{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:27:48Z","timestamp":1750307268871,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":57,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,9,21]],"date-time":"2010-09-21T00:00:00Z","timestamp":1285027200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,9,21]]},"DOI":"10.1145\/1900546.1900551","type":"proceedings-article","created":{"date-parts":[[2010,12,20]],"date-time":"2010-12-20T16:13:47Z","timestamp":1292861627000},"page":"17-32","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["On information flow for intrusion detection"],"prefix":"10.1145","author":[{"given":"Mohammed I.","family":"Al-Saleh","sequence":"first","affiliation":[{"name":"University of New Mexico, Albuequerque, NM, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jedidiah R.","family":"Crandall","sequence":"additional","affiliation":[{"name":"University of New Mexico, Albuquerque, NM, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2010,9,21]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"anonymous. Once Upon a free()... Phrack 57.  anonymous. Once Upon a free()... Phrack 57."},{"key":"e_1_3_2_1_2_1","first-page":"180","volume-title":"EICAR","author":"Bayer U.","year":"2006","unstructured":"U. Bayer , C. Kruegel , and E. Kirda . TTAnalyze: A Tool for Analyzing Malware . In EICAR , pages 180 -- 192 , 2006 . U. Bayer, C. Kruegel, and E. Kirda. TTAnalyze: A Tool for Analyzing Malware. In EICAR, pages 180--192, 2006."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/RISP.1991.130804"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/191177.191244"},{"key":"e_1_3_2_1_6_1","first-page":"39","volume-title":"IEEE Symposium on Security and Privacy","author":"Browne R.","year":"1999","unstructured":"R. Browne . Mode security : An infrastructure for covert channel suppression . In IEEE Symposium on Security and Privacy , pages 39 -- 55 , 1999 . R. Browne. Mode security: An infrastructure for covert channel suppression. In IEEE Symposium on Security and Privacy, pages 39--55, 1999."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_8"},{"key":"e_1_3_2_1_8_1","volume-title":"Proc. 13th USENIX Security Symposium","author":"Chow J.","year":"2004","unstructured":"J. Chow , B. Pfaff , T. Garfinkel , K. Christopher , and M. Rosenblum . Understanding data lifetime via whole system simulation . In Proc. 13th USENIX Security Symposium , August 2004 . J. Chow, B. Pfaff, T. Garfinkel, K. Christopher, and M. Rosenblum. Understanding data lifetime via whole system simulation. In Proc. 13th USENIX Security Symposium, August 2004."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.1987.10001"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1273463.1273490"},{"key":"e_1_3_2_1_11_1","first-page":"240","volume-title":"7th DoD\/NBS Computer Security Conference Proceedings","author":"Cohen F.","year":"1984","unstructured":"F. Cohen . Computer viruses : Theory and experiments . In 7th DoD\/NBS Computer Security Conference Proceedings , pages 240 -- 263 , September 1984 . F. Cohen. Computer viruses: Theory and experiments. In 7th DoD\/NBS Computer Security Conference Proceedings, pages 240--263, September 1984."},{"key":"e_1_3_2_1_12_1","volume-title":"HotNets III","author":"Costa M.","year":"2005","unstructured":"M. Costa , J. Crowcroft , M. Castro , and A. Rowstron . Can we contain internet worms ? In HotNets III , 2005 . M. Costa, J. Crowcroft, M. Castro, and A. Rowstron. Can we contain internet worms? In HotNets III, 2005."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-01004-0_14"},{"key":"e_1_3_2_1_14_1","volume-title":"Workshop on Architectural Support for Security and Anti-Virus","author":"Crandall J. R.","year":"2004","unstructured":"J. R. Crandall and F. T. Chong . A Security Assessment of the Minos Architecture . In Workshop on Architectural Support for Security and Anti-Virus , Oct. 2004 . J. R. Crandall and F. T. Chong. A Security Assessment of the Minos Architecture. In Workshop on Architectural Support for Security and Anti-Virus, Oct. 2004."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.26"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/11506881_3"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1187976.1187977"},{"key":"e_1_3_2_1_18_1","volume-title":"Fifth Annual Workshop on Duplicating, Deconstructing, and Debunking","author":"Dalton M.","year":"2006","unstructured":"M. Dalton , H. Kannan , and C. Kozyrakis . Deconstructing hardware architectures for security . In Fifth Annual Workshop on Duplicating, Deconstructing, and Debunking , June 2006 . M. Dalton, H. Kannan, and C. Kozyrakis. Deconstructing hardware architectures for security. In Fifth Annual Workshop on Duplicating, Deconstructing, and Debunking, June 2006."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250662.1250722"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.15"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095813"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/17.2.143"},{"key":"e_1_3_2_1_24_1","first-page":"21","volume-title":"IEEE Symposium on Security and Privacy","author":"J. W.","year":"1991","unstructured":"J. W. Gray III. Toward a mathematical foundation for information flow security . In IEEE Symposium on Security and Privacy , pages 21 -- 35 , 1991 . J. W. Gray III. Toward a mathematical foundation for information flow security. In IEEE Symposium on Security and Privacy, pages 21--35, 1991."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.5555\/975344"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1217935.1217939"},{"key":"e_1_3_2_1_27_1","article-title":"Toward a mathematical foundation for information","author":"J. W. G.","year":"1992","unstructured":"J. W. G. III . Toward a mathematical foundation for information . Journal of Computer Security, 1(3--4):255--294 , 1992 . J. W. G. III. Toward a mathematical foundation for information. Journal of Computer Security, 1(3--4):255--294, 1992.","journal-title":"Journal of Computer Security, 1(3--4):255--294"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2009.5270347"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/191177.191183"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294293"},{"key":"e_1_3_2_1_31_1","volume-title":"A guide to understanding covert channel analysis of trusted systems, version 1. NCSC-TG-030","author":"Book Light Pink","year":"1993","unstructured":"Light Pink Book . A guide to understanding covert channel analysis of trusted systems, version 1. NCSC-TG-030 , Library No. S-240,572, November 1993 . TCSEC Rainbow Series Library . Light Pink Book. A guide to understanding covert channel analysis of trusted systems, version 1. NCSC-TG-030, Library No. S-240,572, November 1993. TCSEC Rainbow Series Library."},{"key":"e_1_3_2_1_32_1","volume-title":"Proceedings of the 15th Annual Network and Distributed System Security Symposium","author":"Lin Z.","year":"2008","unstructured":"Z. Lin , X. Jiang , D. Xu , and X. Zhang . Automatic protocol format reverse engineering through context-aware monitored execution . In Proceedings of the 15th Annual Network and Distributed System Security Symposium , San Diego, CA , February 2008 . Z. Lin, X. Jiang, D. Xu, and X. Zhang. Automatic protocol format reverse engineering through context-aware monitored execution. In Proceedings of the 15th Annual Network and Distributed System Security Symposium, San Diego, CA, February 2008."},{"key":"e_1_3_2_1_33_1","first-page":"2","volume-title":"IEEE Symposium on Security and Privacy","author":"Lipner S. B.","year":"1982","unstructured":"S. B. Lipner . Non-discretionary controls for commercial applications . In IEEE Symposium on Security and Privacy , pages 2 -- 10 , 1982 . S. B. Lipner. Non-discretionary controls for commercial applications. In IEEE Symposium on Security and Privacy, pages 2--10, 1982."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1190216.1190251"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1375581.1375606"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1988.8110"},{"key":"e_1_3_2_1_37_1","volume-title":"Covert channel analysis","author":"McHugh J.","year":"1995","unstructured":"J. McHugh . Covert channel analysis , 1995 . J. McHugh. Covert channel analysis, 1995."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/363516.363526"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/1353534.1346308"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/1554339.1554349"},{"key":"e_1_3_2_1_41_1","volume-title":"Proceedings of the 12th Annual Network and Distributed System Security Symposium (NDSS '05)","author":"Newsome J.","year":"2005","unstructured":"J. Newsome and D. Song . Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software . In Proceedings of the 12th Annual Network and Distributed System Security Symposium (NDSS '05) , Feb. 2005 . J. Newsome and D. Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In Proceedings of the 12th Annual Network and Distributed System Security Symposium (NDSS '05), Feb. 2005."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1346281.1346321"},{"key":"e_1_3_2_1_43_1","volume-title":"Fifth Annual Workshop on Duplicating, Deconstructing, and Debunking","author":"Piromsopa K.","year":"2006","unstructured":"K. Piromsopa and R. J. Enbody . Defeating buffer-overflow prevention hardware . In Fifth Annual Workshop on Duplicating, Deconstructing, and Debunking , June 2006 . K. Piromsopa and R. J. Enbody. Defeating buffer-overflow prevention hardware. In Fifth Annual Workshop on Duplicating, Deconstructing, and Debunking, June 2006."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/1217935.1217938"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2006.29"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/1519065.1519073"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/1024393.1024404"},{"key":"e_1_3_2_1_48_1","volume-title":"The Art of Computer Virus Research and Defense","author":"Szor P.","year":"2005","unstructured":"P. Szor . The Art of Computer Virus Research and Defense . Symantec Press , 2005 . P. Szor. The Art of Computer Virus Research and Defense. Symantec Press, 2005."},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/1508284.1508258"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.31"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2008.4658637"},{"key":"e_1_3_2_1_52_1","unstructured":"Wikipedia: Heap Spraying. http:\/\/en.wikipedia.org\/wiki\/Heap_spraying.  Wikipedia: Heap Spraying. http:\/\/en.wikipedia.org\/wiki\/Heap_spraying."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/RISP.1990.63846"},{"key":"e_1_3_2_1_54_1","volume-title":"Proceedings of the Network and Distributed System Security Symposium, NDSS 2008","author":"Wondracek G.","year":"2008","unstructured":"G. Wondracek , P. M. Comparetti , C. Kr\u00fcgel , and E. Kirda . Automatic network protocol analysis . In Proceedings of the Network and Distributed System Security Symposium, NDSS 2008 , San Diego, California , 2008 . G. Wondracek, P. M. Comparetti, C. Kr\u00fcgel, and E. Kirda. Automatic network protocol analysis. In Proceedings of the Network and Distributed System Security Symposium, NDSS 2008, San Diego, California, 2008."},{"key":"e_1_3_2_1_55_1","volume-title":"Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS'08)","author":"Yin H.","year":"2008","unstructured":"H. Yin , Z. Liang , and D. Song . HookFinder: Identifying and understanding malware hooking behaviors . In Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS'08) , February 2008 . H. Yin, Z. Liang, and D. Song. HookFinder: Identifying and understanding malware hooking behaviors. In Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS'08), February 2008."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315261"},{"key":"e_1_3_2_1_57_1","volume-title":"Networked Systems Design and Implementation (NSDI)","author":"Yumerefendi A.","year":"2007","unstructured":"A. Yumerefendi , B. Mickle , and L. P. Cox . Tightlip: Keeping applications from spilling the beans . In Networked Systems Design and Implementation (NSDI) , 2007 . A. Yumerefendi, B. Mickle, and L. P. Cox. Tightlip: Keeping applications from spilling the beans. In Networked Systems Design and Implementation (NSDI), 2007."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.5555\/1267308.1267327"},{"key":"e_1_3_2_1_59_1","unstructured":"Security Focus Vulnerability Notes (http:\/\/www.securityfocus.com) Bugtraq ID NNN. http:\/\/www.securityfocus.com\/bid\/NNN\/discussion\/.  Security Focus Vulnerability Notes (http:\/\/www.securityfocus.com) Bugtraq ID NNN. http:\/\/www.securityfocus.com\/bid\/NNN\/discussion\/."}],"event":{"name":"NSPW '10: 2010 New Security Paradigms Workshop","sponsor":["ACSA Applied Computing Security Assoc"],"location":"Concord Massachusetts USA","acronym":"NSPW '10"},"container-title":["Proceedings of the 2010 New Security Paradigms Workshop"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1900546.1900551","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1900546.1900551","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T10:52:53Z","timestamp":1750243973000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1900546.1900551"}},"subtitle":["what if accurate full-system dynamic information flow tracking was possible?"],"short-title":[],"issued":{"date-parts":[[2010,9,21]]},"references-count":57,"alternative-id":["10.1145\/1900546.1900551","10.1145\/1900546"],"URL":"https:\/\/doi.org\/10.1145\/1900546.1900551","relation":{},"subject":[],"published":{"date-parts":[[2010,9,21]]},"assertion":[{"value":"2010-09-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}