{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,16]],"date-time":"2026-03-16T09:29:59Z","timestamp":1773653399894,"version":"3.50.1"},"publisher-location":"Berlin, Heidelberg","reference-count":18,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540735465","type":"print"},{"value":"9783540735472","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1007\/978-3-540-73547-2_49","type":"book-chapter","created":{"date-parts":[[2007,8,11]],"date-time":"2007-08-11T14:54:52Z","timestamp":1186844092000},"page":"478-488","source":"Crossref","is-referenced-by-count":8,"title":["Generating Simplified Regular Expression Signatures for Polymorphic Worms"],"prefix":"10.1007","author":[{"given":"Yong","family":"Tang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xicheng","family":"Lu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bin","family":"Xiao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"49_CR1","doi-asserted-by":"crossref","unstructured":"Kreibich, C., Crowcroft, J.: Honeycomb - creating intrusion detection signatures using honeypots. In: Proceedings of the Second Workshop on Hot Topics in Networks (Hotnets II), Boston (November 2003)","DOI":"10.1145\/972374.972384"},{"key":"49_CR2","unstructured":"Kim, H.A., Karp, B.: Autograph: Toward automated, distributed worm signature detection. In: USENIX Security Symposium, pp. 271\u2013286 (2004)"},{"key":"49_CR3","unstructured":"Singh, S., Estan, C., Varghese, G., Savage, S.: Automated worm fingerprinting. In: Proc. 6th USENIX OSDI, San Francisco, CA (December 2004)"},{"key":"49_CR4","doi-asserted-by":"crossref","first-page":"226","DOI":"10.1109\/SP.2005.15","volume-title":"Proceedings of the 2005 IEEE Symposium on Security and Privacy","author":"J. Newsome","year":"2005","unstructured":"Newsome, J., Karp, B., Song, D.: Polygraph: Automatically generating signatures for polymorphic worms. In: Proceedings of the 2005 IEEE Symposium on Security and Privacy, pp. 226\u2013241. IEEE Computer Society Press, Washington (2005)"},{"key":"49_CR5","doi-asserted-by":"publisher","first-page":"235","DOI":"10.1145\/1102120.1102152","volume-title":"Proceedings of the 12th ACM conference on Computer and communications security","author":"J.R. Crandall","year":"2005","unstructured":"Crandall, J.R., Su, Z., Wu, S.F., Chong, F.T.: On deriving unknown vulnerabilities from zero-day polymorphic and metamorphic worm exploits. In: Proceedings of the 12th ACM conference on Computer and communications security, pp. 235\u2013248. ACM Press, New York (2005)"},{"key":"49_CR6","volume-title":"Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P 2006)","author":"Z. Li","year":"2006","unstructured":"Li, Z., Sanghi, M., Chen, Y., Kao, M.-Y., Chavez, B.: Hamsa: Fast signature generation for zero-day polymorphic worms with provable attack resilience. In: Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P 2006), IEEE Computer Society Press, Washington (2006)"},{"key":"49_CR7","unstructured":"Newsome, J., Song, D.: Dynamic taint analysis for automatic detection, analysis, and signaturegeneration of exploits on commodity software. In: NDSS (2005)"},{"key":"49_CR8","doi-asserted-by":"publisher","first-page":"213","DOI":"10.1145\/1102120.1102150","volume-title":"CCS 2005: Proceedings of the 12th ACM conference on Computer and communications security","author":"Z. Liang","year":"2005","unstructured":"Liang, Z., Sekar, R.: Fast and automated generation of attack signatures: a basis for building self-protecting servers. In: CCS 2005: Proceedings of the 12th ACM conference on Computer and communications security, pp. 213\u2013222. ACM Press, New York (2005)"},{"key":"49_CR9","doi-asserted-by":"publisher","first-page":"223","DOI":"10.1145\/1102120.1102151","volume-title":"CCS 2005: Proceedings of the 12th ACM conference on Computer and communications security","author":"J. Xu","year":"2005","unstructured":"Xu, J., Ning, P., Kil, C., Zhai, Y., Bookholt, C.: Automatic diagnosis and response to memory corruption vulnerabilities. In: CCS 2005: Proceedings of the 12th ACM conference on Computer and communications security, pp. 223\u2013234. ACM Press, New York (2005)"},{"key":"49_CR10","doi-asserted-by":"publisher","first-page":"37","DOI":"10.1145\/1180405.1180412","volume-title":"CCS 2006: Proceedings of the 13th ACM conference on Computer and communications security","author":"X. Wang","year":"2006","unstructured":"Wang, X., Li, Z., Xu, J., Reiter, M.K., Kil, C., Choi, J.Y.: Packet vaccine: black-box exploit detection and signature generation. In: CCS 2006: Proceedings of the 13th ACM conference on Computer and communications security, pp. 37\u201346. ACM Press, New York (2006)"},{"key":"49_CR11","doi-asserted-by":"publisher","first-page":"262","DOI":"10.1145\/948109.948145","volume-title":"CCS 2003: Proceedings of the 10th ACM conference on Computer and communications security","author":"R. Sommer","year":"2003","unstructured":"Sommer, R., Paxson, V.: Enhancing byte-level network intrusion detection signatures with context. In: CCS 2003: Proceedings of the 10th ACM conference on Computer and communications security, pp. 262\u2013271. ACM Press, New York (2003)"},{"key":"49_CR12","first-page":"339","volume-title":"Proceedings of ACM SIGCOMM 2006","author":"S. Kumar","year":"2006","unstructured":"Kumar, S., Dharmapurikar, S., Yu, F., Crowley, P., Turner, J.: Algorithms to accelerate multiple regular expressions matching for deep packet inspection. In: Proceedings of ACM SIGCOMM 2006, vol.\u00a036, pp. 339\u2013350. ACM Press, New York (2006)"},{"key":"49_CR13","unstructured":"Tang, Y., Chen, S.: Defending against internet worms: A signature-based approach. In: Proceedings of the 24th Annual Conference IEEE INFOCOM 2005 (March 2005)"},{"key":"49_CR14","doi-asserted-by":"crossref","unstructured":"Gelfand, M.S., Mironov, A., Pevzner, P.: Gene recognition via splices sequence alignment. In: Proc. Natl. Acad. Sci. USA, pp. 9061\u20139066 (1996)","DOI":"10.1073\/pnas.93.17.9061"},{"key":"49_CR15","doi-asserted-by":"publisher","first-page":"247","DOI":"10.1093\/nar\/10.1.247","volume":"10","author":"W.B. Goad","year":"1982","unstructured":"Goad, W.B., Kanehisa, M.I.: Pattern recognition in nucleic acid sequences: a general method for finding local homologies and symmetries. Nucleic Acids Research\u00a010, 247\u2013263 (1982)","journal-title":"Nucleic Acids Research"},{"key":"49_CR16","doi-asserted-by":"publisher","first-page":"443","DOI":"10.1016\/0022-2836(70)90057-4","volume":"48","author":"S.B. Needleman","year":"1970","unstructured":"Needleman, S.B., Wunsch, C.D.: A general method applicable to the search for similarities in the amino acid sequence of two proteins. J. Mol. Biol.\u00a048, 443\u2013453 (1970)","journal-title":"J. Mol. Biol."},{"issue":"4","key":"49_CR17","doi-asserted-by":"publisher","first-page":"579","DOI":"10.1016\/S1389-1286(00)00139-0","volume":"34","author":"R. Lippmann","year":"2000","unstructured":"Lippmann, R., Haines, J.W., Fried, D.J., Korba, J., Das, K.: The 1999 darpa off-line intrusion detection evaluation. Comput. Networks\u00a034(4), 579\u2013595 (2000)","journal-title":"Comput. Networks"},{"key":"49_CR18","doi-asserted-by":"crossref","unstructured":"Yegneswaran, V., Giffin, J.T., Barford, P., Jha, S.: An Architecture for Generating Semantics-Aware Signatures. In: Proceedings of the 14th USENIX Security Symposium, Baltimore, MD, USA, pp. 97\u2013112 (August 2005)","DOI":"10.21236\/ADA449063"}],"container-title":["Lecture Notes in Computer Science","Autonomic and Trusted Computing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-73547-2_49.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,19]],"date-time":"2020-11-19T05:16:04Z","timestamp":1605762964000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-73547-2_49"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"ISBN":["9783540735465","9783540735472"],"references-count":18,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-73547-2_49","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[]}}