{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,13]],"date-time":"2026-05-13T06:49:10Z","timestamp":1778654950323,"version":"3.51.4"},"reference-count":33,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Ministry of Industry and Information Technology, China","award":["CEIEC-2020-ZM02-0134"],"award-info":[{"award-number":["CEIEC-2020-ZM02-0134"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Ind. Inf."],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1109\/tii.2023.3327522","type":"journal-article","created":{"date-parts":[[2023,11,6]],"date-time":"2023-11-06T20:05:44Z","timestamp":1699301144000},"page":"4627-4639","source":"Crossref","is-referenced-by-count":6,"title":["Antibypassing Four-Stage Dynamic Behavior Modeling for Time-Efficient Evasive Malware Detection"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4745-3771","authenticated-orcid":false,"given":"Yifei","family":"Zhang","sequence":"first","affiliation":[{"name":"Beijing Institute of Technology, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7729-5439","authenticated-orcid":false,"given":"Senlin","family":"Luo","sequence":"additional","affiliation":[{"name":"Beijing Institute of Technology, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-1272-4907","authenticated-orcid":false,"given":"Hangyi","family":"Wu","sequence":"additional","affiliation":[{"name":"Beijing Institute of Technology, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8850-8380","authenticated-orcid":false,"given":"Limin","family":"Pan","sequence":"additional","affiliation":[{"name":"Beijing Institute of Technology, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2005.163"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2018.2829202"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2022.07.002"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2022.102836"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.3390\/electronics12061333"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3365001"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3004264"},{"key":"ref8","first-page":"287","article-title":"BareCloud: Bare-metal analysis-based evasive malware detection","volume-title":"Proc. 23rd USENIX Conf. Secur. Symp.","author":"Kirat","year":"2014"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2020.3048791"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3207782"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2023.102954"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3530810"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.17559\/tv-20210820065715"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.3233\/JIFS-169234"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.4133"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22424-9_8"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45719-2_8"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1972551.1972554"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-014-0224-9"},{"key":"ref21","article-title":"Lets learn: Decoding latest Trick-Bot Loader string template & new Tor plugin server communication","author":"Kremez","year":"2018"},{"key":"ref22","article-title":"Win32\/Rbot.ST","year":"2017"},{"key":"ref23","volume-title":"New EMOTET Hijacks a Windows API, Evades Sandbox","author":"Wu","year":"2017"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-017-0290-x"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-68768-1_4"},{"key":"ref27","volume-title":"__vmx_vmread","year":"2021"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.4023"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICAICT.2015.7338541"},{"key":"ref31","article-title":"Virtual machines detection enhanced","author":"Rin","year":"2013"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2020.102460"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664252"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2021.3082002"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.09.008"},{"key":"ref37","volume-title":"Windows System Assessment Tool Provider","year":"2023"}],"container-title":["IEEE Transactions on Industrial Informatics"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9424\/10460264\/10309858.pdf?arnumber=10309858","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,8]],"date-time":"2024-03-08T02:12:47Z","timestamp":1709863967000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10309858\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3]]},"references-count":33,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tii.2023.3327522","relation":{},"ISSN":["1551-3203","1941-0050"],"issn-type":[{"value":"1551-3203","type":"print"},{"value":"1941-0050","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3]]}}}