{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T13:28:30Z","timestamp":1777901310333,"version":"3.51.4"},"reference-count":80,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2021YFB3101201"],"award-info":[{"award-number":["2021YFB3101201"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972297"],"award-info":[{"award-number":["61972297"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62172308"],"award-info":[{"award-number":["62172308"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62172144"],"award-info":[{"award-number":["62172144"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/tifs.2023.3289254","type":"journal-article","created":{"date-parts":[[2023,6,26]],"date-time":"2023-06-26T18:29:57Z","timestamp":1687804197000},"page":"3891-3905","source":"Crossref","is-referenced-by-count":4,"title":["Reverse Engineering of Obfuscated Lua Bytecode via Interpreter Semantics Testing"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3991-2651","authenticated-orcid":false,"given":"Chenke","family":"Luo","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9682-0502","authenticated-orcid":false,"given":"Jiang","family":"Ming","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Tulane University, New Orleans, LA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4639-5824","authenticated-orcid":false,"given":"Jianming","family":"Fu","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5731-8958","authenticated-orcid":false,"given":"Guojun","family":"Peng","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7804-0286","authenticated-orcid":false,"given":"Zhetao","family":"Li","sequence":"additional","affiliation":[{"name":"Guangdong Provincial Key Laboratory of Data Security and Privacy Protection, National & Local Joint Engineering Research Center of Network Security Detection and Protection Technology, College of Information Science and Technology, Jinan University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"PYPL Popularity of Programming Language","year":"2022"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3186277"},{"key":"ref3","volume-title":"List of Applications Using Lua","year":"2022"},{"key":"ref4","volume-title":"LuaBot is the First Linux DDoS Botnet Written in Lua Language","author":"Paganini","year":"2016"},{"key":"ref5","volume-title":"Interview With the LuaBot Malware Author","year":"2016"},{"key":"ref6","volume-title":"Linux Shishiga Malware Using LUA Scripts","author":"Malik","year":"2017"},{"key":"ref7","volume-title":"New GodLua Malware Evades Traffic Monitoring via DNS over HTTPS","author":"Gatlan","year":"2019"},{"key":"ref8","volume-title":"ProjectSauron: Top Level Cyber-Espionage Platform Covertly Extracts Encrypted Government Comms","year":"2016"},{"key":"ref9","volume-title":"PoetRAT: Malware Targeting Public and Private Sector in Azerbaijan Evolves","author":"Mercer","year":"2020"},{"key":"ref10","volume-title":"IoTroop BotNet: The Full Investigation","year":"2017"},{"key":"ref11","volume-title":"Flamer\/sKyWIper Malware: Analysis","author":"Kindlund","year":"2012"},{"key":"ref12","volume-title":"Chalubo Botnet","year":"2018"},{"key":"ref13","volume-title":"What Sauron Tells Us About What NSA\u2019s Up To, and What It Should Do Next","author":"Weaver","year":"2016"},{"key":"ref14","volume-title":"Strider Cyber Attack Group Deploying Malware for Espionage","author":"Ashford","year":"2016"},{"key":"ref15","volume-title":"Lua XSS: Examples and Prevention","year":"2022"},{"key":"ref16","volume-title":"Threat Thursday: SunSeed Malware Targets Ukraine Refugee Aid Efforts","year":"2022"},{"key":"ref17","volume-title":"An Analysis of GodLua Backdoor","year":"2019"},{"key":"ref18","volume-title":"LuaDec is a Decompiler for the Lua Language","author":"Muhammad","year":"2022"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2017.38"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3127360.3127367"},{"key":"ref21","volume-title":"Code Virtualizer: Total Obfuscation Against Reverse Engineering","year":"2022"},{"key":"ref22","volume-title":"VMProtect Software Protection","year":"2022"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464839"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.24015"},{"key":"ref25","volume-title":"Virtual Machines: Versatile Platforms for Systems and Processes","author":"Smith","year":"2005"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.27"},{"key":"ref27","first-page":"1","article-title":"Unpacking virtualization obfuscators","volume-title":"Proc. 3rd USENIX Workshop Offensive Technol. (WOOT)","author":"Rolles"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-009-0126-4"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3098954.3098995"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/360825.360849"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046739"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.47"},{"key":"ref33","first-page":"1","article-title":"BinSim: Trace-based semantic binary diffing via system call sliced segment equivalence checking","volume-title":"Proc. 26th USENIX Conf. Secur. Symp. (USENIX Security)","author":"Ming"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243827"},{"key":"ref35","volume-title":"The Computer Benchmark Game","author":"Gouy"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93411-2_17"},{"key":"ref37","author":"Ierusalimschy","year":"2020","journal-title":"Lua 5.4 Reference Manual"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44681-8_59"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/268946.268962"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3453483.3454068"},{"key":"ref41","volume-title":"Surreptitious Software: Obfuscation, Watermarking, and Tamperproofing for Software Protection","author":"Nagra","year":"2009"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2522968.2522972"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/2886012"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/bs.adcom.2017.09.004"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3318216.3363379"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00054"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427256"},{"key":"ref48","article-title":"Encyclopedia of cryptography and security","volume-title":"Reverse Engineering of Malware Emulators","author":"Polychronakis","year":"2011"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3015135.3015143"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315286"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455820"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423342"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/1453101.1453114"},{"key":"ref54","volume-title":"BinDiff: Graph Comparison for Binary Files","year":"2020"},{"key":"ref55","volume-title":"VT Intelligence: Combine Google and Facebook and Apply It to the Field of Malware","year":"2022"},{"key":"ref56","volume-title":"LuCI\u2014OpenWrt Configuration Interface","year":"2022"},{"key":"ref57","volume-title":"Best Programming Language for Games: 15 Game Programming Languages Reviewed","author":"Hasan","year":"2020"},{"key":"ref58","volume-title":"xLua","year":"2022"},{"key":"ref59","volume-title":"Unity Real-Time Development Platform","year":"2022"},{"key":"ref60","volume-title":"Space Hunter","year":"2022"},{"key":"ref61","volume-title":"King of Fighters","year":"2022"},{"key":"ref62","volume-title":"Raziel","year":"2022"},{"key":"ref63","volume-title":"Time Summon","year":"2022"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/382109.382124"},{"key":"ref66","volume-title":"Mandelbrot Set","year":"2022"},{"key":"ref67","volume-title":"Hundred-Dollar, Hundred-Digit Challenge Problems"},{"key":"ref68","volume-title":"VirusTotal += PCAP Analyzer","author":"Martinez","year":"2013"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/SERE.2012.13"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/3098954.3107009"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363187"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.28"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2011.59"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93411-2_15"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866354"},{"key":"ref76","first-page":"1","article-title":"Looking inside the (drop) box","volume-title":"Proc. 7th USENIX Conf. Offensive Technol. (WOOT)","author":"Kholia"},{"key":"ref77","volume-title":"Building an Obfuscated Python Interpreter: We Need More Opcodes","author":"Guelton","year":"2014"},{"key":"ref78","volume-title":"Deobfuscating Python Bytecode","author":"Homan","year":"2016"},{"key":"ref79","volume-title":"Rusty-JSYC (JavaScript bYtecode Compiler) is a JavaScript-To-Bytecode Compiler Written in Rust","author":"Willbold","year":"2019"},{"key":"ref80","volume-title":"Python Malware on the Rise","author":"Jackson","year":"2020"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9970396\/10163061.pdf?arnumber=10163061","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T11:53:23Z","timestamp":1709294003000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10163061\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":80,"URL":"https:\/\/doi.org\/10.1109\/tifs.2023.3289254","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}