{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T12:25:24Z","timestamp":1730291124490,"version":"3.28.0"},"reference-count":19,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016,12]]},"DOI":"10.1109\/pst.2016.7906999","type":"proceedings-article","created":{"date-parts":[[2017,4,24]],"date-time":"2017-04-24T21:12:50Z","timestamp":1493068370000},"page":"637-641","source":"Crossref","is-referenced-by-count":1,"title":["Analysis and forensics for Behavior Characteristics of Malware in Internet"],"prefix":"10.1109","author":[{"given":"Ping","family":"Ren","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wu","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Donghong","family":"Sun","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jian-ping","family":"Wu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ke","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"year":"0","key":"ref10"},{"year":"0","key":"ref11"},{"year":"0","key":"ref12"},{"year":"0","key":"ref13"},{"year":"0","key":"ref14"},{"year":"0","key":"ref15"},{"year":"0","key":"ref16"},{"key":"ref17","first-page":"398","article-title":"Disassembled code analyzer for malware","author":"sulaiman","year":"2015","journal-title":"Information Reuse and Integration Conf 2015 IEEE International Conference"},{"key":"ref18","article-title":"Behavior-based Spyware Detection","author":"kirda","year":"2013","journal-title":"Proceedings of the 20th Conference on USENIX Security Symposium"},{"key":"ref19","article-title":"MAPMon: A Host-Based Malware Detection Tool","author":"dai","year":"2014","journal-title":"IEEE Pacific Rim Int Symp Dependable Computing"},{"journal-title":"The Art of Memory Forensics Detecting Malware and Threats in Windows Linux and Mac Memory","year":"2015","author":"ligh","key":"ref4"},{"key":"ref3","first-page":"32","article-title":"Detecting Suspicion Information on the Web Using Crime Data Mining Techniques","volume":"3","author":"hosseinkhani","year":"2014","journal-title":"International Journal of Advanced Computer Science and Information Technology (IJACSIT)"},{"key":"ref6","article-title":"Using silk for network traffic analysis","author":"shimeall","year":"2010","journal-title":"Tech Rep"},{"journal-title":"Digital Triage Forensics- Processing the Digital Crime Scene","year":"2010","author":"pearson","key":"ref5"},{"year":"0","key":"ref8"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CCEM.2014.7015493"},{"key":"ref2","first-page":"181","author":"andress","year":"2014","journal-title":"Cyber Warfare Techniques Tactics and Tools for Security Practitioners 2nd Ed"},{"key":"ref1","article-title":"PE File Header Analysis-based Packed PE File Detection Technique (PHAd)","author":"choi","year":"2015","journal-title":"International Symposium on Computer Science and its Applications"},{"year":"0","key":"ref9"}],"event":{"name":"2016 14th Annual Conference on Privacy, Security and Trust (PST)","start":{"date-parts":[[2016,12,12]]},"location":"Auckland","end":{"date-parts":[[2016,12,14]]}},"container-title":["2016 14th Annual Conference on Privacy, Security and Trust (PST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7899233\/7906913\/07906999.pdf?arnumber=7906999","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,4,17]],"date-time":"2020-04-17T06:00:18Z","timestamp":1587103218000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7906999\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,12]]},"references-count":19,"URL":"https:\/\/doi.org\/10.1109\/pst.2016.7906999","relation":{},"subject":[],"published":{"date-parts":[[2016,12]]}}}