{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:38:42Z","timestamp":1750307922144,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2006,10,25]],"date-time":"2006-10-25T00:00:00Z","timestamp":1161734400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,10,25]]},"DOI":"10.1145\/1177080.1177087","type":"proceedings-article","created":{"date-parts":[[2007,1,17]],"date-time":"2007-01-17T01:15:56Z","timestamp":1168996556000},"page":"53-64","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":19,"title":["Finding diversity in remote code injection exploits"],"prefix":"10.1145","author":[{"given":"Justin","family":"Ma","sequence":"first","affiliation":[{"name":"University of California, San Diego"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"John","family":"Dunagan","sequence":"additional","affiliation":[{"name":"Microsoft Research"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Helen J.","family":"Wang","sequence":"additional","affiliation":[{"name":"Microsoft Research"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stefan","family":"Savage","sequence":"additional","affiliation":[{"name":"University of California, San Diego"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Geoffrey M.","family":"Voelker","sequence":"additional","affiliation":[{"name":"University of California, San Diego"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2006,10,25]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"BBC News. Sasser Creator Avoids Jail Term. http:\/\/news.bbc.co.uk\/2\/hi\/technology\/4659329.stm July 2005.  BBC News. Sasser Creator Avoids Jail Term. http:\/\/news.bbc.co.uk\/2\/hi\/technology\/4659329.stm July 2005."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095824"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/11506881_3"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102152"},{"volume-title":"Graph-Based Comparison of Executable Objects. In Symposium sur la S\u00e9curit\u00e9 des Technologies de l'Information et des Communications (SSTIC)","year":"2005","author":"Dullien T.","key":"e_1_3_2_1_5_1"},{"volume-title":"Proceedings of the IEEE Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA)","year":"2004","author":"Flake H.","key":"e_1_3_2_1_6_1"},{"volume-title":"PWS Publishing Company","year":"1997","author":"Hochbaum D.","key":"e_1_3_2_1_7_1"},{"key":"e_1_3_2_1_8_1","unstructured":"G. Keizer. Sasser Worm Impacted Businesses Around the World. http:\/\/www.techweb.com\/wire\/story\/TWB20040507S0008 May 2004.  G. Keizer. Sasser Worm Impacted Businesses Around the World. http:\/\/www.techweb.com\/wire\/story\/TWB20040507S0008 May 2004."},{"volume-title":"Distributed Worm Signature Detection. In Proceedings of the USENIX Security Symposium","year":"2004","author":"Kim H.-A.","key":"e_1_3_2_1_9_1"},{"volume-title":"Proceedings of the 2nd ACM Workshop on Hot Topics in Networks (HotNets-II)","year":"2003","author":"Kreibich C.","key":"e_1_3_2_1_10_1"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/11663812_11"},{"key":"e_1_3_2_1_12_1","unstructured":"R. Lemos. MSBlast Epidemic Far Larger than Believed. http:\/\/news.com.com\/2100-7349 3-5184439.html Apr. 2004.  R. Lemos. MSBlast Epidemic Far Larger than Believed. http:\/\/news.com.com\/2100-7349 3-5184439.html Apr. 2004."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"e_1_3_2_1_14_1","unstructured":"Metasploit Project. The Metasploit Framework. http:\/\/www.metasploit.com\/projects\/Framework\/.  Metasploit Project. The Metasploit Framework. http:\/\/www.metasploit.com\/projects\/Framework\/."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2003.1219056"},{"key":"e_1_3_2_1_17_1","unstructured":"Nepenthes Development Team. ShellcodeHandler Generic LinkTrans. http:\/\/nepenthes.mwcollect.org\/.  Nepenthes Development Team. ShellcodeHandler Generic LinkTrans. http:\/\/nepenthes.mwcollect.org\/."},{"volume-title":"Proceedings of the 12th Annual Network and Distributed System Security Symposium (NDSS '05)","year":"2005","author":"Newsome J.","key":"e_1_3_2_1_18_1"},{"volume-title":"Proceedings of Advances in Neural Information Processing Systems","year":"2001","author":"Ng A.","key":"e_1_3_2_1_19_1"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028794"},{"key":"e_1_3_2_1_21_1","unstructured":"P. Royal D. Dagon and W. Lee. PolyUnpack: Automating the Hidden-Code Extraction of Packed Malware. http:\/\/www-static.cc.gatech.edu\/ ranma1\/polyunpack\/.  P. Royal D. Dagon and W. Lee. PolyUnpack: Automating the Hidden-Code Extraction of Packed Malware. http:\/\/www-static.cc.gatech.edu\/ ranma1\/polyunpack\/."},{"volume-title":"Proceedings of the 6th ACM\/USENIX Symposium on Operating System Design and Implementation (OSDI)","year":"2004","author":"Singh S.","key":"e_1_3_2_1_22_1"},{"volume-title":"REcon","year":"2005","key":"e_1_3_2_1_23_1"},{"volume-title":"Defeating Polymorphism: Beyond Emulation. In Proceedings of the Virus Bulletin International Conference","year":"2005","author":"Stepan A. E.","key":"e_1_3_2_1_24_1"},{"key":"e_1_3_2_1_25_1","unstructured":"Symantec. Trojan.Netdepix. http:\/\/www.symantec.com\/avcenter\/venc\/data\/trojan.netdepix.html.  Symantec. Trojan.Netdepix. http:\/\/www.symantec.com\/avcenter\/venc\/data\/trojan.netdepix.html."},{"key":"e_1_3_2_1_26_1","unstructured":"Symantec. W32.Korgo.AB. http:\/\/www.symantec.com\/avcenter\/venc\/data\/w32.korgo.ab.html Apr. 2004.  Symantec. W32.Korgo.AB. http:\/\/www.symantec.com\/avcenter\/venc\/data\/w32.korgo.ab.html Apr. 2004."},{"volume-title":"Addison Wesley","year":"2005","author":"Szor P.","key":"e_1_3_2_1_27_1"},{"key":"e_1_3_2_1_28_1","unstructured":"Trend Micro. Virus Encyclopedia. http:\/\/www.trendmicro.com\/vinfo\/virusencyclo\/.  Trend Micro. Virus Encyclopedia. http:\/\/www.trendmicro.com\/vinfo\/virusencyclo\/."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015489"}],"event":{"name":"IMC06: Internet Measurement Conference","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication","ACM Association for Computing Machinery"],"location":"Rio de Janeriro Brazil","acronym":"IMC06"},"container-title":["Proceedings of the 6th ACM SIGCOMM conference on Internet measurement"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1177080.1177087","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1177080.1177087","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T14:51:39Z","timestamp":1750258299000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1177080.1177087"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,10,25]]},"references-count":28,"alternative-id":["10.1145\/1177080.1177087","10.1145\/1177080"],"URL":"https:\/\/doi.org\/10.1145\/1177080.1177087","relation":{},"subject":[],"published":{"date-parts":[[2006,10,25]]},"assertion":[{"value":"2006-10-25","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}