{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T12:15:41Z","timestamp":1763468141145},"reference-count":33,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,6]]},"DOI":"10.1109\/dsn.2013.6575344","type":"proceedings-article","created":{"date-parts":[[2013,8,14]],"date-time":"2013-08-14T16:18:36Z","timestamp":1376497116000},"source":"Crossref","is-referenced-by-count":16,"title":["Manipulating semantic values in kernel data structures: Attack assessments and implications"],"prefix":"10.1109","author":[{"given":"Aravind","family":"Prakash","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eknath","family":"Venkataramani","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Heng","family":"Yin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiqiang","family":"Lin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","author":"russinovich","year":"0","journal-title":"Windows Sysinternals Utilities"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1145\/93542.93576"},{"key":"18","article-title":"Automated whitebox fuzz testing","author":"godfroid","year":"2008","journal-title":"Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS'08)"},{"key":"33","doi-asserted-by":"publisher","DOI":"10.1109\/IAS.2007.36"},{"key":"15","year":"0"},{"key":"16","article-title":"Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software","author":"newsome","year":"2005","journal-title":"Proceedings of 12th Annual NDSS Conference"},{"key":"13","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-89862-7_1","article-title":"BitBlaze: A new approach to computer security via binary analysis","author":"song","year":"2008","journal-title":"Proceedings of the 4th International Conference on Information Systems Security"},{"key":"14","year":"0"},{"key":"11","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-87403-4_2","article-title":"Countering persistent kernel rootkits through systematic hook discovery","author":"wang","year":"2008","journal-title":"Proceedings of the 14th International Symposium on Recent Advances in Intrusion Detection (RAID'08)"},{"key":"12","article-title":"Countering kernel rootkits with lightweight hook prevention","author":"wang","year":"2009","journal-title":"Proceedings of ACM CCS"},{"key":"21","doi-asserted-by":"crossref","DOI":"10.1145\/1315245.1315262","article-title":"Stealthy malware detection through VMM-based out-of-The-box semantic view reconstruction","author":"jiang","year":"2007","journal-title":"Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS'07)"},{"key":"20","article-title":"A virtual machine introspection based architecture for intrusion detection","author":"garfinkel","year":"2003","journal-title":"Proceedings of Network and Distributed Systems Security Symposium (NDSS'03)"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.11"},{"key":"23","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.40"},{"key":"24","doi-asserted-by":"publisher","DOI":"10.1145\/2451512.2451534"},{"key":"25","article-title":"Klee: Unassisted and automatic generation of high-coverage tests for complex systems programs","author":"cadar","year":"2008","journal-title":"Proceedings of OSDI 2008"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950396"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.27"},{"key":"28","article-title":"Identifying and analyzing pointer misuses for sophisticated memory-corruption exploit diagnosis","author":"zhang","year":"2012","journal-title":"Proc 10th Annu Netw Distrib Syst Security Symp"},{"key":"29","article-title":"Automatic reverse engineering of data structures from binary execution","author":"lin","year":"2010","journal-title":"Proceedings of the 17th Annual Network and Distributed System Security Symposium (NDSS'10)"},{"key":"3","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653730"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653729"},{"key":"10","article-title":"Automated detection of persistent kernel control-flow attacks","author":"nick petroni","year":"2007","journal-title":"Proceedings of ACM CCS"},{"key":"1","year":"2005"},{"key":"30","article-title":"Howard: A dynamic excavator for reverse engineering data structures","author":"slowinska","year":"2011","journal-title":"Proc of NDSS 2011"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294294"},{"key":"6","author":"golovanov","year":"2010","journal-title":"Analysis of Tdss Rootkit Technologies"},{"key":"32","article-title":"Copilot-A coprocessor-based kernel runtime integrity monitor","author":"petroni jr","year":"2004","journal-title":"Proceedings of the 13th USENIX Security Symposium"},{"key":"5","article-title":"Tracking rootkit footprints with a practical memory analysis system","author":"cui","year":"2012","journal-title":"Proceedings of USENIX Security Symposium"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1109\/HOTOS.2001.990073"},{"key":"4","article-title":"Siggraph: Brute force scanning of kernel data structure instances using graph-based signatures","author":"lin","year":"2011","journal-title":"Proceedings of NDSS"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-16161-2_10"},{"key":"8","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/978-3-540-87403-4_1","article-title":"Guest-transparent prevention of kernel rootkits with VMM-based memory shadowing","author":"riley","year":"2008","journal-title":"Proceedings of the 11th International Symposium on Recent Advances in Intrusion Detection"}],"event":{"name":"2013 43rd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)","location":"Budapest, Hungary","start":{"date-parts":[[2013,6,24]]},"end":{"date-parts":[[2013,6,27]]}},"container-title":["2013 43rd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6569391\/6575287\/06575344.pdf?arnumber=6575344","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,21]],"date-time":"2019-07-21T00:15:47Z","timestamp":1563668147000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6575344\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,6]]},"references-count":33,"URL":"https:\/\/doi.org\/10.1109\/dsn.2013.6575344","relation":{},"subject":[],"published":{"date-parts":[[2013,6]]}}}