{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,8]],"date-time":"2025-05-08T04:46:48Z","timestamp":1746679608353,"version":"3.28.0"},"reference-count":29,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,8]]},"DOI":"10.1109\/desec.2017.8073834","type":"proceedings-article","created":{"date-parts":[[2017,10,25]],"date-time":"2017-10-25T15:22:28Z","timestamp":1508944948000},"page":"509-515","source":"Crossref","is-referenced-by-count":3,"title":["Ziffersystem: A novel malware distribution detection system"],"prefix":"10.1109","author":[{"given":"Tzu-Hsien","family":"Chuang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shin-Ying","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ching-Hao","family":"Mao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Albert B.","family":"Jeng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hahn-Ming","family":"Lee","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22424-9_8"},{"key":"ref11","first-page":"637","author":"kapravelos","year":"2013","journal-title":"Revolver An automated approach to the detection of evasive web-based malware"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.48"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.33"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23269"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813724"},{"key":"ref16","first-page":"1","article-title":"WarningBird: Detecting Suspicious URLs in Twitter Stream","volume":"12","author":"lee","year":"2012","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"ref17","first-page":"112","article-title":"Finding the linchpins of the dark web: a study on topologically dedicated hosts on malicious web infrastructures","author":"li","year":"2013","journal-title":"Security and Privacy"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557153"},{"key":"ref19","first-page":"1","article-title":"All your iframes point to us","author":"mavrommatis","year":"2008","journal-title":"USENIX Security Symposium"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516682"},{"key":"ref4","article-title":"Measuring Pay-per-Install: The Commoditization of Malware Distribution","author":"caballero","year":"2011","journal-title":"Proceedings of USENIX Security Symposium"},{"key":"ref27","article-title":"WebCop: Locating Neighborhoods of Malware on the Web","author":"stokes","year":"2010","journal-title":"Proceedings of Workshop on Exploits Malware and Large-scale Trends (LEET)"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2015.7288435"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1111\/j.1475-4959.2011.00426.x"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963435"},{"key":"ref5","article-title":"Zozzle: Low-overhead mostly static javascript malware detection","author":"curtsinger","year":"2011","journal-title":"Proceedings of the USENIX Security Symposium"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/INM.2015.7140486"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382283"},{"journal-title":"js-crawler","year":"0","author":"anton","key":"ref2"},{"article-title":"deSEO: Combating Search-Result Poisoning","year":"0","author":"john","key":"ref9"},{"key":"ref1","first-page":"1","article-title":"Spamscatter: Characterizing internet scam hosting infrastructure","author":"anderson","year":"2007","journal-title":"Usenix Security"},{"key":"ref20","article-title":"Polonium: Tera-scale graph mining and inference for malware detection","author":"nachenberg","year":"2011","journal-title":"Proceedings of the 2011 SIAM International Conference on Data Mining"},{"key":"ref22","article-title":"CAMP: Content-Agnostic Malware Protection","author":"rajab","year":"2013","journal-title":"Proc Network and Distributed System Security Symp (NDSS)"},{"key":"ref21","first-page":"911","article-title":"PhoneyC: A Virtual Client Honeypot","volume":"9","author":"nazario","year":"2009","journal-title":"Proceedings of Workshop on Exploits Malware and Large-scale Trends (LEET)"},{"key":"ref24","first-page":"42","article-title":"Large-scale analysis of malware downloaders","author":"rossow","year":"2012","journal-title":"Proceedings of the 2nd International Conference on Intrusion and Malware Detection and Vulnerability Assessment"},{"article-title":"Malicious advertisement detection and remediation","year":"2013","author":"ranadive","key":"ref23"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ISCO.2015.7282353"},{"journal-title":"Capture-honeypot Client (Capture-hpc)","year":"2006","author":"seifert","key":"ref25"}],"event":{"name":"2017 IEEE Conference on Dependable and Secure Computing","start":{"date-parts":[[2017,8,7]]},"location":"Taipei, Taiwan","end":{"date-parts":[[2017,8,10]]}},"container-title":["2017 IEEE Conference on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8053489\/8073795\/08073834.pdf?arnumber=8073834","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,11,30]],"date-time":"2017-11-30T15:12:57Z","timestamp":1512054777000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/8073834\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,8]]},"references-count":29,"URL":"https:\/\/doi.org\/10.1109\/desec.2017.8073834","relation":{},"subject":[],"published":{"date-parts":[[2017,8]]}}}