Deriving common malware behavior through graph clustering
Detecting kernel-level rootkits through binary analysis