{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:15:22Z","timestamp":1750306522922,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":32,"publisher":"ACM","license":[{"start":{"date-parts":[[2014,12,8]],"date-time":"2014-12-08T00:00:00Z","timestamp":1417996800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["N000141210462"],"award-info":[{"award-number":["N000141210462"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2014,12,8]]},"DOI":"10.1145\/2664243.2664270","type":"proceedings-article","created":{"date-parts":[[2014,12,8]],"date-time":"2014-12-08T16:30:28Z","timestamp":1418056228000},"page":"66-75","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["TroGuard"],"prefix":"10.1145","author":[{"given":"Rui","family":"Han","sequence":"first","affiliation":[{"name":"University of Miami"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alejandro","family":"Mesa","sequence":"additional","affiliation":[{"name":"University of Miami"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mihai","family":"Christodorescu","sequence":"additional","affiliation":[{"name":"QualComm Research"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Saman","family":"Zonouz","sequence":"additional","affiliation":[{"name":"Rutgers University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2014,12,8]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Trojanhunter; available at www.trojanhunter.com 2013.  Trojanhunter; available at www.trojanhunter.com 2013."},{"key":"e_1_3_2_1_2_1","volume-title":"Efficiency of lttng as a kernel and userspace tracer on multicore environment. Technical report","author":"Anjoy R. G.","year":"2010","unstructured":"R. G. Anjoy and S. K. Chakraborty . Efficiency of lttng as a kernel and userspace tracer on multicore environment. Technical report , 2010 . R. G. Anjoy and S. K. Chakraborty. Efficiency of lttng as a kernel and userspace tracer on multicore environment. Technical report, 2010."},{"key":"e_1_3_2_1_3_1","volume-title":"V-fold cross-validation and v-fold penalization in least-squares density estimation","author":"Arlot S.","year":"2012","unstructured":"S. Arlot and M. Lerasle . V-fold cross-validation and v-fold penalization in least-squares density estimation . 2012 . S. Arlot and M. Lerasle. V-fold cross-validation and v-fold penalization in least-squares density estimation. 2012."},{"key":"e_1_3_2_1_4_1","volume-title":"Scalable, behavior-based malware clustering","author":"Bayer U.","year":"2009","unstructured":"U. Bayer , P. M. Comparetti , C. Hlauschek , C. Kr\u00fcgel , and E. Kirda . Scalable, behavior-based malware clustering . In NDSS. The Internet Society , 2009 . U. Bayer, P. M. Comparetti, C. Hlauschek, C. Kr\u00fcgel, and E. Kirda. Scalable, behavior-based malware clustering. In NDSS. The Internet Society, 2009."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/1855676.1855684"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/2362793.2362800"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1287624.1287628"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.1115"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1467247.1467257"},{"key":"e_1_3_2_1_10_1","first-page":"354","volume-title":"Proceedings of the 27th Annual ACM Symposium on Applied Computing","author":"Desnoyers M.","year":"2012","unstructured":"M. Desnoyers and M. Dagenais . The lttng tracer: A low impact performance and behavior monitor for gnu\/linux . In Proceedings of the 27th Annual ACM Symposium on Applied Computing , pages 354 -- 359 . ACM, 2012 . M. Desnoyers and M. Dagenais. The lttng tracer: A low impact performance and behavior monitor for gnu\/linux. In Proceedings of the 27th Annual ACM Symposium on Applied Computing, pages 354--359. ACM, 2012."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.48"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1656274.1656278"},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of the 15th conference on USENIX Security Symposium -","volume":"15","author":"Kirda E.","year":"2006","unstructured":"E. Kirda , C. Kruegel , G. Banks , G. Vigna , and R. A. Kemmerer . Behavior-based spyware detection . In Proceedings of the 15th conference on USENIX Security Symposium - Volume 15 , USENIX-SS'06, Berkeley, CA, USA , 2006 . USENIX Association. E. Kirda, C. Kruegel, G. Banks, G. Vigna, and R. A. Kemmerer. Behavior-based spyware detection. In Proceedings of the 15th conference on USENIX Security Symposium - Volume 15, USENIX-SS'06, Berkeley, CA, USA, 2006. USENIX Association."},{"key":"e_1_3_2_1_14_1","volume-title":"June--August","author":"Kuo C.","year":"2005","unstructured":"C. Kuo , F. Schneider , C. Jackson , D. Mountain , and T. Winograd . Google safe browsing. project at google. Inc ., June--August , 2005 . C. Kuo, F. Schneider, C. Jackson, D. Mountain, and T. Winograd. Google safe browsing. project at google. Inc., June--August, 2005."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866353"},{"key":"e_1_3_2_1_16_1","volume-title":"Application behavioral classification, 06","author":"T.","year":"2007","unstructured":"T. LEE, J. J. MODY, Y. L. LIN, A. M. MARINESCU, and A. A. POLYAKOV. Application behavioral classification, 06 2007 . T. LEE, J. J. MODY, Y. L. LIN, A. M. MARINESCU, and A. A. POLYAKOV. Application behavioral classification, 06 2007."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557083"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866356"},{"key":"e_1_3_2_1_19_1","unstructured":"T.. malicious programs for Mac OS X. Mcafee antivirus solution; available at http:\/\/www.securelist.com 2012.  T.. malicious programs for Mac OS X. Mcafee antivirus solution; available at http:\/\/www.securelist.com 2012."},{"key":"e_1_3_2_1_20_1","volume-title":"Syngress","author":"Maynor D.","year":"2007","unstructured":"D. Maynor . Metasploit Toolkit for Penetration Testing, Exploit Development, and Vulnerability Research . Syngress , 2007 . D. Maynor. Metasploit Toolkit for Penetration Testing, Exploit Development, and Vulnerability Research. Syngress, 2007."},{"key":"e_1_3_2_1_21_1","unstructured":"McAfee. Mcafee antivirus solution; available at http:\/\/www.mcafee.com 2013.  McAfee. Mcafee antivirus solution; available at http:\/\/www.mcafee.com 2013."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2007.17"},{"key":"e_1_3_2_1_23_1","unstructured":"R. Naraine. Adobe: Beware of fake flash downloads; available at http:\/\/www.zdnet.com 2008.  R. Naraine. Adobe: Beware of fake flash downloads; available at http:\/\/www.zdnet.com 2008."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.5555\/646465.691553"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_6"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.5555\/2011216.2011217"},{"key":"e_1_3_2_1_27_1","volume-title":"Morgan Kaufmann Pub","author":"Saltzer J. H.","year":"2009","unstructured":"J. H. Saltzer and F. Kaashoek . Principles of computer system design: an introduction . Morgan Kaufmann Pub , 2009 . J. H. Saltzer and F. Kaashoek. Principles of computer system design: an introduction. Morgan Kaufmann Pub, 2009."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.5555\/1304596.1304846"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2011.20"},{"volume-title":"Computer keyboard---Wikipedia, the free encyclopedia","year":"2013","key":"e_1_3_2_1_30_1","unstructured":"Wikipedia. Computer keyboard---Wikipedia, the free encyclopedia , 2013 . Wikipedia. Computer keyboard---Wikipedia, the free encyclopedia, 2013."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.5555\/1898953.1899074"},{"key":"e_1_3_2_1_32_1","first-page":"59","volume-title":"Proceedings of the 5th annual Debian Conference","author":"Zini E.","year":"2005","unstructured":"E. Zini . A cute introduction to debtags . In Proceedings of the 5th annual Debian Conference , pages 59 -- 74 , 2005 . E. Zini. A cute introduction to debtags. In Proceedings of the 5th annual Debian Conference, pages 59--74, 2005."}],"event":{"name":"ACSAC '14: Annual Computer Security Applications Conference","sponsor":["ACSA Applied Computing Security Assoc"],"location":"New Orleans Louisiana USA","acronym":"ACSAC '14"},"container-title":["Proceedings of the 30th Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2664243.2664270","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2664243.2664270","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T06:12:01Z","timestamp":1750227121000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2664243.2664270"}},"subtitle":["context-aware protection against web-based socially engineered trojans"],"short-title":[],"issued":{"date-parts":[[2014,12,8]]},"references-count":32,"alternative-id":["10.1145\/2664243.2664270","10.1145\/2664243"],"URL":"https:\/\/doi.org\/10.1145\/2664243.2664270","relation":{},"subject":[],"published":{"date-parts":[[2014,12,8]]},"assertion":[{"value":"2014-12-08","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}