{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T06:07:38Z","timestamp":1784873258471,"version":"3.55.0"},"publisher-location":"Cham","reference-count":24,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783031223891","type":"print"},{"value":"9783031223907","type":"electronic"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-031-22390-7_19","type":"book-chapter","created":{"date-parts":[[2022,12,9]],"date-time":"2022-12-09T00:03:46Z","timestamp":1670544226000},"page":"319-338","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["ATLAS: A Practical Attack Detection and Live Malware Analysis System for IoT Threat Intelligence"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7640-2821","authenticated-orcid":false,"given":"Yan Lin","family":"Aung","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7816-5775","authenticated-orcid":false,"given":"Mart\u00edn","family":"Ochoa","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0594-0432","authenticated-orcid":false,"given":"Jianying","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,12,9]]},"reference":[{"key":"19_CR1","unstructured":"A., N.: Lumen - an alternative lumina compatible server for IDA Pro (2020). https:\/\/lumen.abda.nl"},{"key":"19_CR2","doi-asserted-by":"crossref","unstructured":"Alrubayyi, H., Goteng, G., Jaber, M., Kelly, J.: Challenges of malware detection in the IoT and a review of artificial immune system approaches. J. Sensor Actuator Netw. 10(4) (2021). https:\/\/www.mdpi.com\/2224-2708\/10\/4\/61","DOI":"10.3390\/jsan10040061"},{"key":"19_CR3","doi-asserted-by":"crossref","unstructured":"Aung, Y.L., Tiang, H.H., Wijaya, H., Ochoa, M., Zhou, J.: Scalable VPN-forwarded honeypots: Dataset and threat intelligence insights. In: Sixth Annual Industrial Control System Security (ICSS) Workshop. pp. 21\u201330. ACM, New York, NY, USA (2020)","DOI":"10.1145\/3442144.3442146"},{"key":"19_CR4","unstructured":"Burks, D.: Security Onion - a free and open platform for threat hunting, network security monitoring, and log management (2021). https:\/\/securityonionsolutions.com"},{"key":"19_CR5","unstructured":"Elastic: Elasticsearch, Logstash and Kibana (ELK) stack (2021). https:\/\/www.elastic.co"},{"key":"19_CR6","doi-asserted-by":"crossref","unstructured":"Guarnizo, J.D., et al.: SIPHON: towards scalable high-interaction physical honeypots. In: Proceedings of the ACM Workshop on Cyber-Physical System Security, pp. 57\u201368. ACM (2017)","DOI":"10.1145\/3055186.3055192"},{"key":"19_CR7","doi-asserted-by":"publisher","first-page":"96899","DOI":"10.1109\/ACCESS.2020.2995887","volume":"8","author":"J Jeon","year":"2020","unstructured":"Jeon, J., Park, J.H., Jeong, Y.S.: Dynamic analysis for IoT malware detection with convolution neural network model. IEEE Access 8, 96899\u201396911 (2020)","journal-title":"IEEE Access"},{"key":"19_CR8","unstructured":"Kato, S., Tanabe, R., Yoshioka, K., Matsumoto, T.: Adaptive observation of emerging cyber attacks targeting various IoT devices. In: 2021 IFIP\/IEEE International Symposium on Integrated Network Management (IM), pp. 143\u2013151 (2021)"},{"key":"19_CR9","unstructured":"LLC, G.: BinExport - exporter component of BinDiff (2021). https:\/\/github.com\/google\/binexport"},{"key":"19_CR10","unstructured":"Luo, T., Xu, Z., Jin, X., Jia, Y., Ouyang, X.: IoTCandyJar: towards an intelligent-interaction honeypot for IoT devices. In: Proceedings of Blackhat (2017)"},{"key":"19_CR11","unstructured":"Minerva, R., Biru, A., Rotondi, D.: Towards a definition of the Internet of Things (IoT). IEEE Internet Initiative (2015). http:\/\/iot.ieee.org\/images\/files\/pdf\/IEEE_IoT_Towards_Definition_Internet_of_Things_Revision1_27MAY15.pdf"},{"key":"19_CR12","unstructured":"Neray, P.: Cloud-delivered IoT\/OT threat intelligence (2021). https:\/\/techcommunity.microsoft.com\/t5\/microsoft-defender-for-iot-blog\/cloud-delivered-iot-ot-threat-intelligence-now-available-for\/ba-p\/2335754"},{"key":"19_CR13","doi-asserted-by":"crossref","unstructured":"Nokia: Threat intelligence report 2020 (2021). https:\/\/www.nokia.com\/networks\/portfolio\/cyber-security\/threat-intelligence-report-2020","DOI":"10.1016\/S1361-3723(21)00071-3"},{"key":"19_CR14","unstructured":"(NSA), N.S.A.: Ghidra - a software reverse engineering (SRE) suite of tools (2021). https:\/\/ghidra-sre.org"},{"key":"19_CR15","unstructured":"Oliver, J., Cheng, C., Chen, Y.: TLSH - a locality sensitive hash (2021). https:\/\/documents.trendmicro.com\/assets\/wp\/wp-locality-sensitive-hash.pdf"},{"issue":"3","key":"19_CR16","first-page":"522","volume":"24","author":"YMP Pa","year":"2016","unstructured":"Pa, Y.M.P., Suzuki, S., Yoshioka, K., Matsumoto, T., Kasama, T., Rossow, C.: IoTPOT: a novel honeypot for revealing current IoT threats. J. Inf. Process. 24(3), 522\u2013533 (2016)","journal-title":"J. Inf. Process."},{"key":"19_CR17","doi-asserted-by":"crossref","unstructured":"Park, Y., Reeves, D.S., Stamp, M.: Deriving common malware behavior through graph clustering. Comput. Secur. 39, 419\u2013430 (2013). https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0167404813001351","DOI":"10.1016\/j.cose.2013.09.006"},{"key":"19_CR18","unstructured":"Provos, N., et al.: A virtual honeypot framework. In: Proceedings of USENIX Security Symposium, vol. 173, pp. 1\u201314 (2004)"},{"key":"19_CR19","unstructured":"Rist, L.: Conpot - ICS\/SCADA honeypot (2021). https:\/\/github.com\/mushorg\/conpot"},{"key":"19_CR20","doi-asserted-by":"crossref","unstructured":"Sebasti\u00e1n, S., Caballero, J.: AVClass2: Massive malware tag extraction from AV labels. In: Annual Computer Security Applications Conference, pp. 42\u201353. ACM, New York, NY, USA (2020)","DOI":"10.1145\/3427228.3427261"},{"key":"19_CR21","unstructured":"Splunk: Splunk - data-driven security for the modern SOC (2021). https:\/\/www.splunk.com\/en_us\/cyber-security.html"},{"key":"19_CR22","doi-asserted-by":"crossref","unstructured":"Tambe, A., et al.: Detection of threats to IoT devices using scalable VPN-forwarded honeypots. In: Proceedings of the Ninth ACM Conference on Data and Application Security and Privacy, pp. 85\u201396. ACM, New York, NY, USA (2019)","DOI":"10.1145\/3292006.3300024"},{"key":"19_CR23","doi-asserted-by":"crossref","unstructured":"Wang, B., Dou, Y., Sang, Y., Zhang, Y., Huang, J.: IoTCMal: towards a hybrid IoT honeypot for capturing and analyzing malware. In: ICC 2020\u20132020 IEEE International Conference on Communications (ICC), pp. 1\u20137 (2020)","DOI":"10.1109\/ICC40277.2020.9149314"},{"issue":"1","key":"19_CR24","doi-asserted-by":"publisher","first-page":"99","DOI":"10.1109\/TDSC.2017.2675881","volume":"16","author":"T W\u00fcchner","year":"2019","unstructured":"W\u00fcchner, T., Cis\u0142ak, A., Ochoa, M., Pretschner, A.: Leveraging compression-based graph mining for behavior-based malware detection. IEEE Trans. Depend. Secur. Comput. 16(1), 99\u2013112 (2019)","journal-title":"IEEE Trans. Depend. Secur. Comput."}],"container-title":["Lecture Notes in Computer Science","Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-22390-7_19","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,9]],"date-time":"2022-12-09T00:05:41Z","timestamp":1670544341000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-22390-7_19"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783031223891","9783031223907"],"references-count":24,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-22390-7_19","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"9 December 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ISC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Bali","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Indonesia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 December 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 December 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"isw2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/isc2022.petra.ac.id\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easy Chair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"72","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"21","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"8","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"29% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}