{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,5]],"date-time":"2025-12-05T12:19:53Z","timestamp":1764937193510,"version":"3.28.0"},"reference-count":25,"publisher":"IEEE","license":[{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,6]]},"DOI":"10.1109\/cybersecurity49315.2020.9138853","type":"proceedings-article","created":{"date-parts":[[2020,7,13]],"date-time":"2020-07-13T22:45:17Z","timestamp":1594680317000},"page":"1-8","source":"Crossref","is-referenced-by-count":12,"title":["Memory Forensics Against Ransomware"],"prefix":"10.1109","author":[{"given":"Pranshu","family":"Bajpai","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Richard","family":"Enbody","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2016.46"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991110"},{"key":"ref12","first-page":"757","article-title":"{UNVEIL}: A large-scale, automated approach to detecting ransomware","author":"kharaz","year":"2016","journal-title":"25th USENIX Security Symposium ( USENIX Security 16)"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053035"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30564-4_16"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1949.tb00928.x"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2003.1193210"},{"key":"ref17","article-title":"Malpedia: a collaborative effort to inventorize the malware landscape","author":"plohmann","year":"2017","journal-title":"Proceedings of the Botconf"},{"year":"0","key":"ref18"},{"year":"0","key":"ref19"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48390-X_9"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2020.2977285"},{"article-title":"Ram is key extracting disk encryption keys from volatile memory","year":"2007","author":"kaplan","key":"ref6"},{"key":"ref5","article-title":"Cryptographic key recovery from linux memory dumps","volume":"2007","author":"pettersson","year":"2007","journal-title":"Chaos Communication Camp"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66332-6_5"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/1506409.1506429"},{"key":"ref2","article-title":"Extracting ransomware’s keys by utilizing memory forensics","author":"bajpai","year":"2020","journal-title":"Ph D Dissertation"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.11.019"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ECRIME.2018.8376213"},{"key":"ref20","first-page":"3","article-title":"Announcing the advanced encryption standard (aes)","volume":"197","author":"standard","year":"2001","journal-title":"Federal Information Processing Standards Publication"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2009.06.002"},{"key":"ref21","article-title":"Serpent: A proposal for the advanced encryption standard","author":"knudsen","year":"1998","journal-title":"First Advanced Encryption Standard (AES) Conference"},{"key":"ref24","first-page":"250","article-title":"White-box cryptography and an aes implementation","author":"chow","year":"2002","journal-title":"Workshop Selected Areas in Cryptography"},{"article-title":"Great crypto failures","year":"2016","author":"herzog","key":"ref23"},{"key":"ref25","article-title":"Tresor runs encryption securely outside ram","volume":"17","author":"m\u00fcller","year":"0"}],"event":{"name":"2020 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)","start":{"date-parts":[[2020,6,15]]},"location":"Dublin, Ireland","end":{"date-parts":[[2020,6,19]]}},"container-title":["2020 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9136807\/9138848\/09138853.pdf?arnumber=9138853","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T15:33:39Z","timestamp":1656344019000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9138853\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,6]]},"references-count":25,"URL":"https:\/\/doi.org\/10.1109\/cybersecurity49315.2020.9138853","relation":{},"subject":[],"published":{"date-parts":[[2020,6]]}}}