Classifies malicious software by behavior and studies delivery, execution, persistence, command-and-control, evasion, and safe static and dynamic analysis.