
d
ef
f
icien
t
f
o
r
r
ea
l
-
ti
m
e
o
r
b
atch
t
h
r
ea
t
an
aly
s
is
s
ce
n
ar
io
s
.
Fig
u
r
e
5
s
h
o
ws
th
e
r
elatio
n
s
h
ip
o
f
i
n
cr
ea
s
e
in
m
em
o
r
y
u
s
ag
e
w
ith
th
e
n
u
m
b
er
o
f
in
d
icato
r
s
in
th
e
I
o
C
r
an
k
in
g
a
lg
o
r
ith
m
.
T
h
e
s
p
ac
e
u
s
ag
e
–
th
e
s
ize
o
f
th
e
I
o
C
o
cc
u
r
r
en
ce
m
atr
ix
an
d
o
th
er
lis
ts
–
in
cr
ea
s
es
r
eg
u
lar
ly
an
d
r
eliab
ly
as
m
o
r
e
I
o
C
s
ar
e
ad
d
ed
.
T
h
is
tr
en
d
is
co
n
s
is
ten
t
with
th
e
lin
ea
r
s
ca
lab
ilit
y
o
f
th
e
alg
o
r
ith
m
with
r
esp
ec
t
to
th
e
n
u
m
b
er
o
f
I
o
C
s
as
th
e
n
u
m
b
er
o
f
r
an
s
o
m
wa
r
e
f
am
ilies
r
em
ain
s
p
r
o
p
o
r
tio
n
al.
T
h
is
g
r
ap
h
ical
d
is
p
lay
r
ev
ea
ls
th
e
ef
f
icien
c
y
o
f
th
e
alg
o
r
ith
m
an
d
th
e
ab
ilit
y
to
s
ca
le
it,
e
s
p
ec
ially
in
th
e
r
ea
l
-
wo
r
ld
cy
b
er
s
ec
u
r
ity
s
ce
n
ar
io
wh
er
e
h
u
n
d
r
ed
s
o
r
th
o
u
s
an
d
s
o
f
I
o
C
s
wo
u
ld
b
e
ab
le
to
b
e
p
r
o
ce
s
s
ed
at
th
e
s
am
e
tim
e.
As
in
d
icate
d
,
th
e
f
ig
u
r
e
in
d
ic
ates
th
at
ev
en
with
1
0
0
0
I
o
C
s
th
er
e
is
s
till
r
o
o
m
f
o
r
th
e
s
er
v
ice
to
b
e
d
ep
lo
y
e
d
o
n
ty
p
ical
c
o
m
p
u
tin
g
in
f
r
astru
ctu
r
e,
an
d
s
p
ac
e
u
s
ag
e
is
ac
ce
p
tab
le.
T
ab
le
7
.
Sp
ac
e
c
o
m
p
lex
ity
ev
alu
atio
n
o
f
t
h
e
p
r
o
p
o
s
ed
al
g
o
r
i
th
m
N
o
.
o
f
I
o
C
s (
n
)
N
o
.
o
f
f
a
m
i
l
i
e
s
(
m)
M
a
t
r
i
x
s
p
a
c
e
(
n
×
m)
Li
st
s
sp
a
c
e
(
3
n
)
To
t
a
l
sp
a
c
e
10
5
50
30
80
50
10
5
0
0
1
5
0
6
5
0
1
0
0
20
2
0
0
0
3
0
0
2
3
0
0
5
0
0
50
2
5
0
0
0
1
5
0
0
2
6
5
0
0
1
0
0
0
1
0
0
1
0
0
0
0
0
3
0
0
0
1
0
3
0
0
0
Evaluation Warning : The document was created with Spire.PDF for Python.
I
SS
N
:
2
2
5
2
-
8
9
3
8
I
n
t J Ar
tif
I
n
tell
,
Vo
l.
1
5
,
No
.
4
,
Au
g
u
s
t 2
0
2
6
:
3
8
6
5
-
3
8
7
7
3874
Fig
u
r
e
5
.
Sp
ac
e
c
o
m
p
lex
ity
g
r
o
wth
with
in
cr
ea
s
in
g
n
u
m
b
e
r
o
f
I
o
C
s
4
.
3
.
Co
m
pa
ra
t
iv
e
s
t
ud
y
T
h
e
p
r
o
p
o
s
ed
I
o
C
r
an
k
in
g
te
ch
n
iq
u
e
is
co
m
p
ar
e
d
with
ex
is
tin
g
I
o
C
p
r
io
r
itizatio
n
tec
h
n
iq
u
es
as
p
r
esen
ted
in
T
ab
le
8
.
T
h
e
co
m
p
ar
is
o
n
s
h
o
ws
th
at
tr
ad
itio
n
al
ap
p
r
o
ac
h
es
s
u
ch
as
c
o
m
p
r
e
h
en
s
iv
e
ass
ess
m
en
t
an
d
r
atin
g
o
f
I
o
C
s
v
ia
C
AD
E
alg
o
r
ith
m
(
C
AR
I
OC
A)
an
d
Feed
R
an
k
ar
e
p
r
im
ar
ily
b
ased
o
n
f
ee
d
-
le
v
el
ag
g
r
eg
atio
n
o
r
h
eu
r
is
tic
r
u
les.
Alth
o
u
g
h
t
h
ese
tech
n
iq
u
es
r
e
d
u
ce
th
e
am
o
u
n
t
o
f
n
o
n
-
r
elev
an
t
d
ata,
th
ey
h
av
e
n
o
t
p
r
o
v
en
ef
f
ec
tiv
e
in
d
etec
tin
g
r
an
s
o
m
war
e
-
r
elate
d
ac
tiv
ity
.
I
n
co
n
tr
ast,
g
r
ap
h
-
b
ased
o
r
m
ac
h
in
e
lear
n
in
g
(
ML
)
tech
n
i
q
u
es,
s
u
ch
as
g
r
a
p
h
n
eu
r
al
n
etwo
r
k
(
GNN
)
-
b
ased
m
o
d
els,
h
av
e
h
ig
h
er
d
etec
tio
n
p
o
wer
b
u
t
lo
we
r
in
ter
p
r
etab
ilit
y
a
n
d
h
ig
h
co
m
p
u
tatio
n
al
c
o
s
t.
T
h
e
p
r
o
p
o
s
ed
ap
p
r
o
ac
h
ad
d
r
ess
es
th
ese
ch
allen
g
es
b
y
em
p
lo
y
in
g
a
s
im
p
le
weig
h
t
-
b
ased
ap
p
r
o
ac
h
b
ased
o
n
f
r
e
q
u
en
cy
o
f
o
cc
u
r
r
en
ce
,
s
tatic
an
d
d
y
n
am
ic
I
o
C
an
aly
s
is
.
E
f
f
icien
t
an
d
r
eliab
le
p
r
io
r
itizatio
n
ca
n
b
e
d
o
n
e
b
y
h
ig
h
li
g
h
tin
g
th
e
h
i
g
h
im
p
ac
t
I
o
C
s
f
r
o
m
ex
p
er
im
en
tal
r
esu
lts
.
B
esid
es,
it
is
tr
an
s
p
ar
en
t
an
d
h
as
a
h
ig
h
d
is
cr
im
in
ativ
e
ab
ilit
y
,
an
d
h
as
p
r
ed
ictab
le
tim
e
an
d
s
p
ac
e
co
m
p
le
x
ity
.
Ov
er
al
l,
th
e
co
m
p
ar
is
o
n
d
em
o
n
s
tr
at
es
th
at
th
e
p
r
o
p
o
s
ed
ap
p
r
o
ac
h
s
tr
ik
es
a
r
ea
lis
tic
tr
ad
e
-
o
f
f
b
etwe
en
e
f
f
icien
cy
,
in
ter
p
r
etab
ilit
y
,
an
d
d
etec
tio
n
ac
cu
r
ac
y
,
w
h
ich
is
ap
p
r
o
p
r
iate
f
o
r
p
r
ac
tice
ap
p
licatio
n
s
to
r
an
s
o
m
wa
r
e
d
e
tectio
n
.
T
ab
le
8
.
C
o
m
p
a
r
ativ
e
s
tu
d
y
o
f
p
r
o
p
o
s
ed
m
eth
o
d
with
th
e
r
elate
d
ex
is
tin
g
s
tate
o
f
th
e
ar
t
A
sp
e
c
t
C
A
R
I
O
C
A
(
C
A
D
E
-
b
a
s
e
d
)
[
4
0
]
F
e
e
d
R
a
n
k
[
4
1
]
S
TI
X
/
g
r
a
p
h
-
b
a
s
e
d
a
p
p
r
o
a
c
h
e
s
[
4
2
]
M
L/
G
N
N
-
b
a
se
d
a
p
p
r
o
a
c
h
e
s
[
4
3
]
P
r
o
p
o
se
d
I
o
C
r
a
n
k
i
n
g
met
h
o
d
P
r
i
mary
o
b
j
e
c
t
i
v
e
R
e
d
u
c
e
n
o
i
s
e
i
n
sh
a
r
e
d
I
o
C
s
R
a
n
k
t
h
r
e
a
t
i
n
t
e
l
l
i
g
e
n
c
e
f
e
e
d
s
En
r
i
c
h
I
o
C
s
u
si
n
g
g
r
a
p
h
c
o
n
t
e
x
t
Le
a
r
n
c
o
m
p
l
e
x
I
o
C
p
a
t
t
e
r
n
s
P
r
i
o
r
i
t
i
z
e
r
a
n
s
o
mw
a
r
e
-
sp
e
c
i
f
i
c
I
o
C
s
A
n
a
l
y
s
i
s
t
e
c
h
n
i
q
u
e
H
e
u
r
i
s
t
i
c
mu
l
t
i
-
sc
o
r
e
a
g
g
r
e
g
a
t
i
o
n
F
e
e
d
-
l
e
v
e
l
P
a
g
e
R
a
n
k
K
n
o
w
l
e
d
g
e
g
r
a
p
h
t
r
a
v
e
r
s
a
l
S
u
p
e
r
v
i
se
d
/
sem
i
-
su
p
e
r
v
i
se
d
l
e
a
r
n
i
n
g
H
y
b
r
i
d
st
a
t
i
c
&
d
y
n
a
m
i
c
I
o
C
f
r
e
q
u
e
n
c
y
+
w
e
i
g
h
t
-
b
a
s
e
d
sc
o
r
i
n
g
I
n
t
e
r
p
r
e
t
a
b
i
l
i
t
y
M
e
d
i
u
m
M
e
d
i
u
m
Lo
w
(
g
r
a
p
h
c
o
m
p
l
e
x
i
t
y
)
Lo
w
(
b
l
a
c
k
-
b
o
x
mo
d
e
l
s)
H
i
g
h
(
t
r
a
n
s
p
a
r
e
n
t
sc
o
r
e
c
o
n
t
r
i
b
u
t
i
o
n
p
e
r
I
o
C
)
Ti
me
c
o
m
p
l
e
x
i
t
y
O
(
N
)
O
(
N
+
T
·
E
)
O
(
V
+
E
)
O
(
E
p
o
c
hs
·
(
V
+
E
)
)
O
(
n
·
m
)
+
s
o
r
t
i
n
g
(
o
p
t
i
m
i
z
a
b
l
e
t
o
O
(
n
lo
g
n
)
)
S
p
a
c
e
c
o
m
p
l
e
x
i
t
y
O
(
N
)
O
(
N
)
O
(
V
+
E
)
O
(
V
+
E
)
+
m
o
d
e
l
p
a
r
a
m
e
t
e
r
s
O
(
n
·
m
)
,
b
o
u
n
d
e
d
a
n
d
p
r
e
d
i
c
t
a
b
l
e
C
o
m
p
u
t
a
t
i
o
n
a
l
o
v
e
r
h
e
a
d
Lo
w
M
o
d
e
r
a
t
e
H
i
g
h
V
e
r
y
h
i
g
h
M
o
d
e
r
a
t
e
a
n
d
c
o
n
t
r
o
l
l
a
b
l
e
S
u
i
t
a
b
i
l
i
t
y
f
o
r
r
e
a
l
-
t
i
m
e
d
e
t
e
c
t
i
o
n
H
i
g
h
M
o
d
e
r
a
t
e
Lo
w
Lo
w
H
i
g
h
(
a
f
t
e
r
s
o
r
t
i
n
g
o
p
t
i
m
i
z
a
t
i
o
n
)
A
b
i
l
i
t
y
t
o
d
i
s
t
i
n
g
u
i
sh
r
a
n
s
o
mw
a
r
e
b
e
h
a
v
i
o
r
s
Li
mi
t
e
d
I
n
d
i
r
e
c
t
C
o
n
t
e
x
t
-
d
e
p
e
n
d
e
n
t
H
i
g
h
(
i
f
t
r
a
i
n
e
d
w
e
l
l
)
V
e
r
y
H
i
g
h
(
c
l
e
a
r
sc
o
r
e
sep
a
r
a
t
i
o
n
o
b
ser
v
e
d
)
Ex
p
e
r
i
m
e
n
t
a
l
o
u
t
c
o
me
F
e
e
d
n
o
i
se
r
e
d
u
c
t
i
o
n
R
e
l
i
a
b
l
e
f
e
e
d
r
a
n
k
i
n
g
I
mp
r
o
v
e
d
c
o
n
f
i
d
e
n
c
e
I
mp
r
o
v
e
d
a
c
c
u
r
a
c
y
C
l
e
a
r
p
r
i
o
r
i
t
i
z
a
t
i
o
n
o
f
h
i
g
h
-
i
m
p
a
c
t
r
a
n
s
o
mw
a
r
e
I
o
C
s (≈9
9
.
9
9
)
Evaluation Warning : The document was created with Spire.PDF for Python.