{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,29]],"date-time":"2025-10-29T03:43:52Z","timestamp":1761709432224,"version":"3.40.5"},"reference-count":17,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,12]]},"DOI":"10.1109\/pccc.2017.8280450","type":"proceedings-article","created":{"date-parts":[[2018,2,5]],"date-time":"2018-02-05T17:31:28Z","timestamp":1517851888000},"page":"1-7","source":"Crossref","is-referenced-by-count":4,"title":["Identifying malware with HTTP content type inconsistency via header-payload comparison"],"prefix":"10.1109","author":[{"given":"Fei","family":"Xu","sequence":"first","affiliation":[]},{"given":"Haiqing","family":"Pan","sequence":"additional","affiliation":[]},{"given":"Zigang","family":"Cao","sequence":"additional","affiliation":[]},{"given":"Zhen","family":"Li","sequence":"additional","affiliation":[]},{"given":"Gang","family":"Xiong","sequence":"additional","affiliation":[]},{"given":"Yangyang","family":"Guan","sequence":"additional","affiliation":[]},{"given":"S.M.","family":"Yiu","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23269"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40203-6_31"},{"journal-title":"Microsoft Microsoft PE and COFF specification","year":"0","key":"ref12"},{"year":"0","key":"ref13"},{"journal-title":"RFC2046 Multipurpose Internet Mail Extensions (MIME) Part Two Media Types","year":"0","key":"ref14"},{"journal-title":"Cuckoo Sandbox","year":"2012","author":"claudio","key":"ref15"},{"journal-title":"Multipurpose Internet Mail Extensions (MIME) Part One Format of Internet Message Bodies","year":"0","key":"ref16"},{"key":"ref17","article-title":"Poster: A Low-cost Detection Scheme on Fast-flux Malware Distribution","author":"pan","year":"0","journal-title":"IEEE Symposium on Security and Privacy"},{"key":"ref4","first-page":"1","article-title":"A network attack forensic platform against HTTP evasive behavior","author":"li","year":"2016","journal-title":"The Journal of Supercomputing"},{"journal-title":"Virus Total","year":"2015","key":"ref3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.15"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.3"},{"key":"ref8","first-page":"42","article-title":"Large-Scale Analysis of Malware Downloaders","author":"rossow","year":"2012","journal-title":"International Conference on Detection of Intrusions and Malware and Vulnerability Assessment Springer Berlin Heidelberg"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/1978672.1978682"},{"journal-title":"DELL Sonic SonicOS 6 2 Administration Guide","year":"0","key":"ref2"},{"journal-title":"RFC822 Standard for ARPA Internet Text Messages","year":"0","key":"ref1"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-28537-0_24"}],"event":{"name":"2017 IEEE 36th International Performance Computing and Communications Conference (IPCCC)","start":{"date-parts":[[2017,12,10]]},"location":"San Diego, CA","end":{"date-parts":[[2017,12,12]]}},"container-title":["2017 IEEE 36th International Performance Computing and Communications Conference (IPCCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8269763\/8280427\/08280450.pdf?arnumber=8280450","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2018,3,12]],"date-time":"2018-03-12T17:49:51Z","timestamp":1520876991000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/8280450\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,12]]},"references-count":17,"URL":"https:\/\/doi.org\/10.1109\/pccc.2017.8280450","relation":{},"subject":[],"published":{"date-parts":[[2017,12]]}}}