{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T16:34:37Z","timestamp":1784997277356,"version":"3.55.0"},"reference-count":69,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5]]},"DOI":"10.1109\/sp46214.2022.9833803","type":"proceedings-article","created":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T19:28:05Z","timestamp":1658950085000},"page":"2397-2412","source":"Crossref","is-referenced-by-count":16,"title":["Robbery on DevOps: Understanding and Mitigating Illicit Cryptomining on Continuous Integration Service Platforms"],"prefix":"10.1109","author":[{"given":"Zhi","family":"Li","sequence":"first","affiliation":[{"name":"Huazhong Univ. of Sci. & Tech,School of Cyber Science and Engineering,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weijie","family":"Liu","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongbo","family":"Chen","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"XiaoFeng","family":"Wang","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaojing","family":"Liao","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Luyi","family":"Xing","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mingming","family":"Zha","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hai","family":"Jin","sequence":"additional","affiliation":[{"name":"Huazhong Univ. of Sci. & Tech,School of Computer Science and Technology,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Deqing","family":"Zou","sequence":"additional","affiliation":[{"name":"Huazhong Univ. of Sci. & Tech,School of Cyber Science and Engineering,China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","year":"0","journal-title":"Continuous Integration (CI\/CD) - GitLab"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3359981"},{"key":"ref12","year":"0","journal-title":"Coinimp stop monero service in browser"},{"key":"ref56","author":"kurokawa","year":"0","journal-title":"Forking for asic resistance A monero case study"},{"key":"ref15","year":"0","journal-title":"Cryptocurrency market capitalizations"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355576"},{"key":"ref14","year":"0","journal-title":"Cranepay (crp)"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3366626.3368125"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313665"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23044"},{"key":"ref11","year":"0","journal-title":"Cohen’s Kappa"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243858"},{"key":"ref10","year":"0","journal-title":"CircleCI API"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.3390\/math8081343"},{"key":"ref17","year":"0","journal-title":"Email address transactions"},{"key":"ref16","year":"0","journal-title":"Electroneum pool"},{"key":"ref19","year":"0","journal-title":"GitHub API v3 — GitHub Developer Guide"},{"key":"ref18","year":"0","journal-title":"Fantomcoin (fcn)"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243840"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ISPASS.2019.00011"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2019.00044"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICComm.2018.8484745"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2879605"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW.2018.00014"},{"key":"ref42","first-page":"344","article-title":"Detecting covert cryptomining using HPC","author":"conti","year":"2020","journal-title":"In Proceedings of the 2020 International Conference on Cryptology and Network Security"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1006\/jcss.1995.1021"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00021"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s10723-020-09510-6"},{"key":"ref49","doi-asserted-by":"crossref","first-page":"2102","DOI":"10.1007\/s10664-019-09695-9","article-title":"An empirical study of the long duration of continuous integration builds","volume":"24","author":"ghaleb","year":"2019","journal-title":"Empirical Software Engineering"},{"key":"ref8","year":"0","journal-title":"Captcha test services"},{"key":"ref7","year":"0","journal-title":"Buddy The DevOps Automation Platform"},{"key":"ref9","year":"0","journal-title":"Circlecircleintersection"},{"key":"ref4","year":"0","journal-title":"BigQuery Cloud Data Warehouse — Google Cloud"},{"key":"ref3","year":"0","journal-title":"BASH"},{"key":"ref6","year":"0","journal-title":"Bitrise - Mobile Continuous Integration and Delivery"},{"key":"ref5","year":"0","journal-title":"BitInfoCharts"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53887-6_8"},{"key":"ref35","year":"0","journal-title":"yarn package"},{"key":"ref34","year":"0","journal-title":"Wercker"},{"key":"ref37","year":"2019","journal-title":"gVisor"},{"key":"ref36","year":"2017","journal-title":"Python performance benchmark suite"},{"key":"ref31","year":"0","journal-title":"Threat alert Massive cryptomining campaign abusing github docker hub travis ci & circle ci"},{"key":"ref30","year":"0","journal-title":"SPEC"},{"key":"ref33","year":"0","journal-title":"Us government bans professor for mining bitcoin with a supercomputer"},{"key":"ref32","year":"0","journal-title":"Travis CI"},{"key":"ref2","year":"0","journal-title":"Atlassian thwarts bitcoin mining attack on kubernetes environment"},{"key":"ref1","year":"0","journal-title":"Alexa"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2017.62"},{"key":"ref38","year":"2019","journal-title":"gVisor Security Basics"},{"key":"ref24","year":"0","journal-title":"Mini Guide"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/IISWC.2008.4636099"},{"key":"ref23","year":"0","journal-title":"Locality of reference"},{"key":"ref67","first-page":"122","article-title":"Seismic: Secure in-lined script monitors for interrupting cryptojacks","author":"wang","year":"2018","journal-title":"In Proceedings of the 2018 European Symposium on Research in Computer Security"},{"key":"ref26","year":"0","journal-title":"npm package"},{"key":"ref25","year":"0","journal-title":"Monero Mining Pool"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236033"},{"key":"ref20","year":"0","journal-title":"Github unlimited free private accounts"},{"key":"ref64","first-page":"287","article-title":"Mining on someone else’s dime: Mitigating covert mining operations in clouds and enterprises","author":"tahir","year":"2017","journal-title":"In Proceedings of the 2017 International Symposium on Research in Attacks Intrusions and Defenses"},{"key":"ref63","author":"seigen","year":"0","journal-title":"Cryptonight hash function"},{"key":"ref22","year":"0","journal-title":"Illicit repositories dataset and cijitter codes"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICICT50521.2020.00068"},{"key":"ref21","year":"0","journal-title":"How to Get Rich on Bitcoin By a System Administrator Who’s Secretly Growing Them On His School’s Computers"},{"key":"ref65","author":"total","year":"0","journal-title":"VirusTotal-Free Online Virus Malware and URL Scanner"},{"key":"ref28","year":"0","journal-title":"Pearson Correlation Coefficient"},{"key":"ref27","year":"0","journal-title":"PARSEC"},{"key":"ref29","year":"0","journal-title":"RANDOM"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.4337\/9781784717766.00019"},{"key":"ref62","author":"saberhagen","year":"0","journal-title":"Monero (cryptocurrency)"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278539"}],"event":{"name":"2022 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2022,5,22]]},"end":{"date-parts":[[2022,5,26]]}},"container-title":["2022 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9833550\/9833558\/09833803.pdf?arnumber=9833803","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T23:29:56Z","timestamp":1699486196000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9833803\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5]]},"references-count":69,"URL":"https:\/\/doi.org\/10.1109\/sp46214.2022.9833803","relation":{},"subject":[],"published":{"date-parts":[[2022,5]]}}}