{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,19]],"date-time":"2025-03-19T14:10:49Z","timestamp":1742393449193},"publisher-location":"Berlin, Heidelberg","reference-count":10,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540266136"},{"type":"electronic","value":"9783540316459"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2005]]},"DOI":"10.1007\/11506881_1","type":"book-chapter","created":{"date-parts":[[2010,7,14]],"date-time":"2010-07-14T20:30:33Z","timestamp":1279139433000},"page":"1-18","source":"Crossref","is-referenced-by-count":7,"title":["Analyzing Memory Accesses in Obfuscated x86 Executables"],"prefix":"10.1007","author":[{"given":"Michael","family":"Venable","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohamed R.","family":"Chouchane","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Md Enamul","family":"Karim","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Arun","family":"Lakhotia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"1_CR1","doi-asserted-by":"crossref","unstructured":"Linn, C., Debray, S.: Obfuscation of Executable Code to Improve Resistance to Static Disassembly. In: 10th ACM Conference on Computer and Communications Security, CCS (2003)","DOI":"10.1145\/948109.948149"},{"key":"1_CR2","unstructured":"Collberg, C., Thomborson, C., Low, D.: A Taxonomy of Obfuscating Transformations. Technical Report 148, Department of Computer Science, University of Auckland (1997)"},{"key":"1_CR3","doi-asserted-by":"crossref","unstructured":"Lakhotia, A., Kumar, E.U.: Abstract Stack Graph to Detect Obfuscated Calls in Binaries. In: Fourth IEEE International Workshop on Source Code Analysis and Manipulation(SCAM 2004), Chicago, Illinois (2004)","DOI":"10.1109\/SCAM.2004.2"},{"key":"1_CR4","unstructured":"Sz\u00f6r, P., Ferrie, P.: Hunting for Metamorphic. In: Virus Bulletin Conference, Prague, Czech Republic (2001)"},{"key":"1_CR5","unstructured":"Lakhotia, A., Singh, P.K.: Challenges in Getting \u2019Formal\u2019 with Viruses. Virus Bulletin (2003)"},{"key":"1_CR6","unstructured":"Sz\u00f6r, P.: The New 32-Bit Medusa. Virus Bulletin, 8\u201310 (2000)"},{"key":"1_CR7","unstructured":"Bergeron, J., Debbabi, M.: Detection of Malicious Code in Cots Software: A Short Survey. In: First International Software Assurance Certification Conference (ISACC 1999), Washington DC (1999)"},{"key":"1_CR8","unstructured":"Symantec, Understanding Heuristics: Symantec\u2019s Bloodhound Technology, http:\/\/www.symantec.com\/avcenter\/reference\/heuristc.pdf (Last accessed July 1, 2004)"},{"key":"1_CR9","doi-asserted-by":"crossref","unstructured":"Balakrishnan, G., Reps, T.: Analyzing Memory Accesses in X86 Executables. In: 13th International Conference on Compiler Construction (2004)","DOI":"10.1007\/978-3-540-24723-4_2"},{"key":"1_CR10","doi-asserted-by":"crossref","unstructured":"Cousot, P., Cousot, R.: Static Determination of Dynamic Properties of Programs. In: 2nd Int. Symp. on Programming, Dumod, Paris, France (1976)","DOI":"10.1145\/390018.808314"}],"container-title":["Lecture Notes in Computer Science","Detection of Intrusions and Malware, and Vulnerability Assessment"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/11506881_1.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,31]],"date-time":"2021-10-31T11:43:53Z","timestamp":1635680633000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/11506881_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2005]]},"ISBN":["9783540266136","9783540316459"],"references-count":10,"URL":"https:\/\/doi.org\/10.1007\/11506881_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2005]]}}}