{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,27]],"date-time":"2026-09-27T13:19:27Z","timestamp":1790515167025,"version":"4.1.0"},"reference-count":70,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015,2]]},"DOI":"10.1109\/hpca.2015.7056070","type":"proceedings-article","created":{"date-parts":[[2015,3,10]],"date-time":"2015-03-10T22:13:51Z","timestamp":1426025631000},"page":"651-661","source":"Crossref","is-referenced-by-count":113,"title":["Malware-aware processors: A framework for efficient online malware detection"],"prefix":"10.1109","author":[{"given":"Meltem","family":"Ozsoy","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Caleb","family":"Donovick","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Iakov","family":"Gorelik","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nael","family":"Abu-Ghazaleh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dmitry","family":"Ponomarev","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref70","article-title":"Control flow integrity for cots binaries","author":"zhang","year":"2013","journal-title":"Proc 22nd USENIX Security Symp"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.15"},{"key":"ref38","first-page":"351","article-title":"Effective and efficient malware detection at the end host","author":"kolbitsch","year":"2009","journal-title":"USENIX Security Symposium"},{"key":"ref33","article-title":"A survey of malware detection techniques","author":"idika","year":"0","journal-title":"Technical Report"},{"key":"ref32","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-71918-2","author":"hyndman","year":"2008","journal-title":"Forecasting with Exponential Smoothing"},{"key":"ref31","author":"hosmer","year":"2004","journal-title":"Applied Logistic Regression"},{"key":"ref30","doi-asserted-by":"crossref","first-page":"151","DOI":"10.3233\/JCS-980109","article-title":"Intrusion detection using sequences of system calls","volume":"6","author":"hofmeyr","year":"1998","journal-title":"Journal of Computer Security"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2013.6522324"},{"key":"ref36","article-title":"Branch regulation: Low overhead mitigation of code reuse attacks","author":"kayaalp","year":"2012","journal-title":"Proceedinvs of ISCA"},{"key":"ref35","article-title":"Fast SHA-256 Implementations on Intel Architecture Processors","author":"jim guilford","year":"2012","journal-title":"Tech Rep"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-008-0086-0"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11379-1_6"},{"key":"ref62","article-title":"Pax non-executable pages design & implementation","author":"team","year":"0"},{"key":"ref61","article-title":"Pax address space layout randomization (aslr)","author":"team","year":"0"},{"key":"ref63","article-title":"Stack shield technical info file v0.7","year":"2001"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2307636.2307663"},{"key":"ref64","article-title":"VirusTotal","year":"0"},{"key":"ref27","article-title":"A virtual machine introspection based architecture for intrusion detection","author":"garfinkel","year":"2003","journal-title":"Proc Usenix Symposium on Network and Distributed System Security (NDSS)"},{"key":"ref65","article-title":"Optimal randomized classification in adversarial settings","author":"vorobeychik","year":"2014","journal-title":"Proceedings of the 13th International Conference on Autonomous Agents and Multiagent Systems (AAMAS 2014)"},{"key":"ref66","article-title":"Crimeware protection: 3rd generation intel core vpro processors","year":"2014"},{"key":"ref29","article-title":"Bothunter: Detecting malware infection through ids-driven dialog correlation","author":"gu","year":"2007","journal-title":"Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39235-1_3"},{"key":"ref68","doi-asserted-by":"crossref","first-page":"116","DOI":"10.1145\/1315245.1315261","article-title":"Panorama: capturing system-wide information flow for malware detection and analysis","author":"yin","year":"2007","journal-title":"Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS)"},{"key":"ref69","article-title":"Dep\/aslr by pass without rop\/jit","author":"yu","year":"0"},{"key":"ref2","article-title":"The ao486 project","year":"2014"},{"key":"ref1","article-title":"De2-115 development and education board","year":"2010"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1346281.1346295"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2089125.2089126"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455779"},{"key":"ref24","article-title":"Propolice: Improved stack-smashing attack detection","author":"etoh","year":"2001","journal-title":"IPSJ SIG Notes on Computer Security"},{"key":"ref23","article-title":"A noninclusive memory permissions architecture for protecting against cross-layer attacks","author":"elwell","year":"2014","journal-title":"Proc Int Symp High Performance Computer Architecture (HPCA)"},{"key":"ref26","article-title":"Intel architecture instruction set extensions programming reference","year":"2014"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2014.25"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.41"},{"key":"ref51","first-page":"229","article-title":"Snort: Lightweight intrusion detection for networks","author":"roesch","year":"1999","journal-title":"Proceedings of USENIX Conference on System Administration (LISA)"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/1024393.1024404"},{"key":"ref58","author":"skoudis","year":"2003","journal-title":"Malware Fighting Malicious Code"},{"key":"ref57","first-page":"552","article-title":"The geometry of innocent flesh on the bone: Return-into-libc without function calls (on the x86)","author":"shacham","year":"2007","journal-title":"Proceedings of CCS"},{"key":"ref56","article-title":"Software Guard Extensions Programming Reference","year":"2014"},{"key":"ref55","article-title":"A feed forward multi-layer neural network","author":"schmid","year":"2010"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-11747-3_3"},{"key":"ref53","article-title":"A practical dynamic buffer overflow detector","author":"ruwase","year":"2004","journal-title":"NDSS"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-012-0160-5"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1504\/IJESDF.2007.016865"},{"key":"ref11","doi-asserted-by":"crossref","first-page":"30","DOI":"10.1145\/1966913.1966919","article-title":"Jump-oriented programming: a new class of code-reuse attack","author":"bletsch","year":"2011","journal-title":"Proceedings of ASIACCS"},{"key":"ref40","article-title":"McAfee labs threats report, q4, 2013","year":"2014"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1201\/b12751"},{"key":"ref13","article-title":"Xed2 user guide","author":"charney","year":"2011"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.20"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"ref16","article-title":"StackGuard: Automatic adaptive detection and prevention of buffer-overflow attacks","volume":"7","author":"cowan","year":"1998","journal-title":"Proceedings of USENIX Security"},{"key":"ref17","article-title":"Aslr bypassing method on 2.6.17\/20 linux kernel","author":"crew","year":"2008"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014066"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2485922.2485970"},{"key":"ref4","article-title":"Malware protection center","year":"2014"},{"key":"ref3","article-title":"Laboratory for dependable distributed systems university of mannheim","year":"2014"},{"key":"ref6","author":"abu-mostafa","year":"2012","journal-title":"Learning from data A short course"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.techsoc.2010.07.001"},{"key":"ref8","article-title":"Part 3: Memory protection technologies","author":"andersen","year":"2004","journal-title":"Changes to Functionality in Microsoft Windows XP Service Pack"},{"key":"ref7","article-title":"Smashing the stack for fun and profit","year":"1996"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/2016604.2016650"},{"key":"ref9","article-title":"Vex: Vetting browser extensions for security vulnerabilities","author":"bandhakavi","year":"2010","journal-title":"Proc Usenix Security Symposium"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/503272.503286"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/242857.242869"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920269"},{"key":"ref47","article-title":"Open Malware","year":"0"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2488368"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/52.877857"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.21"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/VLSISOC.2010.5642617"}],"event":{"name":"2015 IEEE 21st International Symposium on High Performance Computer Architecture (HPCA)","location":"Burlingame, CA, USA","start":{"date-parts":[[2015,2,7]]},"end":{"date-parts":[[2015,2,11]]}},"container-title":["2015 IEEE 21st International Symposium on High Performance Computer Architecture (HPCA)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7048058\/7056013\/07056070.pdf?arnumber=7056070","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,21]],"date-time":"2019-08-21T21:09:55Z","timestamp":1566421795000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7056070\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,2]]},"references-count":70,"URL":"https:\/\/doi.org\/10.1109\/hpca.2015.7056070","relation":{},"subject":[],"published":{"date-parts":[[2015,2]]}}}