{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,30]],"date-time":"2026-07-30T14:13:54Z","timestamp":1785420834724,"version":"3.56.0"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2015,12,8]],"date-time":"2015-12-08T00:00:00Z","timestamp":1449532800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,12,8]]},"DOI":"10.1145\/2843859.2843867","type":"proceedings-article","created":{"date-parts":[[2015,12,30]],"date-time":"2015-12-30T13:13:44Z","timestamp":1451481224000},"page":"1-11","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":92,"title":["Repeatable Reverse Engineering with PANDA"],"prefix":"10.1145","author":[{"given":"Brendan","family":"Dolan-Gavitt","sequence":"first","affiliation":[{"name":"New York University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Josh","family":"Hodosh","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"Hulin","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tim","family":"Leek","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ryan","family":"Whelan","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2015,12,8]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"PANDA\n  : Platform for architecture-neutral dynamic analysis. https:\/\/github.com\/moyix\/panda\/.  PANDA: Platform for architecture-neutral dynamic analysis. https:\/\/github.com\/moyix\/panda\/."},{"key":"e_1_3_2_1_2_1","unstructured":"PANDA plugin documentation. https:\/\/github.com\/moyix\/panda\/blob\/master\/docs\/PANDA.md.  PANDA plugin documentation. https:\/\/github.com\/moyix\/panda\/blob\/master\/docs\/PANDA.md."},{"key":"e_1_3_2_1_3_1","unstructured":"PANDA plugin-plugin interaction. https:\/\/github.com\/moyix\/panda\/blob\/master\/docs\/ppp.md.  PANDA plugin-plugin interaction. https:\/\/github.com\/moyix\/panda\/blob\/master\/docs\/ppp.md."},{"key":"e_1_3_2_1_4_1","unstructured":"perlsec: Taint mode. http:\/\/perldoc.perl.org\/perlsec.html#Taint-mode.  perlsec: Taint mode. http:\/\/perldoc.perl.org\/perlsec.html#Taint-mode."},{"key":"e_1_3_2_1_5_1","unstructured":"Volatility: An advanced memory forensics framework. https:\/\/github.com\/volatilityfoundation\/volatility.  Volatility: An advanced memory forensics framework. https:\/\/github.com\/volatilityfoundation\/volatility."},{"key":"e_1_3_2_1_7_1","unstructured":"Derek L. Bruening. Efficient Transparent and Comprehensive Runtime Code Manipulation. PhD thesis Cambridge MA USA 2004. AAI0807735.   Derek L. Bruening. Efficient Transparent and Comprehensive Runtime Code Manipulation. PhD thesis Cambridge MA USA 2004. AAI0807735."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950396"},{"key":"e_1_3_2_1_9_1","first-page":"1","volume-title":"USENIX 2008 Annual Technical Conference on Annual Technical Conference, ATC'08","author":"Chow Jim","year":"2008","unstructured":"Jim Chow , Tal Garfinkel , and Peter M. Chen . Decoupling dynamic program analysis from execution in virtual environments . In USENIX 2008 Annual Technical Conference on Annual Technical Conference, ATC'08 , pages 1 -- 14 , Berkeley, CA, USA , 2008 . USENIX Association. Jim Chow, Tal Garfinkel, and Peter M. Chen. Decoupling dynamic program analysis from execution in virtual environments. In USENIX 2008 Annual Technical Conference on Annual Technical Conference, ATC'08, pages 1--14, Berkeley, CA, USA, 2008. USENIX Association."},{"key":"e_1_3_2_1_10_1","first-page":"22","volume-title":"Proceedings of the 13th Conference on USENIX Security Symposium -","volume":"13","author":"Chow Jim","year":"2004","unstructured":"Jim Chow , Ben Pfaff , Tal Garfinkel , Kevin Christopher , and Mendel Rosenblum . Understanding data lifetime via whole system simulation . In Proceedings of the 13th Conference on USENIX Security Symposium - Volume 13 , SSYM'04, pages 22 -- 22 , Berkeley, CA, USA , 2004 . USENIX Association. Jim Chow, Ben Pfaff, Tal Garfinkel, Kevin Christopher, and Mendel Rosenblum. Understanding data lifetime via whole system simulation. In Proceedings of the 13th Conference on USENIX Security Symposium - Volume 13, SSYM'04, pages 22--22, Berkeley, CA, USA, 2004. USENIX Association."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1273463.1273490"},{"key":"e_1_3_2_1_12_1","volume-title":"International Symposium on Microarchitecture","author":"Crandall J. R.","year":"2004","unstructured":"J. R. Crandall and F. T. Chong . Architectural support for software security through control data integrity . In International Symposium on Microarchitecture , 2004 . J. R. Crandall and F. T. Chong. Architectural support for software security through control data integrity. In International Symposium on Microarchitecture, 2004."},{"key":"e_1_3_2_1_13_1","unstructured":"Brendan Dolan-Gavitt. Breaking Spotify DRM with PANDA. http:\/\/moyix.blogspot.com\/2014\/07\/breaking-spotify-drm-with-panda.html July 2014.  Brendan Dolan-Gavitt. Breaking Spotify DRM with PANDA. http:\/\/moyix.blogspot.com\/2014\/07\/breaking-spotify-drm-with-panda.html July 2014."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516697"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.11"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/1060289.1060309"},{"key":"e_1_3_2_1_17_1","volume-title":"Sony's web-based uninstaller opens a big security hole","author":"Felten Ed","year":"2005","unstructured":"Ed Felten . Sony's web-based uninstaller opens a big security hole ; Sony to recall discs. https:\/\/freedom-to-tinker.com\/blog\/felten\/sonys-web-based-uninstaller-opens-big-security-hole-sony-recall-discs\/, November 2005 . Ed Felten. Sony's web-based uninstaller opens a big security hole; Sony to recall discs. https:\/\/freedom-to-tinker.com\/blog\/felten\/sonys-web-based-uninstaller-opens-big-security-hole-sony-recall-discs\/, November 2005."},{"key":"e_1_3_2_1_18_1","volume-title":"Nov","author":"Hardy Seth","year":"2013","unstructured":"Seth Hardy . Asia Chats: Investigating regionally-based keyword censorship in LINE. https:\/\/citizenlab.org\/2013\/11\/asia-chats-investigating-regionally-based-keyword-censorship-line\/ , Nov 2013 . Seth Hardy. Asia Chats: Investigating regionally-based keyword censorship in LINE. https:\/\/citizenlab.org\/2013\/11\/asia-chats-investigating-regionally-based-keyword-censorship-line\/, Nov 2013."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/2610384.2610407"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2259016.2259030"},{"key":"e_1_3_2_1_21_1","unstructured":"Patrick Jackson. Upstreaming the Android Emulator. http:\/\/gsoc11-qemu-android.blogspot.com.  Patrick Jackson. Upstreaming the Android Emulator. http:\/\/gsoc11-qemu-android.blogspot.com."},{"key":"e_1_3_2_1_22_1","volume-title":"Network and Distributed Systems Symposium (NDSS)","author":"Kang Min Gyung","year":"2011","unstructured":"Min Gyung Kang , Stephen McCamant , Pongsin Poosankam , and Dawn Song . DTA++ : Dynamic taint analysis with targeted control-flow propagation . In Network and Distributed Systems Symposium (NDSS) , 2011 . Min Gyung Kang, Stephen McCamant, Pongsin Poosankam, and Dawn Song. DTA++: Dynamic taint analysis with targeted control-flow propagation. In Network and Distributed Systems Symposium (NDSS), 2011."},{"key":"e_1_3_2_1_23_1","volume-title":"Proceedings of the 2005 Usenix Annual Technical Conference","author":"King Samuel T.","year":"2005","unstructured":"Samuel T. King , George W. Dunlap , and Peter M. Chen . Debugging operating systems with time-traveling virtual machines . In Proceedings of the 2005 Usenix Annual Technical Conference , 2005 . Samuel T. King, George W. Dunlap, and Peter M. Chen. Debugging operating systems with time-traveling virtual machines. In Proceedings of the 2005 Usenix Annual Technical Conference, 2005."},{"key":"e_1_3_2_1_24_1","first-page":"225","volume-title":"Proceedings of the Linux Symposium","volume":"1","author":"Kivity Avi","year":"2007","unstructured":"Avi Kivity , Yaniv Kamay , Dor Laor , Uri Lublin , and Anthony Liguori . kvm : the Linux virtual machine monitor . In Proceedings of the Linux Symposium , volume 1 , pages 225 -- 230 , 2007 . Avi Kivity, Yaniv Kamay, Dor Laor, Uri Lublin, and Anthony Liguori. kvm: the Linux virtual machine monitor. In Proceedings of the Linux Symposium, volume 1, pages 225--230, 2007."},{"key":"e_1_3_2_1_25_1","volume-title":"Free and Open Communications on the Internet","author":"Knockel Jeffrey","year":"2011","unstructured":"Jeffrey Knockel , Jedidiah R. Crandall , and Jared Saia . Three Researchers , Five Conjectures : An Empirical Analysis of TOM-Skype Censorship and Surveillance . In Free and Open Communications on the Internet , San Francisco, CA, USA , 2011 . USENIX. Jeffrey Knockel, Jedidiah R. Crandall, and Jared Saia. Three Researchers, Five Conjectures: An Empirical Analysis of TOM-Skype Censorship and Surveillance. In Free and Open Communications on the Internet, San Francisco, CA, USA, 2011. USENIX."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"e_1_3_2_1_27_1","volume-title":"Network and Distributed Systems Symposium (NDSS)","author":"Newsome James","year":"2005","unstructured":"James Newsome and Dawn Song . Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software . In Network and Distributed Systems Symposium (NDSS) , 2005 . James Newsome and Dawn Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In Network and Distributed Systems Symposium (NDSS), 2005."},{"key":"e_1_3_2_1_28_1","volume-title":"October","author":"Russinovich Mark","year":"2005","unstructured":"Mark Russinovich . Sony , rootkits and digital rights management gone too far. https:\/\/web.archive.org\/web\/20051102053346\/http:\/\/www.sysinternals.com\/blog\/2005\/10\/sony-rootkits-and-digital-rights.html , October 2005 . Mark Russinovich. Sony, rootkits and digital rights management gone too far. https:\/\/web.archive.org\/web\/20051102053346\/http:\/\/www.sysinternals.com\/blog\/2005\/10\/sony-rootkits-and-digital-rights.html, October 2005."},{"key":"e_1_3_2_1_29_1","volume-title":"Nov","author":"Senft Adam","year":"2013","unstructured":"Adam Senft , Aim Sinpeng , Andrew Hilts , Byron Sonne , Greg Wiseman , Irene Poetranto , Jakub Dalek , Jason Q. Ng , Katie Kleemola , Masashi Crete-Nishihata , and Seth Hardy . Asia Chats: Analyzing information controls and privacy in Asian messaging applications. https:\/\/citizenlab.org\/2013\/11\/asia-chats-analyzing-information-controls-privacy-asian-messaging-applications\/ , Nov 2013 . Adam Senft, Aim Sinpeng, Andrew Hilts, Byron Sonne, Greg Wiseman, Irene Poetranto, Jakub Dalek, Jason Q. Ng, Katie Kleemola, Masashi Crete-Nishihata, and Seth Hardy. Asia Chats: Analyzing information controls and privacy in Asian messaging applications. https:\/\/citizenlab.org\/2013\/11\/asia-chats-analyzing-information-controls-privacy-asian-messaging-applications\/, Nov 2013."},{"key":"e_1_3_2_1_30_1","unstructured":"Skywing. PatchGuard reloaded: A brief analysis of PatchGuard version 3. http:\/\/uninformed.org\/index.cgi?v=8&a=5 September 2007.  Skywing. PatchGuard reloaded: A brief analysis of PatchGuard version 3. http:\/\/uninformed.org\/index.cgi?v=8&a=5 September 2007."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89862-7_1"},{"key":"e_1_3_2_1_32_1","volume-title":"Enhanced execution record\/replay in workstation 6.5","year":"2008","unstructured":"VMWare. Enhanced execution record\/replay in workstation 6.5 , 2008 . http:\/\/blogs.vmware.com\/workstation\/2008\/04\/enhanced-execut.html. VMWare. Enhanced execution record\/replay in workstation 6.5, 2008. http:\/\/blogs.vmware.com\/workstation\/2008\/04\/enhanced-execut.html."},{"key":"e_1_3_2_1_33_1","first-page":"687","volume-title":"Presented as part of the 22nd USENIX Security Symposium (USENIX Security 13)","author":"Wang Ruoyu","year":"2013","unstructured":"Ruoyu Wang , Yan Shoshitaishvili , Christopher Kruegel , and Giovanni Vigna . Steal this movie: Automatically bypassing drm protection in streaming media services . In Presented as part of the 22nd USENIX Security Symposium (USENIX Security 13) , pages 687 -- 702 , Washington, D.C. , 2013 . USENIX. Ruoyu Wang, Yan Shoshitaishvili, Christopher Kruegel, and Giovanni Vigna. Steal this movie: Automatically bypassing drm protection in streaming media services. In Presented as part of the 22nd USENIX Security Symposium (USENIX Security 13), pages 687--702, Washington, D.C., 2013. USENIX."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37051-9_8"},{"key":"e_1_3_2_1_35_1","first-page":"29","volume-title":"Proceedings of the 21st USENIX Conference on Security Symposium, Security'12","author":"Yan Lok-Kwong","year":"2012","unstructured":"Lok-Kwong Yan and Heng Yin . DroidScope: Seamlessly Reconstructing the OS and Dalvik Semantic Views for Dynamic Android Malware Analysis . In Proceedings of the 21st USENIX Conference on Security Symposium, Security'12 , pages 29 -- 29 , Berkeley, CA , USA, 2012 . USENIX Association . Lok-Kwong Yan and Heng Yin. DroidScope: Seamlessly Reconstructing the OS and Dalvik Semantic Views for Dynamic Android Malware Analysis. In Proceedings of the 21st USENIX Conference on Security Symposium, Security'12, pages 29--29, Berkeley, CA, USA, 2012. USENIX Association."}],"event":{"name":"PPREW-5: Program Protection and Reverse Engineering Workshop","location":"Los Angeles CA USA","acronym":"PPREW-5"},"container-title":["Proceedings of the 5th Program Protection and Reverse Engineering Workshop"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2843859.2843867","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2843859.2843867","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T05:48:51Z","timestamp":1750225731000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2843859.2843867"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,12,8]]},"references-count":34,"alternative-id":["10.1145\/2843859.2843867","10.1145\/2843859"],"URL":"https:\/\/doi.org\/10.1145\/2843859.2843867","relation":{},"subject":[],"published":{"date-parts":[[2015,12,8]]},"assertion":[{"value":"2015-12-08","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}