{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:28:56Z","timestamp":1750307336596,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":36,"publisher":"ACM","license":[{"start":{"date-parts":[[2011,6,14]],"date-time":"2011-06-14T00:00:00Z","timestamp":1308009600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2011,6,14]]},"DOI":"10.1145\/1998582.1998600","type":"proceedings-article","created":{"date-parts":[[2011,6,21]],"date-time":"2011-06-21T13:47:14Z","timestamp":1308664034000},"page":"101-110","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Inoculation against malware infection using kernel-level software sensors"],"prefix":"10.1145","author":[{"given":"Raymond","family":"Canzanese","sequence":"first","affiliation":[{"name":"Drexel University, Philadelphia, PA, USA"}]},{"given":"Moshe","family":"Kam","sequence":"additional","affiliation":[{"name":"Drexel University, Philadelphia, PA, USA"}]},{"given":"Spiros","family":"Mancoridis","sequence":"additional","affiliation":[{"name":"Drexel University, Philadelphia, PA, USA"}]}],"member":"320","published-online":{"date-parts":[[2011,6,14]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Apache 2010. http:\/\/httpd.apache.org.  Apache 2010. http:\/\/httpd.apache.org."},{"key":"e_1_3_2_1_2_1","unstructured":"Drupal 2010. http:\/\/www.drupal.org.  Drupal 2010. http:\/\/www.drupal.org."},{"key":"e_1_3_2_1_3_1","unstructured":"Microsoft 2010. http:\/\/www.microsoft.com.  Microsoft 2010. http:\/\/www.microsoft.com."},{"key":"e_1_3_2_1_4_1","unstructured":"Mysql 2010. http:\/\/www.mysql.com.  Mysql 2010. http:\/\/www.mysql.com."},{"key":"e_1_3_2_1_5_1","unstructured":"Php 2010. http:\/\/www.php.net.  Php 2010. http:\/\/www.php.net."},{"key":"e_1_3_2_1_6_1","unstructured":"Silverstripe 2010. http:\/\/www.silverstripe.org.  Silverstripe 2010. http:\/\/www.silverstripe.org."},{"key":"e_1_3_2_1_7_1","unstructured":"Symantec 2010. http:\/\/www.symantec.com.  Symantec 2010. http:\/\/www.symantec.com."},{"key":"e_1_3_2_1_8_1","unstructured":"Passmark software 2011. http:\/\/www.passmark.com\/.  Passmark software 2011. http:\/\/www.passmark.com\/."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICAC.2008.25"},{"key":"e_1_3_2_1_10_1","volume-title":"The Windows 2000 Device Driver Book","author":"Baker A.","year":"2000","unstructured":"A. Baker and J. Lozano . The Windows 2000 Device Driver Book . Prentice Hall , 2 nd edition, 2000 . A. Baker and J. Lozano. The Windows 2000 Device Driver Book. Prentice Hall, 2nd edition, 2000.","edition":"2"},{"key":"e_1_3_2_1_11_1","volume-title":"Hungry Minds","author":"Dabak P.","year":"1999","unstructured":"P. Dabak , S. Phadke , and M. Borate . Undocumented Windows NT . Hungry Minds , Oct. 1999 . P. Dabak, S. Phadke, and M. Borate. Undocumented Windows NT. Hungry Minds, Oct. 1999."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/1364385.1364403"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACT.2010.33"},{"key":"e_1_3_2_1_14_1","volume-title":"Rootkits: Subverting the Windows Kernel","author":"Hoglund G.","year":"2005","unstructured":"G. Hoglund and J. Butler . Rootkits: Subverting the Windows Kernel . Addison Wesley Professional , 2005 . G. Hoglund and J. Butler. Rootkits: Subverting the Windows Kernel. Addison Wesley Professional, 2005."},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of the 15th conference on USENIX Security Symposium -","volume":"15","author":"Kirda E.","year":"2006","unstructured":"E. Kirda , C. Kruegel , G. Banks , G. Vigna , and R. A. Kemmerer . Behavior-based spyware detection . In Proceedings of the 15th conference on USENIX Security Symposium - Volume 15 , Berkeley, CA, USA , 2006 . USENIX Association. E. Kirda, C. Kruegel, G. Banks, G. Vigna, and R. A. Kemmerer. Behavior-based spyware detection. In Proceedings of the 15th conference on USENIX Security Symposium - Volume 15, Berkeley, CA, USA, 2006. USENIX Association."},{"key":"e_1_3_2_1_16_1","volume-title":"Jan.","author":"Krebs B.","year":"2011","unstructured":"B. Krebs . White house ecard dupes dot-gov geeks , Jan. 2011 . B. Krebs. White house ecard dupes dot-gov geeks, Jan. 2011."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948144"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866353"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.15"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.csda.2008.01.028"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/242857.242869"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1387673.1387674"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_6"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.5555\/1039834.1039864"},{"key":"e_1_3_2_1_25_1","volume-title":"Jan","author":"Russinovich M.","year":"1997","unstructured":"M. Russinovich and B. Cogswell . Windows nt system-call hooking , Jan 1997 . http:\/\/www.drdobbs.com\/184410109. M. Russinovich and B. Cogswell. Windows nt system-call hooking, Jan 1997. http:\/\/www.drdobbs.com\/184410109."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2002.1020318"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.5555\/882495.884439"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.5555\/1267880.1267884"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-010-0148-x"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1809049.1809069"},{"key":"e_1_3_2_1_31_1","volume-title":"The Art of Computer Virus Research and Defense","author":"Szor P.","year":"2005","unstructured":"P. Szor . The Art of Computer Virus Research and Defense . Addison Wesley Professional , Feb. 2005 . P. Szor. The Art of Computer Virus Research and Defense. Addison Wesley Professional, Feb. 2005."},{"key":"e_1_3_2_1_32_1","volume-title":"Detection, Estimation, and Modulation Theory","author":"VanTrees H. L.","year":"2001","unstructured":"H. L. VanTrees . Detection, Estimation, and Modulation Theory . John Wiley and Sons , 2001 . H. L. VanTrees. Detection, Estimation, and Modulation Theory. John Wiley and Sons, 2001."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSN.2009.60"},{"key":"e_1_3_2_1_34_1","first-page":"203","volume-title":"Anomalous payload-based network intrusion detection","author":"Wang K.","year":"2004","unstructured":"K. Wang and S. J. Stolfo . Anomalous payload-based network intrusion detection . pages 203 -- 222 , 2004 . K. Wang and S. J. Stolfo. Anomalous payload-based network intrusion detection. pages 203--222, 2004."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315261"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2007.1050"}],"event":{"name":"ICAC '11: 8th International Conference on Autonomic Computing","sponsor":["IEEE","University of Arizona University of Arizona","SIGARCH ACM Special Interest Group on Computer Architecture"],"location":"Karlsruhe Germany","acronym":"ICAC '11"},"container-title":["Proceedings of the 8th ACM international conference on Autonomic computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1998582.1998600","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1998582.1998600","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T11:06:14Z","timestamp":1750244774000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1998582.1998600"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,6,14]]},"references-count":36,"alternative-id":["10.1145\/1998582.1998600","10.1145\/1998582"],"URL":"https:\/\/doi.org\/10.1145\/1998582.1998600","relation":{},"subject":[],"published":{"date-parts":[[2011,6,14]]},"assertion":[{"value":"2011-06-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}