{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T18:30:33Z","timestamp":1743013833596,"version":"3.40.3"},"publisher-location":"Cham","reference-count":28,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319764801"},{"type":"electronic","value":"9783319764818"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-76481-8_5","type":"book-chapter","created":{"date-parts":[[2018,2,28]],"date-time":"2018-02-28T23:15:28Z","timestamp":1519859728000},"page":"60-72","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["RARE: A Systematic Augmented Router Emulation for Malware Analysis"],"prefix":"10.1007","author":[{"given":"Ahmad","family":"Darki","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chun-Yu","family":"Chuang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michalis","family":"Faloutsos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiyun","family":"Qian","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Heng","family":"Yin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,3,2]]},"reference":[{"key":"5_CR1","unstructured":"Openwrt embedded devices linux. https:\/\/openwrt.org\/ . Accessed 22 Sep 2017"},{"key":"5_CR2","unstructured":"Antonakakis, M., et al.: Understanding the Mirai botnet. In: 26th USENIX Security Symposium (USENIX Security 2017) (2017)"},{"key":"5_CR3","unstructured":"Appneta: Tcpreplay (2016). http:\/\/tcpreplay.appneta.com\/"},{"issue":"1","key":"5_CR4","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1007\/s11416-006-0012-2","volume":"2","author":"U Bayer","year":"2006","unstructured":"Bayer, U., et al.: Dynamic analysis of malicious code. J. Comput. Virol. 2(1), 67\u201377 (2006)","journal-title":"J. Comput. Virol."},{"key":"5_CR5","unstructured":"Bellard, F.: QEMU, a fast and portable dynamic translator. In: USENIX, FREENIX Track (2005)"},{"key":"5_CR6","doi-asserted-by":"crossref","unstructured":"Chen, D.D., Woo, M., Brumley, D., Egele, M.: Towards automated dynamic analysis for linux-based embedded firmware. In: NDSS (2016)","DOI":"10.14722\/ndss.2016.23415"},{"key":"5_CR7","unstructured":"Cho, K., Mitsuya, K., Kato, A.: Traffic data repository maintained by the MAWI working group of the wide project (2005). http:\/\/mawi.wide.ad.jp\/mawi"},{"key":"5_CR8","unstructured":"Cho, K., et al.: Traffic data repository at the wide project. In: USENIX, ATEC (2000)"},{"key":"5_CR9","doi-asserted-by":"crossref","unstructured":"Christodorescu, M., Jha, S.: Static analysis of executables to detect malicious patterns. Technical report, Wisconsin Univ-Madison Department of Computer Sciences (2006)","DOI":"10.21236\/ADA449067"},{"key":"5_CR10","doi-asserted-by":"crossref","unstructured":"Costin, A., et al.: Automated dynamic firmware analysis at scale: a case study on embedded web interfaces. In: Asia CCS (2016)","DOI":"10.1145\/2897845.2897900"},{"key":"5_CR11","unstructured":"Costin, A., Zaddach, J., Francillon, A., Balzarotti, D., Antipolis, S.: A large-scale analysis of the security of embedded firmwares. In: USENIX Security (2014)"},{"key":"5_CR12","doi-asserted-by":"crossref","unstructured":"Dolan-Gavitt, B., et al.: Tappan zee (north) bridge: mining memory accesses for introspection. In: ACM SIGSAC CCS. ACM (2013)","DOI":"10.1145\/2508859.2516697"},{"key":"5_CR13","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1145\/2619091","volume":"32","author":"W Enck","year":"2014","unstructured":"Enck, W., et al.: Taintdroid: an information-flow tracking system for realtime privacy monitoring on smartphones. ACM TOCS 32, 5 (2014)","journal-title":"ACM TOCS"},{"key":"5_CR14","doi-asserted-by":"crossref","unstructured":"Feng, Q., et al.: Scalable graph-based bug search for firmware images. In: ACM SIGSAC CCS (2016)","DOI":"10.1145\/2976749.2978370"},{"key":"5_CR15","unstructured":"Gasparis, I., Qian, Z., Song, C., Krishnamurthy, S.V.: Detecting android root exploits by learning from root providers. In: USENIX Security (2017)"},{"key":"5_CR16","unstructured":"Hampton, N., et al.: A survey and method for analysing soho router firmware currency. In: Australian Information Security Management Conference (2015)"},{"key":"5_CR17","doi-asserted-by":"crossref","unstructured":"Henderson, A., et al.: Make it work, make it right, make it fast: building a platform-neutral whole-system dynamic binary analysis platform. In: ACM STA (2014)","DOI":"10.1145\/2610384.2610407"},{"key":"5_CR18","unstructured":"Hex-Rays: IDA pro disassembler (2008)"},{"key":"5_CR19","doi-asserted-by":"publisher","first-page":"233","DOI":"10.1007\/s11416-011-0151-y","volume":"7","author":"J Kinable","year":"2011","unstructured":"Kinable, J., Kostakis, O.: Malware classification based on call graph clustering. J. Comput. Virol. 7, 233\u2013245 (2011)","journal-title":"J. Comput. Virol."},{"key":"5_CR20","unstructured":"Kolbitsch, C., et al.: Effective and efficient malware detection at the end host. In: USENIX Security Symposium (2009)"},{"key":"5_CR21","doi-asserted-by":"crossref","unstructured":"Kolbitsch, C., Holz, T., Kruegel, C., Kirda, E.: Inspector gadget: automated extraction of proprietary gadgets from malware binaries. In: IEEE S&P (2010)","DOI":"10.1109\/SP.2010.10"},{"key":"5_CR22","doi-asserted-by":"crossref","unstructured":"Lanzi, A., et al.: Accessminer: using system-centric models for malware protection. In: ACM CCS (2010)","DOI":"10.1145\/1866307.1866353"},{"key":"5_CR23","doi-asserted-by":"crossref","unstructured":"Moser, A., et al.: Limits of static analysis for malware detection. In: IEEE ACSAC (2007)","DOI":"10.1109\/ACSAC.2007.21"},{"key":"5_CR24","doi-asserted-by":"crossref","unstructured":"Papp, D., et al.: Embedded systems security: threats, vulnerabilities, and attack taxonomy. In: IEEE PST (2015)","DOI":"10.1109\/PST.2015.7232966"},{"key":"5_CR25","doi-asserted-by":"crossref","unstructured":"Paquet-Clouston, M., et al.: Can we trust social media data?: Social network manipulation by an IoT botnet. In: ACM Conference on Social Media & Society (2017)","DOI":"10.1145\/3097286.3097301"},{"key":"5_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-540-89862-7_1","volume-title":"Information Systems Security","author":"D Song","year":"2008","unstructured":"Song, D., Brumley, D., Yin, H., Caballero, J., Jager, I., Kang, M.G., Liang, Z., Newsome, J., Poosankam, P., Saxena, P.: BitBlaze: a new approach to computer security via binary analysis. In: Sekar, R., Pujari, A.K. (eds.) ICISS 2008. LNCS, vol. 5352, pp. 1\u201325. Springer, Heidelberg (2008). https:\/\/doi.org\/10.1007\/978-3-540-89862-7_1"},{"key":"5_CR27","doi-asserted-by":"crossref","unstructured":"Tam, K., et al.: Copperdroid: automatic reconstruction of android malware behaviors. In: NDSS (2015)","DOI":"10.14722\/ndss.2015.23145"},{"key":"5_CR28","doi-asserted-by":"crossref","unstructured":"Zaddach, J., Bruno, L., Francillon, A., Balzarotti, D.: Avatar: a framework to support dynamic security analysis of embedded systems\u2019 firmwares. In: NDSS (2014)","DOI":"10.14722\/ndss.2014.23229"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-76481-8_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,11]],"date-time":"2019-10-11T22:26:20Z","timestamp":1570832780000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-76481-8_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319764801","9783319764818"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-76481-8_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2018]]}}}