{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,25]],"date-time":"2026-03-25T13:55:42Z","timestamp":1774446942340,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":24,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,10,21]]},"DOI":"10.1145\/1181309.1181312","type":"proceedings-article","created":{"date-parts":[[2007,1,17]],"date-time":"2007-01-17T01:15:56Z","timestamp":1168996556000},"page":"12-17","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["Hunting Trojan Horses"],"prefix":"10.1145","author":[{"given":"Micha","family":"Moffie","sequence":"first","affiliation":[{"name":"Northeastern University, Boston, MA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Winnie","family":"Cheng","sequence":"additional","affiliation":[{"name":"Massachusetts Institute of Technology, Cambridge, MA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Kaeli","sequence":"additional","affiliation":[{"name":"Northeastern University, Boston, MA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qin","family":"Zhao","sequence":"additional","affiliation":[{"name":"National University of Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2006,10,21]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/986655.986662"},{"key":"e_1_3_2_1_2_1","unstructured":"Derek Bruening. Efficient Transparent and Comprehensive Runtime Code Manipulation. PhD thesis Massachusetts Institute of Technology 2004.   Derek Bruening. Efficient Transparent and Comprehensive Runtime Code Manipulation. PhD thesis Massachusetts Institute of Technology 2004."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2006.158"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/360051.360056"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/288090.288102"},{"key":"e_1_3_2_1_6_1","first-page":"103","volume-title":"Proceedings of the 13th USENIX Security Symposium","author":"Gao D.","year":"2004","unstructured":"D. Gao , M. K. Reiter , and D. Song . On gray-box program tracking for anomaly detection . In Proceedings of the 13th USENIX Security Symposium , pages 103 -- 118 , San Diego, CA, USA, Aug. 9--13 2004 . D. Gao, M. K. Reiter, and D. Song. On gray-box program tracking for anomaly detection. In Proceedings of the 13th USENIX Security Symposium, pages 103--118, San Diego, CA, USA, Aug. 9--13 2004."},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the 6th Usenix Security Symposium","author":"Goldberg I.","year":"1996","unstructured":"I. Goldberg , D. Wagner , R. Thomas , and E. A. Brewer . A secure environment for untrusted helper applications (confining the wily hacker) . In Proceedings of the 6th Usenix Security Symposium , San Jose, CA, USA , 1996 . I. Goldberg, D. Wagner, R. Thomas, and E. A. Brewer. A secure environment for untrusted helper applications (confining the wily hacker). In Proceedings of the 6th Usenix Security Symposium, San Jose, CA, USA, 1996."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.5555\/1298081.1298084"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/647253.720293"},{"key":"e_1_3_2_1_10_1","first-page":"145","volume-title":"Proceedings of the USENIX Security Conference","author":"Ko C.","year":"2000","unstructured":"C. Ko , T. Fraser , L. Badger , and D. Kilpatrick . Detecting and countering system intrusions using software wrappers . In Proceedings of the USENIX Security Conference , pages 145 -- 156 , Jan. 2000 . C. Ko, T. Fraser, L. Badger, and D. Kilpatrick. Detecting and countering system intrusions using software wrappers. In Proceedings of the USENIX Security Conference, pages 145--156, Jan. 2000."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/52.605929"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/292540.292561"},{"key":"e_1_3_2_1_14_1","first-page":"1","volume-title":"Electronic Notes in Theoretical Computer Science","author":"Nethercote N.","year":"2003","unstructured":"N. Nethercote and J. Seward . Valgrind: A program supervision framework . In Electronic Notes in Theoretical Computer Science , volume 89 , pages 1 -- 23 . Elsevier , 2003 . N. Nethercote and J. Seward. Valgrind: A program supervision framework. In Electronic Notes in Theoretical Computer Science, volume 89, pages 1--23. Elsevier, 2003."},{"key":"e_1_3_2_1_15_1","volume-title":"The 12th Annual Network and Distributed System Security Symposium, Feb. 3-4","author":"Newsome J.","year":"2005","unstructured":"J. Newsome and D. Song . Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software . In The 12th Annual Network and Distributed System Security Symposium, Feb. 3-4 , San Diego, CA, USA , 2005 . J. Newsome and D. Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In The 12th Annual Network and Distributed System Security Symposium, Feb. 3-4, San Diego, CA, USA, 2005."},{"key":"e_1_3_2_1_16_1","unstructured":"perldoc.perl.org. Perl 5.8.7 documentation perlsecperl security. http:\/\/perldoc.perl.org\/perlsec.html.  perldoc.perl.org. Perl 5.8.7 documentation perlsecperl security. http:\/\/perldoc.perl.org\/perlsec.html."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1071713.1071729"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/784592.784801"},{"key":"e_1_3_2_1_19_1","first-page":"17","volume-title":"USENIX 2005 Annual Technical Conference","author":"Seward J.","year":"2005","unstructured":"J. Seward and N. Nethercote . Using valgrind to detect undefined value errors with bit-precision . In USENIX 2005 Annual Technical Conference , pages 17 -- 30 , Apr. 10 --15, Anaheim, CA, USA , 2005 . J. Seward and N. Nethercote. Using valgrind to detect undefined value errors with bit-precision. In USENIX 2005 Annual Technical Conference, pages 17--30, Apr. 10--15, Anaheim, CA, USA, 2005."},{"key":"e_1_3_2_1_20_1","unstructured":"Symantec. Symantec security response. http:\/\/securityresponse.symantec.com\/avcenter\/ 2004--2005.  Symantec. Symantec security response. http:\/\/securityresponse.symantec.com\/avcenter\/ 2004--2005."},{"key":"e_1_3_2_1_21_1","volume-title":"Symantec internet security threat report, trends for january 05 - june 05","year":"2005","unstructured":"Symantec. Symantec internet security threat report, trends for january 05 - june 05 , 2005 . Symantec. Symantec internet security threat report, trends for january 05 - june 05, 2005."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.31"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/882495.884434"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1999.766910"}],"event":{"name":"ASPLOS06: Architectural Support for Programming Languages and Operating Systems","location":"San Jose California","acronym":"ASPLOS06"},"container-title":["Proceedings of the 1st workshop on Architectural and system support for improving software dependability"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1181309.1181312","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,14]],"date-time":"2023-01-14T18:47:00Z","timestamp":1673722020000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1181309.1181312"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,10,21]]},"references-count":24,"alternative-id":["10.1145\/1181309.1181312","10.1145\/1181309"],"URL":"https:\/\/doi.org\/10.1145\/1181309.1181312","relation":{},"subject":[],"published":{"date-parts":[[2006,10,21]]},"assertion":[{"value":"2006-10-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}