{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,23]],"date-time":"2024-10-23T04:31:55Z","timestamp":1729657915640,"version":"3.28.0"},"reference-count":14,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011,10]]},"DOI":"10.1109\/malware.2011.6112326","type":"proceedings-article","created":{"date-parts":[[2011,12,29]],"date-time":"2011-12-29T16:04:25Z","timestamp":1325174665000},"page":"50-57","source":"Crossref","is-referenced-by-count":3,"title":["Building malware infection trees"],"prefix":"10.1109","author":[{"given":"Jose Andre","family":"Morales","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michael","family":"Main","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Weiliang","family":"Luo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shouhuai","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ravi","family":"Sandhu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"Professional Rootkits","year":"2007","author":"vieler","key":"13"},{"journal-title":"Zwxx Routines in Windows Kernel","year":"0","key":"14"},{"journal-title":"System Service Dispatch Table","year":"0","key":"11"},{"journal-title":"The Art of Computer Virus Research and Defense","year":"2005","author":"szor","key":"12"},{"journal-title":"Computer Viruses From Theory to Applications","year":"2005","author":"filiol","key":"3"},{"journal-title":"A Short Course on Computer Viruses","year":"1994","author":"cohen","key":"2"},{"key":"1","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-34799-2_28"},{"key":"10","doi-asserted-by":"crossref","first-page":"273","DOI":"10.3233\/JCS-2007-15203","article-title":"Prevention of information attacks by run-time detection of self-replication in computer codes","volume":"15","author":"skormin","year":"2007","journal-title":"Journal of Computer Security"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2007.58"},{"journal-title":"Kaspersky Anti-virus","year":"0","key":"6"},{"journal-title":"Rootkits Subverting the Windows Kernel","year":"2005","author":"hoglund","key":"5"},{"year":"0","key":"4"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-008-0101-5"},{"key":"8","first-page":"351","article-title":"Effective and efficient malware detection at the end host","author":"kolbitsch","year":"2009","journal-title":"Proceedings of the 18th Conference on USENIX Security Symposium SSYM'09"}],"event":{"name":"2011 6th International Conference on Malicious and Unwanted Software (MALWARE)","start":{"date-parts":[[2011,10,18]]},"location":"Fajardo, PR, USA","end":{"date-parts":[[2011,10,19]]}},"container-title":["2011 6th International Conference on Malicious and Unwanted Software"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/6104282\/6112317\/06112326.pdf?arnumber=6112326","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,21]],"date-time":"2019-06-21T15:55:13Z","timestamp":1561132513000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6112326\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,10]]},"references-count":14,"URL":"https:\/\/doi.org\/10.1109\/malware.2011.6112326","relation":{},"subject":[],"published":{"date-parts":[[2011,10]]}}}