{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:26:54Z","timestamp":1750307214669,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":19,"publisher":"ACM","license":[{"start":{"date-parts":[[2012,3,26]],"date-time":"2012-03-26T00:00:00Z","timestamp":1332720000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2012,3,26]]},"DOI":"10.1145\/2245276.2232070","type":"proceedings-article","created":{"date-parts":[[2012,6,11]],"date-time":"2012-06-11T13:03:31Z","timestamp":1339419811000},"page":"1807-1814","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["Detecting malware signatures in a thin hypervisor"],"prefix":"10.1145","author":[{"given":"Yoshihiro","family":"Oyama","sequence":"first","affiliation":[{"name":"The University of Electro-Communications, Chofugaoka, Chofu-shi, Tokyo, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tran Truong Duc","family":"Giang","sequence":"additional","affiliation":[{"name":"The University of Electro-Communications, Chofugaoka, Chofu-shi, Tokyo, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yosuke","family":"Chubachi","sequence":"additional","affiliation":[{"name":"University of Tsukuba, Tennodai, Tsukuba, Ibaraki, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Takahiro","family":"Shinagawa","sequence":"additional","affiliation":[{"name":"The University of Tokyo, Yayoi, Bunkyo-ku, Tokyo, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kazuhiko","family":"Kato","sequence":"additional","affiliation":[{"name":"University of Tsukuba, Tennodai, Tsukuba, Ibaraki, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2012,3,26]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/360825.360855"},{"key":"e_1_3_2_1_2_1","unstructured":"BitLocker Drive Encryption. http:\/\/windows.microsoft.com\/en-US\/windows7\/products\/features\/bitlocker.  BitLocker Drive Encryption. http:\/\/windows.microsoft.com\/en-US\/windows7\/products\/features\/bitlocker."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1774088.1774131"},{"key":"e_1_3_2_1_4_1","unstructured":"Clam AntiVirus. http:\/\/www.clamav.net\/  Clam AntiVirus. http:\/\/www.clamav.net\/"},{"key":"e_1_3_2_1_5_1","volume-title":"Proceedings of the 10th Annual Network and Distributed System Security Symposium","author":"Garfinkel T.","year":"2003","unstructured":"T. Garfinkel and M. Rosenblum . A Virtual Machine Introspection Based Architecture for Intrusion Detection . In Proceedings of the 10th Annual Network and Distributed System Security Symposium , 2003 . T. Garfinkel and M. Rosenblum. A Virtual Machine Introspection Based Architecture for Intrusion Detection. In Proceedings of the 10th Annual Network and Distributed System Security Symposium, 2003."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1093\/ietisy\/e90-d.12.2019"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1698750.1698752"},{"key":"e_1_3_2_1_8_1","unstructured":"LMbench. http:\/\/www.bitmover.com\/lmbench\/.  LMbench. http:\/\/www.bitmover.com\/lmbench\/."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.17"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.48"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.24"},{"key":"e_1_3_2_1_12_1","first-page":"137","volume-title":"Proceedings of the 12th USENIX Security Symposium","author":"Pennington A. G.","year":"2003","unstructured":"A. G. Pennington , J. D. Strunk , J. L. Griffin , C. A. Soules , G. R. Goodson , and G. R. Ganger . Storage-based Intrusion Detection: Watching storage activity for suspicious behavior . In Proceedings of the 12th USENIX Security Symposium , pages 137 -- 152 , 2003 . A. G. Pennington, J. D. Strunk, J. L. Griffin, C. A. Soules, G. R. Goodson, and G. R. Ganger. Storage-based Intrusion Detection: Watching storage activity for suspicious behavior. In Proceedings of the 12th USENIX Security Symposium, pages 137--152, 2003."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.5555\/1433006.1433008"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294294"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1508293.1508311"},{"key":"e_1_3_2_1_16_1","unstructured":"Trend Micro. Deep Security. http:\/\/emea.trendmicro.com\/emea\/products\/enterprise\/deep-security\/.  Trend Micro. Deep Security. http:\/\/emea.trendmicro.com\/emea\/products\/enterprise\/deep-security\/."},{"volume-title":"Threat Encyclopedia: TROJ_SHADOW.AF","author":"Micro Trend","key":"e_1_3_2_1_17_1","unstructured":"Trend Micro . Threat Encyclopedia: TROJ_SHADOW.AF . http:\/\/about-threats.trendmicro.com\/Malware. aspx?name=TROJ_shadow.af. Trend Micro. Threat Encyclopedia: TROJ_SHADOW.AF. http:\/\/about-threats.trendmicro.com\/Malware. aspx?name=TROJ_shadow.af."},{"key":"e_1_3_2_1_18_1","unstructured":"VMware. VMsafe. http:\/\/www.vmware.com\/.  VMware. VMsafe. http:\/\/www.vmware.com\/."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SBAC-PAD.2006.32"}],"event":{"name":"SAC 2012: ACM Symposium on Applied Computing","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"],"location":"Trento Italy","acronym":"SAC 2012"},"container-title":["Proceedings of the 27th Annual ACM Symposium on Applied Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2245276.2232070","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2245276.2232070","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T10:06:44Z","timestamp":1750241204000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2245276.2232070"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,3,26]]},"references-count":19,"alternative-id":["10.1145\/2245276.2232070","10.1145\/2245276"],"URL":"https:\/\/doi.org\/10.1145\/2245276.2232070","relation":{},"subject":[],"published":{"date-parts":[[2012,3,26]]},"assertion":[{"value":"2012-03-26","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}