{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T17:10:59Z","timestamp":1772039459480,"version":"3.50.1"},"reference-count":48,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,6]]},"DOI":"10.1109\/dsn.2013.6575343","type":"proceedings-article","created":{"date-parts":[[2013,8,14]],"date-time":"2013-08-14T12:18:36Z","timestamp":1376482716000},"page":"1-12","source":"Crossref","is-referenced-by-count":54,"title":["SPECTRE: A dependable introspection framework via System Management Mode"],"prefix":"10.1109","author":[{"given":"Fengwei","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kevin","family":"Leach","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kun","family":"Sun","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Angelos","family":"Stavrou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","author":"barber","year":"0"},{"key":"35","article-title":"Nozzle: A defense against heap-spraying code injection attacks","author":"ratanaworabhan","year":"2009","journal-title":"Proceedings of the 18th USENIX Security Symposium"},{"key":"17","author":"designer","year":"2000","journal-title":"JPEG COM Marker Processing Vulnerability"},{"key":"36","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920310"},{"key":"18","year":"0"},{"key":"33","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046752"},{"key":"15","author":"wojtczuk","year":"2009","journal-title":"Attacking SMM Memory Via Intel CPU Cache Poisoning"},{"key":"34","year":"0"},{"key":"16","year":"0"},{"key":"39","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-02918-9_6","article-title":"Defending browsers against drive-by-downloads: Mitigating heap-spraying code injection attacks","author":"egele","year":"2009","journal-title":"Proceedings of the Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA'09)"},{"key":"13","article-title":"Virtuoso: Narrowing the semantic gap in virtual machine introspection","author":"leek","year":"2011","journal-title":"Proceedings of the 32nd IEEE Symposium on Security and Privacy"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.40"},{"key":"37","article-title":"Heap feng shui in javascript","author":"sotirov","year":"2007","journal-title":"Black Hat Europe'06"},{"key":"11","year":"0"},{"key":"38","year":"0"},{"key":"12","doi-asserted-by":"crossref","DOI":"10.1145\/1315245.1315262","article-title":"Stealthy malware detection through vmm-based out-of-The-box semantic view reconstruction","author":"jiang","year":"2007","journal-title":"Proceedings of the 14th ACM conference on Computer and Communications Security"},{"key":"21","doi-asserted-by":"publisher","DOI":"10.1145\/1352592.1352625"},{"key":"20","author":"kong","year":"2004","journal-title":"KProcCheck by SIG2 Win2K Kernel Hidden Process\/module Checker"},{"key":"43","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294294"},{"key":"42","doi-asserted-by":"publisher","DOI":"10.1145\/1772690.1772720"},{"key":"41","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866371"},{"key":"40","article-title":"Zero-sized heap allocations vulnerability analysis","author":"vanegue","year":"2010","journal-title":"Proceedings of the 2nd Conference on USENIX Workshop on Offensive Technologies (WOOT'10)"},{"key":"48","doi-asserted-by":"publisher","DOI":"10.1145\/1460877.1460892"},{"key":"45","article-title":"Preventing and detecting Xen hypervisor subversions","author":"rutkowska","year":"2008","journal-title":"BlackHat Briefings USA"},{"key":"44","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.17"},{"key":"47","article-title":"System management mode hack: Using smm for 'other purposes'","year":"2008","journal-title":"Phrack Magazine"},{"key":"46","article-title":"Using cpu system management mode to circumvent operating system security functions","author":"duflot","year":"2004","journal-title":"Proceedings of the 7th CanSecWest Conference"},{"key":"22","year":"0"},{"key":"23","year":"2012"},{"key":"24","year":"0"},{"key":"25","year":"0"},{"key":"26","author":"bachaalany","year":"0"},{"key":"27","author":"quist","year":"0"},{"key":"28","year":"0"},{"key":"29","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-15512-3_9","article-title":"HyperCheck: A hardware-assisted integrity monitor","author":"wang","year":"2010","journal-title":"Proceedings of 13th International Symposium on Recent Advances in Intrusion Detection"},{"key":"3","year":"0"},{"key":"2","article-title":"A virtual machine introspection based architecture for intrusion detection","author":"garfinkel","year":"2003","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"10","author":"rutkowska","year":"0"},{"key":"1","author":"wyke","year":"2012","journal-title":"Major Shift in Strategy for ZeroAccess Rootkit Malware As It Shifts to User-mode"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866313"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS.2011.78"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.38"},{"key":"32","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382202"},{"key":"5","article-title":"Xen 0wning trilogy","author":"wojtczuk","year":"2008","journal-title":"Black Hat USA"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2012.6263962"},{"key":"4","article-title":"CLOUDBURST: Avmwareguesttohostescapestory","author":"kortchinsky","year":"2009","journal-title":"BlackHatUSA"},{"key":"9","article-title":"Towards an understanding of anti-virtualization and anti-debugging behavior in modern malware","author":"chen","year":"2008","journal-title":"Proceedings of the 38th Annual IEEE International Conference on Dependable Systems and Networks (DSN '08)"},{"key":"8","author":"falliere","year":"2010","journal-title":"Windows Anti-debug Reference"}],"event":{"name":"2013 43rd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)","location":"Budapest, Hungary","start":{"date-parts":[[2013,6,24]]},"end":{"date-parts":[[2013,6,27]]}},"container-title":["2013 43rd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6569391\/6575287\/06575343.pdf?arnumber=6575343","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,21]],"date-time":"2017-06-21T13:50:17Z","timestamp":1498053017000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6575343\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,6]]},"references-count":48,"URL":"https:\/\/doi.org\/10.1109\/dsn.2013.6575343","relation":{},"subject":[],"published":{"date-parts":[[2013,6]]}}}