{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T04:52:21Z","timestamp":1755838341368,"version":"3.28.0"},"reference-count":40,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,6]]},"DOI":"10.1109\/dsn.2013.6575342","type":"proceedings-article","created":{"date-parts":[[2013,8,14]],"date-time":"2013-08-14T16:18:36Z","timestamp":1376497116000},"page":"1-12","source":"Crossref","is-referenced-by-count":5,"title":["DRIP: A framework for purifying trojaned kernel drivers"],"prefix":"10.1109","author":[{"given":"Zhongshu","family":"Gu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"William N.","family":"Sumner","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhui","family":"Deng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiangyu","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dongyan","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","first-page":"279","article-title":"SymDrive: Testing drivers without devices","author":"renzelmann","year":"2012","journal-title":"Proceedings of the 10th USENIX Conference on Operating Systems Design and Implementation USENIX Association"},{"key":"35","article-title":"K-tracer: A system for extracting kernel malware behavior","author":"lanzi","year":"2009","journal-title":"Proceedings of the 16th Annual Network and Distributed System Security Symposium"},{"year":"0","key":"17"},{"key":"36","article-title":"HookFinder: Identifying and understanding malware hooking behaviors","author":"yin","year":"2008","journal-title":"Proceedings of the 15th Annual Network and Distributed System Security Symposium"},{"key":"18","first-page":"209","article-title":"KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs","author":"cadar","year":"2008","journal-title":"Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation USENIX Association"},{"key":"33","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043568"},{"year":"0","key":"15"},{"key":"34","doi-asserted-by":"crossref","first-page":"116","DOI":"10.1145\/1315245.1315261","article-title":"Panorama: Capturing system-wide information flow for malware detection and analysis","author":"yin","year":"2007","journal-title":"Proceedings of the 14th ACM Conference on Computer and Communications Security ACM"},{"journal-title":"Https \/\/Code google com\/p\/Skipfish","year":"0","key":"16"},{"key":"39","doi-asserted-by":"crossref","first-page":"297","DOI":"10.1109\/SP.2011.11","article-title":"Virtuoso: Narrowing the semantic gap in virtual machine introspection","author":"dolan-gavitt","year":"2011","journal-title":"Security and Privacy (SP) IEEE Symposium On IEEE 2011"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1145\/1217935.1217943"},{"key":"14","first-page":"12","article-title":"Testing closed-source binary device drivers with ddt","author":"kuznetsov","year":"2010","journal-title":"Proceedings of the 2010 USENIX Conference on USENIX Annual Technical Conference USENIX Association"},{"key":"37","doi-asserted-by":"crossref","first-page":"21","DOI":"10.1007\/978-3-540-87403-4_2","article-title":"Countering persistent kernel rootkits through systematic hook discovery","author":"wang","year":"2008","journal-title":"Recent Advances in Intrusion Detection Springer Berlin Heidelberg"},{"key":"11","article-title":"Efficient monitoring of untrusted kernel-mode execution","author":"srivastava","year":"2011","journal-title":"Proceedings of the 18th Annual Network and Distributed Systems Security Symposium"},{"key":"38","doi-asserted-by":"publisher","DOI":"10.1145\/1519065.1519072"},{"key":"12","article-title":"Practical protection of kernel integrity for commodity os from untrusted extensions","author":"xiong","year":"2011","journal-title":"Proceedings of the 18th Annual Network and Distributed System Security Symposium"},{"key":"21","doi-asserted-by":"crossref","first-page":"263","DOI":"10.1145\/1081706.1081750","article-title":"CUTE: A concolic unit testing engine for c","author":"sen","year":"2005","journal-title":"Proceedings of the 10th European software engineering conference held jointly with 13th ACM SIGSOFT international symposium on Foundations of software engineering"},{"key":"20","first-page":"265","author":"chipounov","year":"2011","journal-title":"S2E A Platform for In-Vivo Multi-Path Analysis of Software Systems"},{"key":"40","doi-asserted-by":"publisher","DOI":"10.1145\/1755913.1755932"},{"journal-title":"Qemu a fast and portable dynamic translator","year":"2005","author":"bellard","key":"22"},{"key":"23","first-page":"109","article-title":"Probing the guts of kprobes","volume":"2","author":"mavinakayanahalli","year":"2006","journal-title":"Proceedings of the 2006 Linux Symposium"},{"year":"0","key":"24"},{"key":"25","first-page":"45","article-title":"SafeDrive: Safe and recoverable extensions using language-based techniques","author":"zhou","year":"2006","journal-title":"Proceedings of the 7th Symposium on Operating Systems Design and Implementation USENIX Association"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1145\/1346281.1346303"},{"key":"27","first-page":"241","article-title":"Device driver safety through a reference validation mechanism","author":"williams","year":"2008","journal-title":"Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation USENIX Association"},{"key":"28","doi-asserted-by":"crossref","first-page":"203","DOI":"10.1145\/173668.168635","article-title":"Efficient software-based fault isolation","volume":"27","author":"wahbe","year":"1994","journal-title":"ACM SIGOPS Operating Systems Review"},{"key":"29","first-page":"75","article-title":"XFI: Software guards for system address spaces","author":"erlingsson","year":"2006","journal-title":"Proceedings of the 7th Symposium on Operating Systems Design and Implementation USENIX Association"},{"year":"0","key":"3"},{"year":"0","key":"2"},{"key":"10","first-page":"9","article-title":"Tolerating malicious device drivers in linux","author":"boyd-wickizer","year":"2010","journal-title":"Proceedings of the 2010 USENIX Conference on USENIX Annual Technical Conference USENIX Association"},{"year":"0","key":"1"},{"key":"30","first-page":"293","article-title":"Vx32: Lightweight user-level sandboxing on the x86","author":"ford","year":"2008","journal-title":"USENIX 2008 Annual Technical Conference on Annual Technical Conference USENIX Association"},{"year":"0","key":"7"},{"year":"0","key":"6"},{"key":"32","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629581"},{"year":"0","key":"5"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.25"},{"year":"0","key":"4"},{"key":"9","doi-asserted-by":"crossref","first-page":"207","DOI":"10.1145\/945445.945466","article-title":"Improving the reliability of commodity operating systems","author":"swift","year":"2003","journal-title":"Proceedings of the Nineteenth ACM Symposium on Operating Systems Principles Ser SOSP '03 ACM"},{"year":"0","key":"8"}],"event":{"name":"2013 43rd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)","start":{"date-parts":[[2013,6,24]]},"location":"Budapest, Hungary","end":{"date-parts":[[2013,6,27]]}},"container-title":["2013 43rd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6569391\/6575287\/06575342.pdf?arnumber=6575342","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,21]],"date-time":"2017-06-21T17:50:17Z","timestamp":1498067417000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6575342\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,6]]},"references-count":40,"URL":"https:\/\/doi.org\/10.1109\/dsn.2013.6575342","relation":{},"subject":[],"published":{"date-parts":[[2013,6]]}}}