{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,29]],"date-time":"2025-09-29T08:11:33Z","timestamp":1759133493381},"reference-count":27,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2008,8,5]],"date-time":"2008-08-05T00:00:00Z","timestamp":1217894400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["J Comput Virol"],"published-print":{"date-parts":[[2010,8]]},"DOI":"10.1007\/s11416-008-0096-y","type":"journal-article","created":{"date-parts":[[2008,8,4]],"date-time":"2008-08-04T09:21:50Z","timestamp":1217841710000},"page":"181-195","source":"Crossref","is-referenced-by-count":25,"title":["Measuring virtual machine detection in malware using DSD tracer"],"prefix":"10.1007","volume":"6","author":[{"given":"Boris","family":"Lau","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vanja","family":"Svajcer","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2008,8,5]]},"reference":[{"key":"96_CR1","unstructured":"Lau, B.: DSD-Tracer: experimentation and implementation. In: Virus Bulletin 2007 Conference proceedings (2007)"},{"key":"96_CR2","doi-asserted-by":"crossref","unstructured":"Moser, A., Kruegel, C., Kirda, E.: Exploring Multiple Execution Paths for Malware Analysis (2006)","DOI":"10.1109\/SP.2007.17"},{"key":"96_CR3","unstructured":"Bayer, U.: TTAnalyze: a tool for analyzing Malware. Master\u2019s Thesis, Technical University of Vienna (2005)"},{"key":"96_CR4","doi-asserted-by":"crossref","unstructured":"Vasudevan, A., Yerraballi, R.: Cobra: fine-grained Malware analysis using stealth localized-executions. In: IEEE and Signature Generation of Exploits on Commodity Software (2006)","DOI":"10.1109\/SP.2006.9"},{"key":"96_CR5","doi-asserted-by":"crossref","unstructured":"Willems, A., Holz, C., Freiling, T., Felix A.: Toward Automated Dynamic Malware Analysis Using CWSandbox. http:\/\/www.cwsandbox.org\/ (2007)","DOI":"10.1109\/MSP.2007.45"},{"key":"96_CR6","unstructured":"Simplified Wrapper and Interface Generator. http:\/\/www.swig.org\/ (2000)"},{"key":"96_CR7","unstructured":"Natvig, K.: Norman sandbox white paper. http:\/\/download.norman.no\/whitepapers\/whitepaper_Norman_SandBox.pdf (2003)"},{"key":"96_CR8","unstructured":"Vidstrom, A.: Evading the Norman SandBox Analyzer. BugTraq bulletin (2007)"},{"key":"96_CR9","unstructured":"Eagle, C.: Attacking Packed Code with IDA Pro. http:\/\/ida-x86emu.sourceforge.net , Black-hat Asia (2006)"},{"key":"96_CR10","unstructured":"Bellard, F.: QEMU Emulator User Documentation # GDB usage. http:\/\/fabrice.bellard.free.fr\/qemu\/qemu-doc.html#SEC46 (2005)"},{"key":"96_CR11","unstructured":"Ormandy, T.: An empirical study into the security exposure to hosts of hostile virtualized environments, CanSecWest (2007)"},{"key":"96_CR12","unstructured":"Ferrie, P.: Attacks on virtual machine emulators (2007)"},{"key":"96_CR13","unstructured":"Xu M., et al.: ReTrace: Collecting execution trace with virtual machine deterministic replay (2007)"},{"key":"96_CR14","unstructured":"Herrod, S.: The amazing VM record\/replay feature in VMware Workstation 6. http:\/\/blogs.vmware.com\/sherrod\/2007\/04\/the_amazing_vm_.html (2007)"},{"key":"96_CR15","unstructured":"Technology, O.: Themida overview. http:\/\/www.oreans.com\/themida.php (2007)"},{"key":"96_CR16","unstructured":"Malyugin, V.: Application debugging with Record\/Replay. http:\/\/stackframe.blogspot.com\/2007\/09\/application-debugging-with-recordreplay.html (2007)"},{"key":"96_CR17","unstructured":"Malyugin, V.: VMware forum thread. http:\/\/communities.vmware.com\/thread\/104296 (2007)"},{"key":"96_CR18","unstructured":"Callanan, S.: Terminate-on-error patch for GDBcli. http:\/\/sourceware.org\/ml\/gdb-patches\/2005-08\/msg00120.html (2005)"},{"key":"96_CR19","unstructured":"Schneider, O.: Redpill getting colorless? http:\/\/blog.assarbad.net\/wp-content\/uploads\/2007\/04\/redpill_getting_colorless.pdf (2007)"},{"key":"96_CR20","unstructured":"Rutkowska, J.: Red Pill. http:\/\/invisiblethings.org\/papers\/redpill.html (2004)"},{"key":"96_CR21","unstructured":"Klein, T.: Jerry. http:\/\/www.trapkit.de\/research\/vmm\/jerry\/index.html (2005)"},{"key":"96_CR22","unstructured":"Klein, T.: Scoopy Doo. http:\/\/www.trapkit.de\/research\/vmm\/scoopydoo\/index.html (2005)"},{"key":"96_CR23","unstructured":"Kato, K.: VMWare Back. http:\/\/chitchat.at.infoseek.co.jp\/vmware\/backdoor.html (2003)"},{"key":"96_CR24","unstructured":"Liston, T., Skoudis, E.: On the cutting edge: thwarting virtual machine detection. http:\/\/handlers.sans.org\/tliston\/ThwartingVMDetection_Liston_Skoudis.pdf (2006)"},{"key":"96_CR25","unstructured":"O\u2019Dea, H.: Trapping worms in a virtual net. In: Virus Bulletin 2004 Conference Proceedings (2004)"},{"key":"96_CR26","unstructured":"Intel.: Intel architecture software developer\u2019s manual, vol 2: instruction set reference manual. http:\/\/developer.intel.com\/design\/pentiumii\/manuals\/243191.htm (2003)"},{"key":"96_CR27","unstructured":"Quist, D.: Vmdetect. http:\/\/www.offensivecomputing.net\/dc14\/vmdetect.cpp (2006)"}],"container-title":["Journal in Computer Virology"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-008-0096-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11416-008-0096-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-008-0096-y","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T10:45:42Z","timestamp":1559385942000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11416-008-0096-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008,8,5]]},"references-count":27,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2010,8]]}},"alternative-id":["96"],"URL":"https:\/\/doi.org\/10.1007\/s11416-008-0096-y","relation":{},"ISSN":["1772-9890","1772-9904"],"issn-type":[{"value":"1772-9890","type":"print"},{"value":"1772-9904","type":"electronic"}],"subject":[],"published":{"date-parts":[[2008,8,5]]}}}