{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,28]],"date-time":"2025-10-28T18:38:39Z","timestamp":1761676719250,"version":"3.40.3"},"publisher-location":"Singapore","reference-count":17,"publisher":"Springer Singapore","isbn-type":[{"type":"print","value":"9789811358258"},{"type":"electronic","value":"9789811358265"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-981-13-5826-5_39","type":"book-chapter","created":{"date-parts":[[2019,1,24]],"date-time":"2019-01-24T05:07:57Z","timestamp":1548306477000},"page":"504-519","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Overinfection in Ransomware"],"prefix":"10.1007","author":[{"given":"Yassine","family":"Lemmou","sequence":"first","affiliation":[]},{"given":"El Mamoun","family":"Souidi","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2019,1,24]]},"reference":[{"key":"39_CR1","doi-asserted-by":"crossref","unstructured":"Sood, A.K., Enbody, R.: Malware design strategies for circumventing detection and prevention controls. Virus Bulletin (2012)","DOI":"10.1016\/S1353-4858(12)70112-5"},{"key":"39_CR2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"354","DOI":"10.1007\/0-387-34799-2_28","volume-title":"Advances in Cryptology \u2014 CRYPTO 1988","author":"LM Adleman","year":"1990","unstructured":"Adleman, L.M.: An abstract theory of computer viruses. In: Goldwasser, S. (ed.) CRYPTO 1988. LNCS, vol. 403, pp. 354\u2013374. Springer, New York (1990). \n                  https:\/\/doi.org\/10.1007\/0-387-34799-2_28"},{"key":"39_CR3","unstructured":"Cimpanu, C.: Wana decrypt0r ransomware using NSA exploit leaked by shadow brokers is on a rampage (2017). \n                  https:\/\/www.bleepingcomputer.com\/news\/security\/wana-decrypt0r-ransomware-using-nsa-exploit-leaked-by-shadow-brokersis-on-a-rampage\/\n                  \n                . bleepingcomputer blog"},{"issue":"1","key":"39_CR4","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1016\/0167-4048(87)90122-2","volume":"6","author":"F Cohen","year":"1987","unstructured":"Cohen, F.: Computer viruses. Comput. Secur. 6(1), 22\u201335 (1987)","journal-title":"Comput. Secur."},{"key":"39_CR5","doi-asserted-by":"crossref","unstructured":"Continella, A., et al.: ShieldFS: a self-healing, ransomware-aware filesystem. In: Proceedings of the 32nd Annual Conference on Computer Security Applications, ACSAC 2016, Los Angeles, 5\u20139 December 2016, pp. 336\u2013347 (2016)","DOI":"10.1145\/2991079.2991110"},{"issue":"2","key":"39_CR6","doi-asserted-by":"publisher","first-page":"75","DOI":"10.1007\/s11416-007-0044-2","volume":"3","author":"E Filiol","year":"2007","unstructured":"Filiol, E.: Formalisation and implementation aspects of k-ary (malicious) codes. J. Comput. Virol. 3(2), 75\u201386 (2007)","journal-title":"J. Comput. Virol."},{"issue":"1","key":"39_CR7","doi-asserted-by":"publisher","first-page":"77","DOI":"10.1007\/s11416-008-0092-2","volume":"6","author":"A Gazet","year":"2010","unstructured":"Gazet, A.: Comparative analysis of various ransomware virii. J. Comput. Virol. 6(1), 77\u201390 (2010)","journal-title":"J. Comput. Virol."},{"key":"39_CR8","unstructured":"Kharraz, A., Arshad, S., Mulliner, C., Robertson, W.K., Kirda, E.: UNVEIL: a large-scale, automated approach to detecting ransomware. In: 25th USENIX Security Symposium, USENIX Security 16, Austin, 10\u201312 August 2016, pp. 757\u2013772 (2016)"},{"key":"39_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-319-20550-2_1","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"A Kharraz","year":"2015","unstructured":"Kharraz, A., Robertson, W., Balzarotti, D., Bilge, L., Kirda, E.: Cutting the gordian knot: a look under the hood of ransomware attacks. In: Almgren, M., Gulisano, V., Maggi, F. (eds.) DIMVA 2015. LNCS, vol. 9148, pp. 3\u201324. Springer, Cham (2015). \n                  https:\/\/doi.org\/10.1007\/978-3-319-20550-2_1"},{"key":"39_CR10","doi-asserted-by":"crossref","unstructured":"Kolodenker, E., Koch, W., Stringhini, G., Egele, M.: PayBreak: defense against cryptographic ransomware. In: Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, AsiaCCS 2017, Abu Dhabi, 2\u20136 April 2017, pp. 599\u2013611 (2017)","DOI":"10.1145\/3052973.3053035"},{"key":"39_CR11","doi-asserted-by":"crossref","unstructured":"Lemmou, Y., Souidi, E.M.: PrincessLocker analysis. In: International Conference on Cyber Security and Protection of Digital Services (Cyber Security), pp. 1\u201310, June 2017","DOI":"10.1109\/CyberSecPODS.2017.8074854"},{"key":"39_CR12","series-title":"Communications in Computer and Information Science","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1007\/978-981-10-6898-0_22","volume-title":"Security in Computing and Communications","author":"Y Lemmou","year":"2017","unstructured":"Lemmou, Y., Souidi, E.M.: An overview on Spora ransomware. In: Thampi, S.M., Mart\u00ednez P\u00e9rez, G., Westphall, C.B., Hu, J., Fan, C.I., G\u00f3mez M\u00e1rmol, F. (eds.) SSCC 2017. CCIS, vol. 746, pp. 259\u2013275. Springer, Singapore (2017). \n                  https:\/\/doi.org\/10.1007\/978-981-10-6898-0_22"},{"key":"39_CR13","unstructured":"MSDN: Createmutex function. \n                  https:\/\/msdn.microsoft.com\/fr-fr\/library\/windows\/desktop\/ms682411%28v=vs.85%29.aspx"},{"key":"39_CR14","doi-asserted-by":"crossref","unstructured":"Scaife, N., Carter, H., Traynor, P., Butler, K.R.B.: CryptoLock (and drop it): stopping ransomware attacks on user data. In: 36th IEEE International Conference on Distributed Computing Systems, ICDCS 2016, Nara, 27\u201330 June 2016, pp. 303\u2013312 (2016)","DOI":"10.1109\/ICDCS.2016.46"},{"key":"39_CR15","unstructured":"Shivale, S.A.: Cryptovirology: Virus approach. CoRR abs\/1108.2482 (2011). \n                  http:\/\/arxiv.org\/abs\/1108.2482"},{"key":"39_CR16","unstructured":"Young, A., Yung, M.: Cryptovirology: extortion-based security threats and countermeasures. In: Proceedings 1996 IEEE Symposium on Security and Privacy, pp. 129\u2013140, May 1996"},{"issue":"2","key":"39_CR17","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1007\/s10207-006-0082-7","volume":"5","author":"AL Young","year":"2006","unstructured":"Young, A.L.: Cryptoviral extortion using Microsoft\u2019s crypto API. Int. J. Inf. Secur. 5(2), 67\u201376 (2006)","journal-title":"Int. J. Inf. Secur."}],"container-title":["Communications in Computer and Information Science","Security in Computing and Communications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-13-5826-5_39","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,20]],"date-time":"2019-05-20T23:51:34Z","timestamp":1558396294000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-981-13-5826-5_39"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9789811358258","9789811358265"],"references-count":17,"URL":"https:\/\/doi.org\/10.1007\/978-981-13-5826-5_39","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"24 January 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SSCC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Security in Computing and Communication","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Bangalore","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"India","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 September 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"sscc2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.acn-conference.org\/sscc2018\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}