{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,31]],"date-time":"2026-10-31T20:38:47Z","timestamp":1793479127449,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":43,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,4,18]]},"DOI":"10.1145\/1217935.1217938","type":"proceedings-article","created":{"date-parts":[[2007,4,5]],"date-time":"2007-04-05T15:41:00Z","timestamp":1175787660000},"page":"15-27","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":120,"title":["Argos"],"prefix":"10.1145","author":[{"given":"Georgios","family":"Portokalidis","sequence":"first","affiliation":[{"name":"Vrije Universiteit Amsterdam, HV Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Asia","family":"Slowinska","sequence":"additional","affiliation":[{"name":"Vrije Universiteit Amsterdam, HV Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Herbert","family":"Bos","sequence":"additional","affiliation":[{"name":"Vrije Universiteit Amsterdam, HV Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2006,4,18]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Diamondes openports. http:\/\/www.diamondes.com.au\/openports\/.  Diamondes openports. http:\/\/www.diamondes.com.au\/openports\/."},{"key":"e_1_3_2_1_2_1","unstructured":"Basic Architecture volume \n  1\n   of \n  Intel Architecture Software Developer's Manual\n  . \n  Intel Corporation 1997\n  .  Basic Architecture volume 1 of Intel Architecture Software Developer's Manual. Intel Corporation 1997."},{"key":"e_1_3_2_1_3_1","unstructured":"Phrack Magazine 1996 7 49 Smashing the stack for fun and profit"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1217935.1217939"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/1247360.1247401"},{"key":"e_1_3_2_1_6_1","volume-title":"Proceedings of OSDI'04","author":"Bos H.","year":"2004","unstructured":"H. Bos , W. de Bruijn , M. Cristea , T. Nguyen , and G. Portokalidis . FFPF: Fairly Fast Packet Filters . In Proceedings of OSDI'04 , San Francisco, CA , December 2004 . H. Bos, W. de Bruijn, M. Cristea, T. Nguyen, and G. Portokalidis. FFPF: Fairly Fast Packet Filters. In Proceedings of OSDI'04, San Francisco, CA, December 2004."},{"key":"e_1_3_2_1_7_1","unstructured":"Phrack Magazine 2000 10 56 Bypassing Stackguard and Stackshield"},{"key":"e_1_3_2_1_8_1","volume-title":"Proc. of the 7th USENIX Security Symposium","author":"Cowan C.","year":"1998","unstructured":"C. Cowan , C. Pu , D. Maier , J. Walpole , P. Bakke , S. Beattie , A. Grier , P. Wagle and Q. Zhang . StackGuard: Automatic adaptive detection and prevention of buffer-overflow attacks . In Proc. of the 7th USENIX Security Symposium , 1998 . C. Cowan, C. Pu, D. Maier, J. Walpole, P. Bakke, S. Beattie, A. Grier, P. Wagle and Q. Zhang. StackGuard: Automatic adaptive detection and prevention of buffer-overflow attacks. In Proc. of the 7th USENIX Security Symposium, 1998."},{"key":"e_1_3_2_1_9_1","volume-title":"In Proc. of the 10th Usenix Security Symposium","author":"Cowan C.","year":"2001","unstructured":"C. Cowan , M. Barringer , S. Beattie and G. Kroah-Hartman . FormatGuard: Automatic protection from printf format string vulnerabilities . In In Proc. of the 10th Usenix Security Symposium , August 2001 . C. Cowan, M. Barringer, S. Beattie and G. Kroah-Hartman. FormatGuard: Automatic protection from printf format string vulnerabilities. In In Proc. of the 10th Usenix Security Symposium, August 2001."},{"key":"e_1_3_2_1_10_1","first-page":"91","volume-title":"In Proc. of the 12th USENIX Security Symposium","author":"Cowan C.","year":"2003","unstructured":"C. Cowan , S. Beattie , J. Johansen and P. Wagle . PointGuard: Protecting pointers from buffer overflow vulnerabilities . In In Proc. of the 12th USENIX Security Symposium , pages 91 -- 104 , August 2003 . C. Cowan, S. Beattie, J. Johansen and P. Wagle. PointGuard: Protecting pointers from buffer overflow vulnerabilities. In In Proc. of the 12th USENIX Security Symposium, pages 91--104, August 2003."},{"key":"e_1_3_2_1_11_1","unstructured":"M. Conover. w00w00 on heap overflows. http:\/\/www.w00w00.org\/articles.html January 1999.  M. Conover. w00w00 on heap overflows. http:\/\/www.w00w00.org\/articles.html January 1999."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.26"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/11506881_3"},{"key":"e_1_3_2_1_14_1","volume-title":"The 13th Annual Network and Distributed System Security Symposium (NDSS)","author":"Cui W.","year":"2006","unstructured":"W. Cui , V. Paxson , N. Weaver , and R. Katz . Protocol-independent adaptive replay of application dialog . In The 13th Annual Network and Distributed System Security Symposium (NDSS) , San Diego, CA , February 2006 . W. Cui, V. Paxson, N. Weaver, and R. Katz. Protocol-independent adaptive replay of application dialog. In The 13th Annual Network and Distributed System Security Symposium (NDSS), San Diego, CA, February 2006."},{"key":"e_1_3_2_1_15_1","volume-title":"In Proc. of the 7th International Symposium on Recent Advances in Intrusion Detection (RAID)","author":"Dagonand D.","year":"2004","unstructured":"D. Dagonand , X. Qin , G. Gu , W. Lee , J. Grizzard , J. Levine and Henry Owen. HoneyStat: Local worm detection using honeypots . In In Proc. of the 7th International Symposium on Recent Advances in Intrusion Detection (RAID) , 2004 . D. Dagonand, X. Qin, G. Gu, W. Lee, J. Grizzard, J. Levine and Henry Owen. HoneyStat: Local worm detection using honeypots. In In Proc. of the 7th International Symposium on Recent Advances in Intrusion Detection (RAID), 2004."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948147"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1024393.1024404"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948146"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.5555\/1060289.1060309"},{"key":"e_1_3_2_1_20_1","volume-title":"In Proc. of the 10th ISOC Symposium on Network and Distributed Systems Security (SNDSS)","author":"Garfinkel T.","year":"2003","unstructured":"T. Garfinkel and M. Rosenblum . A virtual machine introspection based architecture for intrusion detection . In In Proc. of the 10th ISOC Symposium on Network and Distributed Systems Security (SNDSS) , February 2003 . T. Garfinkel and M. Rosenblum. A virtual machine introspection based architecture for intrusion detection. In In Proc. of the 10th ISOC Symposium on Network and Distributed Systems Security (SNDSS), February 2003."},{"key":"e_1_3_2_1_21_1","unstructured":"Phrack Magazine 2002 11 59 Advances in format string exploitation"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/11663812_6"},{"key":"e_1_3_2_1_23_1","volume-title":"In Proc. of the 13th USENIX Security Symposium","author":"Hyang-Ah K.","year":"2004","unstructured":"K. Hyang-Ah and B. Karp . Autograph: Toward automated, distributed worm signature detection . In In Proc. of the 13th USENIX Security Symposium , 2004 . K. Hyang-Ah and B. Karp. Autograph: Toward automated, distributed worm signature detection. In In Proc. of the 13th USENIX Security Symposium, 2004."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/948187.948201"},{"key":"e_1_3_2_1_25_1","volume-title":"IBM","author":"Etoh J.","year":"2000","unstructured":"J. Etoh . GCC extension for protecting applications from stack-smashing attacks. Technical report , IBM , June 2000 . J. Etoh. GCC extension for protecting applications from stack-smashing attacks. Technical report, IBM, June 2000."},{"key":"e_1_3_2_1_26_1","volume-title":"Remote windows kernel exploitation - step into the ring 0. eEye Digital Security Whitepaper, www.eeye.com\/~data\/publish\/whitepapers\/research\/0T20050205.FILE.pdf","author":"Jack B.","year":"2005","unstructured":"B. Jack . Remote windows kernel exploitation - step into the ring 0. eEye Digital Security Whitepaper, www.eeye.com\/~data\/publish\/whitepapers\/research\/0T20050205.FILE.pdf , 2005 . B. Jack. Remote windows kernel exploitation - step into the ring 0. eEye Digital Security Whitepaper, www.eeye.com\/~data\/publish\/whitepapers\/research\/0T20050205.FILE.pdf, 2005."},{"key":"e_1_3_2_1_27_1","volume-title":"2nd Workshop on Hot Topics in Networks (HotNets-II)","author":"Kreibich C.","year":"2003","unstructured":"C. Kreibich and J. Crowcroft . Honeycomb - creating intrusion detection signatures using honeypots . In 2nd Workshop on Hot Topics in Networks (HotNets-II) , 2003 . C. Kreibich and J. Crowcroft. Honeycomb - creating intrusion detection signatures using honeypots. In 2nd Workshop on Hot Topics in Networks (HotNets-II), 2003."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095824"},{"key":"e_1_3_2_1_29_1","first-page":"55","volume-title":"In Proc. of the 10th USENIX Security Symposium","author":"Frantzen M.","year":"2001","unstructured":"M. Frantzen and M. Shuey . StackGhost: Hardware facilitated stack protection . In In Proc. of the 10th USENIX Security Symposium , pages 55 -- 66 , August 2001 . M. Frantzen and M. Shuey. StackGhost: Hardware facilitated stack protection. In In Proc. of the 10th USENIX Security Symposium, pages 55--66, August 2001."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/781131.781149"},{"key":"e_1_3_2_1_31_1","volume-title":"Proc. of the 12th Annual Network and Distributed System Security Symposium (NDSS)","author":"Newsome J.","year":"2005","unstructured":"J. Newsome and D. Song . Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software . In Proc. of the 12th Annual Network and Distributed System Security Symposium (NDSS) , 2005 . J. Newsome and D. Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In Proc. of the 12th Annual Network and Distributed System Security Symposium (NDSS), 2005."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2006.09.005"},{"key":"e_1_3_2_1_33_1","volume-title":"Proc. of the 13th USENIX Security Symposium","author":"Provos N.","year":"2004","unstructured":"N. Provos . A virtual honeypot framework . In Proc. of the 13th USENIX Security Symposium , 2004 . N. Provos. A virtual honeypot framework. In Proc. of the 13th USENIX Security Symposium, 2004."},{"key":"e_1_3_2_1_34_1","unstructured":"Phrack Magazine 2000 10 56"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.5555\/1039834.1039864"},{"key":"e_1_3_2_1_36_1","first-page":"105","volume-title":"In Proc. of the 12th USENIX Security Symposium","author":"Bhatkar S.","year":"2003","unstructured":"S. Bhatkar , D. C. Du Varney and R. Sekar. Address obfuscation: an efficient approach to combat a broad range of memory error exploits . In In Proc. of the 12th USENIX Security Symposium , pages 105 -- 120 , August 2003 . S. Bhatkar, D. C. Du Varney and R. Sekar. Address obfuscation: an efficient approach to combat a broad range of memory error exploits. In In Proc. of the 12th USENIX Security Symposium, pages 105--120, August 2003."},{"key":"e_1_3_2_1_37_1","first-page":"45","volume-title":"In Proc. of the 6th USENIX Symposium on Operating Systems Design and Implementation (OSDI)","author":"Singh S.","year":"2004","unstructured":"S. Singh , C. Estan , G. Varghese and S. Savage . Automated worm fingerprinting . In In Proc. of the 6th USENIX Symposium on Operating Systems Design and Implementation (OSDI) , pages 45 -- 60 , 2004 . S. Singh, C. Estan, G. Varghese and S. Savage. Automated worm fingerprinting. In In Proc. of the 6th USENIX Symposium on Operating Systems Design and Implementation (OSDI), pages 45--60, 2004."},{"key":"e_1_3_2_1_38_1","volume-title":"Using execution transactions to recover from buffer overflow attacks. Cucs-031-04","author":"Sidiroglou S.","year":"2004","unstructured":"S. Sidiroglou and A. D. Keromytis . Using execution transactions to recover from buffer overflow attacks. Cucs-031-04 , Columbia University , 2004 . S. Sidiroglou and A. D. Keromytis. Using execution transactions to recover from buffer overflow attacks. Cucs-031-04, Columbia University, 2004."},{"key":"e_1_3_2_1_39_1","first-page":"55","author":"Spyrit D.","year":"1999","unstructured":"D. Spyrit . Win32 buffer overows (location, exploitation, and prevention) . Phrack 55 , 1999 . D. Spyrit. Win32 buffer overows (location, exploitation, and prevention). Phrack 55, 1999.","journal-title":"Phrack"},{"key":"e_1_3_2_1_40_1","volume-title":"Proc. of the 11th USENIX Security Symposium","author":"Stuart Staniford V. P.","year":"2002","unstructured":"V. P. Stuart Staniford and N. Weaver . How to Own the internet in your spare time . In Proc. of the 11th USENIX Security Symposium , 2002 . V. P. Stuart Staniford and N. Weaver. How to Own the internet in your spare time. In Proc. of the 11th USENIX Security Symposium, 2002."},{"key":"e_1_3_2_1_41_1","first-page":"201","volume-title":"In Proc. of the 10th USENIX Security Symposium","author":"Shankar U.","year":"2001","unstructured":"U. Shankar , K. Talwar , J. S. Foster , and D. Wagner . Detecting format string vulnerabilities with type qualifiers . In In Proc. of the 10th USENIX Security Symposium , pages 201 -- 216 , August 2001 . U. Shankar, K. Talwar, J. S. Foster, and D. Wagner. Detecting format string vulnerabilities with type qualifiers. In In Proc. of the 10th USENIX Security Symposium, pages 201--216, August 2001."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.5555\/647253.720293"},{"key":"e_1_3_2_1_43_1","volume-title":"Proc. of ACSAC Security Conference","author":"Williamson M. M.","year":"2002","unstructured":"M. M. Williamson . Throttling Viruses : Restricting Propagation to Defeat Malicious Mobile Code . In Proc. of ACSAC Security Conference , Las Vegas, Nevada , 2002 . M. M. Williamson. Throttling Viruses: Restricting Propagation to Defeat Malicious Mobile Code. In Proc. of ACSAC Security Conference, Las Vegas, Nevada, 2002."}],"event":{"name":"EUROSYS06: Eurosys 2006 Conference","location":"Leuven Belgium","acronym":"EUROSYS06","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the 1st ACM SIGOPS\/EuroSys European Conference on Computer Systems 2006"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1217935.1217938","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,9,4]],"date-time":"2023-09-04T07:29:35Z","timestamp":1693812575000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1217935.1217938"}},"subtitle":["an emulator for fingerprinting zero-day attacks for advertised honeypots with automatic signature generation"],"short-title":[],"issued":{"date-parts":[[2006,4,18]]},"references-count":43,"alternative-id":["10.1145\/1217935.1217938","10.1145\/1217935"],"URL":"https:\/\/doi.org\/10.1145\/1217935.1217938","relation":{"is-identical-to":[{"id-type":"doi","id":"10.1145\/1218063.1217938","asserted-by":"object"}]},"subject":[],"published":{"date-parts":[[2006,4,18]]},"assertion":[{"value":"2006-04-18","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}