Malware detection using bilayer behavior abstraction and improved one-class support vector machines
Ether: malware analysis via hardware virtualization extensions