{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,7]],"date-time":"2024-09-07T10:48:01Z","timestamp":1725706081701},"publisher-location":"Berlin, Heidelberg","reference-count":22,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642346002"},{"type":"electronic","value":"9783642346019"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-34601-9_20","type":"book-chapter","created":{"date-parts":[[2012,11,16]],"date-time":"2012-11-16T02:04:18Z","timestamp":1353031458000},"page":"263-276","source":"Crossref","is-referenced-by-count":1,"title":["Operating System Kernel Data Disambiguation to Support Security Analysis"],"prefix":"10.1007","author":[{"given":"Amani S.","family":"Ibrahim","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"John","family":"Grundy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"James","family":"Hamlyn-Harris","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohamed","family":"Almorsy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"20_CR1","doi-asserted-by":"crossref","unstructured":"Baliga, A., Ganapathy, V., Iftode, L.: Automatic Inference and Enforcement of Kernel Data Structure Invariants. In: Proc. of 2008 Annual Computer Security Applications Conference, pp. 77\u201386 (2008)","DOI":"10.1109\/ACSAC.2008.29"},{"key":"20_CR2","doi-asserted-by":"crossref","unstructured":"Dolan-Gavitt, B., Srivastava, A., Traynor, P., Giffin, J.: Robust signatures for kernel data structures. In: Proc. of 16th ACM Conference on Computer and Communications Security, Illinois, USA, pp. 566\u2013577 (2009)","DOI":"10.1145\/1653662.1653730"},{"issue":"1","key":"20_CR3","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1109\/MPOT.2009.935611","volume":"29","author":"A. Ibrahim","year":"2010","unstructured":"Ibrahim, A., Shouman, M., Faheem, H.: Surviving cyber warfare with a hybrid multiagent-base intrusion prevention system. IEEE Potentials\u00a029(1), 32\u201340 (2010)","journal-title":"IEEE Potentials"},{"key":"20_CR4","doi-asserted-by":"crossref","unstructured":"Carbone, M., Cui, W., Lu, L., Lee, W.: Mapping kernel objects to enable systematic integrity checking. In: Proc. of 16th ACM Conference on Computer and Communications Security, Chicago, USA, pp. 555\u2013565 (2009)","DOI":"10.1145\/1653662.1653729"},{"key":"20_CR5","doi-asserted-by":"crossref","unstructured":"Whaley, J., Lam, M.S.: Cloning-based context-sensitive pointer alias analysis using binary decision diagrams. In: Proc. of ACM SIGPLAN 2004 Conference on Programming Language Design and Implementation, Washington DC, USA, pp. 131\u2013144 (2004)","DOI":"10.1145\/996841.996859"},{"key":"20_CR6","doi-asserted-by":"crossref","unstructured":"Heintze, N., Tardieu, O.: Ultra-fast aliasing analysis using CLA: a million lines of C code in a second. In: Proc. of ACM SIGPLAN 2001 Conference on Programming Language Design and Implementation, Utah, USA, pp. 254\u2013263 (2001)","DOI":"10.1145\/381694.378855"},{"issue":"8","key":"20_CR7","doi-asserted-by":"publisher","first-page":"657","DOI":"10.1109\/TSE.2005.94","volume":"31","author":"M. Mock","year":"2005","unstructured":"Mock, M., Atkinson, D.C., Chambers, C., Eggers, S.J.: Program Slicing with Dynamic Points-To Sets. IEEE Trans. Softw. Eng.\u00a031(8), 657\u2013678 (2005)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"20_CR8","doi-asserted-by":"crossref","unstructured":"Hofmann, O.S., Dunn, A.M., Kim, S.: Ensuring operating system kernel integrity with OSck. In: Proc. of 16th International Conference on Architectural Support for Programming Languages and Operating Systems, California, USA, pp. 279\u2013290 (2011)","DOI":"10.1145\/1950365.1950398"},{"key":"20_CR9","doi-asserted-by":"crossref","unstructured":"Petroni, N.L., Hicks, M.: Automated detection of persistent kernel control-flow attacks. In: Proc of 14th ACM Conference on Computer and Communications Security, Alexandria, Virginia, USA, pp. 103\u2013115 (2007)","DOI":"10.1145\/1315245.1315260"},{"key":"20_CR10","unstructured":"Lin, Z., Rhee, J., Zhang, X.: SigGraph: Brute Force Scanning of Kernel Data Structure Instances Using Graph-based Signatures. In: Proc. of 18th Network and Distributed System Security Symposium, San Diego, CA (2011)"},{"key":"20_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"400","DOI":"10.1007\/3-540-36415-3_26","volume-title":"Information Hiding","author":"Y. Chen","year":"2003","unstructured":"Chen, Y., Venkatesan, R., Cary, M., Pang, R., Sinha, S., Jakubowski, M.H.: Oblivious Hashing: A Stealthy Software Integrity Verification Primitive. In: Petitcolas, F.A.P. (ed.) IH 2002. LNCS, vol.\u00a02578, pp. 400\u2013414. Springer, Heidelberg (2003)"},{"key":"20_CR12","unstructured":"Pearce, D.J., Kelly, P.H., Hankin, C.: Efficient field-sensitive pointer analysis for C. In: Proc. of 5th ACM SIGPLAN-SIGSOFT Workshop on Program Analysis for Software Tools and Engineering, Washington DC, pp. 37\u201342. ACM (2004), 996835"},{"key":"20_CR13","unstructured":"Andersen, L.: Program Analysis and Specialization for the C Programming Language. University of Copenhagen (1994)"},{"key":"20_CR14","doi-asserted-by":"crossref","unstructured":"Steensgaard, B.: Points-to analysis in almost linear time. In: Proc. of 23rd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, Florida, United States, pp. 32\u201341 (1996)","DOI":"10.1145\/237721.237727"},{"key":"20_CR15","unstructured":"Hardekopf, B., Lin, C.: The ant and the grasshopper: fast and accurate pointer analysis for millions of lines of code. In: Proc. of 2007 ACM SIGPLAN Conference on Programming Language Design and Implementation, California, USA, pp. 290\u2013299. ACM (2007), 1250767"},{"key":"20_CR16","doi-asserted-by":"crossref","unstructured":"Yu, H., Xue, J., Huo, W., Feng, X., Zhang, Z.: Level by level: making flow- and context-sensitive pointer analysis scalable for millions of lines of code. In: Proc. of 8th Annual IEEE\/ACM International Symposium on Code Generation and Optimization, Ontario, Canada, pp. 218\u2013229 (2010)","DOI":"10.1145\/1772954.1772985"},{"key":"20_CR17","doi-asserted-by":"crossref","unstructured":"Lattner, C., Lenharth, A., Adve, V.: Making context-sensitive points-to analysis with heap cloning practical for the real world. In: Proc. of 2007 ACM SIGPLAN Conference on Programming Language Design and Implementation, California, USA, pp. 278\u2013289 (2007)","DOI":"10.1145\/1250734.1250766"},{"key":"20_CR18","doi-asserted-by":"crossref","unstructured":"Hind, M., Pioli, A.: Which pointer analysis should I use? In: Proc. of 2000 ACM SIGSOFT International Symposium on Software Testing and Analysis, Portland, Oregon, United States, pp. 113\u2013123 (2000)","DOI":"10.1145\/347636.348916"},{"key":"20_CR19","doi-asserted-by":"crossref","unstructured":"Ibrahim, A.S., Grundy, J.C., Hamlyn-Harris, J., Almorsy, M.: Supporting Operating System Kernel Data Disambiguation using Points-to Analysis. In: Proc. of 27th IEEE\/ACM International Conference on Automated Software Engineering, Essen, Germany (2012)","DOI":"10.1145\/2351676.2351710"},{"key":"20_CR20","unstructured":"Bendersky, E.: pycparser: C parser and AST generator written in Python (2011), \n                    \n                      http:\/\/code.google.com\/p\/pycparser\/"},{"key":"20_CR21","doi-asserted-by":"crossref","unstructured":"Ibrahim, A.S., Hamlyn-Harris, J., Grundy, J., Almorsy, M.: CloudSec: A Security Monitoring Appliance for Virtual Machines in the IaaS Cloud Model. In: Proc. of 2011 International Conference on Network and System Security (NSS 2011), Milan, Italy (2011)","DOI":"10.1109\/ICNSS.2011.6059967"},{"key":"20_CR22","unstructured":"Buss, M., Edwards, S.A., Bin, Y., Waddington, D.: Pointer analysis for source-to-source transformations. In: Proc. of 5th IEEE International Workshop on Source Code Analysis and Manipulation, September 30-October 1, pp. 139\u2013148 (2005)"}],"container-title":["Lecture Notes in Computer Science","Network and System Security"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-34601-9_20.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,4]],"date-time":"2021-05-04T13:00:22Z","timestamp":1620133222000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-34601-9_20"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642346002","9783642346019"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-34601-9_20","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2012]]}}}