{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T04:57:21Z","timestamp":1760245041739},"reference-count":20,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,10]]},"DOI":"10.1109\/cns.2013.6682767","type":"proceedings-article","created":{"date-parts":[[2013,12,17]],"date-time":"2013-12-17T19:48:17Z","timestamp":1387309697000},"page":"498-503","source":"Crossref","is-referenced-by-count":4,"title":["Rootkit detection on virtual machines through deep information extraction at hypervisor-level"],"prefix":"10.1109","author":[{"family":"Xiongwei Xie","sequence":"first","affiliation":[]},{"family":"Weichao Wang","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"19","doi-asserted-by":"publisher","DOI":"10.1145\/945461.945462"},{"key":"17","first-page":"225","article-title":"KVM: The linux virtual machine monitor","author":"kivity","year":"2007","journal-title":"Linux Symposium"},{"key":"18","article-title":"Vmware virtual platform","author":"walters","year":"1999","journal-title":"Linux J"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2011.37"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.8"},{"journal-title":"Xcp Sony Rootkit","year":"0","key":"13"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1109\/HOTOS.2001.990073"},{"key":"11","article-title":"A virtual machine introspection based architecture for intrusion detection","author":"garfinkel","year":"2003","journal-title":"NDSS"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1145\/1266840.1266852"},{"key":"3","article-title":"Hookfinder: Identifying and understanding malware hooking behaviors","author":"yin","year":"2008","journal-title":"NDSS"},{"journal-title":"Rootkit Part 1 of 3 the Growing Threat","year":"2006","key":"2"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1080\/18756891.2012.733231"},{"key":"1","article-title":"Evolution of rootkits","author":"jakobsson","year":"2008","journal-title":"Crimeware Understanding New Attacks and Defenses"},{"key":"10","first-page":"128","article-title":"Stealthy malware detection through vmm-based \"out-of-the-box\" semantic view reconstruction","author":"jiang","year":"2007","journal-title":"ACM CCS"},{"key":"7","article-title":"Copilot: A coprocessor-based kernel runtime integrity monitor","author":"petroni jr","year":"0","journal-title":"USENIX Security Symposium 2004"},{"key":"6","first-page":"103","article-title":"Automated detection of persistent kernel control-flow attacks","author":"petroni jr","year":"2007","journal-title":"ACM CCS"},{"key":"5","first-page":"116","article-title":"Panorama: Capturing system-wide information flow for malware detection and analysis","author":"yin","year":"2007","journal-title":"ACM CCS"},{"key":"4","article-title":"K-tracer: A system for extracting kernel malware behavior","author":"lanzi","year":"2009","journal-title":"NDSS"},{"journal-title":"Agobot","year":"2012","key":"9"},{"key":"8","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2004.19"}],"event":{"name":"2013 IEEE Conference on Communications and Network Security (CNS)","start":{"date-parts":[[2013,10,14]]},"location":"National Harbor, MD, USA","end":{"date-parts":[[2013,10,16]]}},"container-title":["2013 IEEE Conference on Communications and Network Security (CNS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6675898\/6682673\/06682767.pdf?arnumber=6682767","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,10,14]],"date-time":"2020-10-14T10:35:30Z","timestamp":1602671730000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/6682767"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,10]]},"references-count":20,"URL":"https:\/\/doi.org\/10.1109\/cns.2013.6682767","relation":{},"subject":[],"published":{"date-parts":[[2013,10]]}}}