{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,23]],"date-time":"2024-10-23T06:28:36Z","timestamp":1729664916297,"version":"3.28.0"},"reference-count":31,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010,6]]},"DOI":"10.1109\/dsn.2010.5544305","type":"proceedings-article","created":{"date-parts":[[2010,8,10]],"date-time":"2010-08-10T20:44:07Z","timestamp":1281473047000},"page":"281-290","source":"Crossref","is-referenced-by-count":6,"title":["Reuse-oriented camouflaging trojan: Vulnerability detection and attack construction"],"prefix":"10.1109","author":[{"given":"Zhiqiang","family":"Lin","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiangyu","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dongyan","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref31","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-45875-1_15","article-title":"Visualizing memory graphs","author":"zimmermann","year":"2002","journal-title":"Revised Lectures on Software Visualization International Seminar"},{"key":"ref30","doi-asserted-by":"crossref","DOI":"10.1145\/1315245.1315261","article-title":"Panorama: Capturing system-wide information flow for malware detection and analysis","author":"yin","year":"2007","journal-title":"ACM CCS'07"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455776"},{"key":"ref11","article-title":"Binary code extraction and interface identification for security applications","author":"caballero","year":"2010","journal-title":"In ISOC NDSS'10"},{"key":"ref12","article-title":"Large scale malware collection: lessons learned","author":"canto","year":"2008","journal-title":"IEEE SRDS'08"},{"key":"ref13","article-title":"Understanding data lifetime via whole system simulation","author":"chow","year":"2004","journal-title":"In 13th USENIX Security Symposium"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.10"},{"key":"ref15","article-title":"return-to-libc","author":"designer","year":"1997","journal-title":"Bugtraq"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2003.1199328"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CSMR.2005.21"},{"key":"ref18","doi-asserted-by":"crossref","first-page":"151","DOI":"10.3233\/JCS-980109","article-title":"Intrusion detection using sequences of system calls","volume":"6","author":"hofmeyr","year":"1998","journal-title":"J Computer Security"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2009.15"},{"key":"ref28","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-30143-1_11","article-title":"Anomalous payload-based network intrusion detection","author":"wang","year":"2004","journal-title":"Recent Advances in Intrusion Detection"},{"journal-title":"Most abused infection vector","year":"0","key":"ref4"},{"key":"ref27","doi-asserted-by":"crossref","DOI":"10.1145\/1315245.1315313","article-title":"The geometry of innocent flesh on the bone: return-into-libc without function calls","author":"shacham","year":"2007","journal-title":"ACM CCS'07"},{"journal-title":"National Software Reference Library","year":"0","key":"ref3"},{"key":"ref6","first-page":"15","article-title":"Parasitic malware: The resurgence of an old threat","volume":"3","year":"2008","journal-title":"Network Security"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/S0164-1212(00)00029-7"},{"journal-title":"Virus collection (vx heavens)","year":"2009","key":"ref5"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/277652.277738"},{"key":"ref7","article-title":"Control-flow integrity","author":"abadi","year":"2005","journal-title":"ACMCCS'05"},{"journal-title":"Gnutella protocol spec","year":"0","key":"ref2"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/155090.155109"},{"journal-title":"Bitdefender malware and spam survey","year":"0","key":"ref1"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/191177.191183"},{"key":"ref22","article-title":"Reuse-Oriented Camouflaging Attack: Vulnerability Detection and Attack Construction","author":"lin","year":"2009","journal-title":"Technical report CERIAS TR 2009-29"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/0020-0190(88)90054-3"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250746"},{"key":"ref23","article-title":"The advanced return-into-lib(c) exploits: Pax case study","volume":"10","year":"2001","journal-title":"Phrack"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-01244-0_6"},{"key":"ref25","article-title":"Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software","author":"newsome","year":"2005","journal-title":"In ISOC NDSS'05"}],"event":{"name":"Networks (DSN)","start":{"date-parts":[[2010,6,28]]},"location":"Chicago, IL, USA","end":{"date-parts":[[2010,7,1]]}},"container-title":["2010 IEEE\/IFIP International Conference on Dependable Systems & Networks (DSN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5532324\/5544245\/05544305.pdf?arnumber=5544305","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T15:31:29Z","timestamp":1559403089000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5544305\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,6]]},"references-count":31,"URL":"https:\/\/doi.org\/10.1109\/dsn.2010.5544305","relation":{},"subject":[],"published":{"date-parts":[[2010,6]]}}}