Blanket execution: dynamic similarity testing for program binaries and components
Scalable, Behavior-Based Malware Clustering