{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:07:40Z","timestamp":1750306060371,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":24,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,5,15]],"date-time":"2017-05-15T00:00:00Z","timestamp":1494806400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100002322","name":"Coordena\u00e7\u00e3o de Aperfei\u00e7oamento de Pessoal de N\u00edvel Superior","doi-asserted-by":"publisher","award":["99999.006040\/2015-02"],"award-info":[{"award-number":["99999.006040\/2015-02"]}],"id":[{"id":"10.13039\/501100002322","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003545","name":"Minist\u00e9rio da Ci\u00eancia, Tecnologia e Inova\u00e7\u00e3o","doi-asserted-by":"publisher","award":["689772"],"award-info":[{"award-number":["689772"]}],"id":[{"id":"10.13039\/501100003545","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,5,15]]},"DOI":"10.1145\/3075564.3075578","type":"proceedings-article","created":{"date-parts":[[2017,6,7]],"date-time":"2017-06-07T12:47:29Z","timestamp":1496839649000},"page":"45-52","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Data mining the memory access stream to detect anomalous application behavior"],"prefix":"10.1145","author":[{"given":"Francis B.","family":"Moreira","sequence":"first","affiliation":[{"name":"Informatics Institute - UFRGS"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Matthias","family":"Diener","sequence":"additional","affiliation":[{"name":"Informatics Institute - UFRGS"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Philippe O. A.","family":"Navaux","sequence":"additional","affiliation":[{"name":"Informatics Institute - UFRGS"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Israel","family":"Koren","sequence":"additional","affiliation":[{"name":"Department of Electrical & Computer Engineering, University of Massachusetts"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2017,5,15]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24723-4_2"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/2695664.2695701"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2006.33"},{"key":"e_1_3_2_1_4_1","volume-title":"Greedy function approximation: a gradient boosting machine. Annals of statistics","author":"Friedman Jerome H","year":"2001","unstructured":"Jerome H Friedman . 2001. Greedy function approximation: a gradient boosting machine. Annals of statistics ( 2001 ), 1189--1232. Jerome H Friedman. 2001. Greedy function approximation: a gradient boosting machine. Annals of statistics (2001), 1189--1232."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/1762146.1762170"},{"volume-title":"Handbook of stochastic methods","author":"Gardiner Crispin W","key":"e_1_3_2_1_6_1","unstructured":"Crispin W Gardiner and others. 1985. Handbook of stochastic methods . Vol. 3 . Springer Berlin . Crispin W Gardiner and others. 1985. Handbook of stochastic methods. Vol. 3. Springer Berlin."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/1128020.1128563"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.14"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1143549.1143619"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jbi.2005.02.008"},{"key":"e_1_3_2_1_11_1","volume-title":"DARPA Information Survivability Conference and Exposition (DISCEX)","volume":"2","author":"Lippmann Richard P","year":"2000","unstructured":"Richard P Lippmann , David J Fried , Isaac Graf , Joshua W Haines , Kristopher R Kendall , David McClung , Dan Weber , Seth E Webster , Dan Wyschogrod , Robert K Cunningham , and others. 2000 . Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation . In DARPA Information Survivability Conference and Exposition (DISCEX) , Vol. 2 . 12--26. Richard P Lippmann, David J Fried, Isaac Graf, Joshua W Haines, Kristopher R Kendall, David McClung, Dan Weber, Seth E Webster, Dan Wyschogrod, Robert K Cunningham, and others. 2000. Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation. In DARPA Information Survivability Conference and Exposition (DISCEX), Vol. 2. 12--26."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2907071"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/956417.956570"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2749469.2750372"},{"volume-title":"Transparent ROP Exploit Mitigation Using Indirect Branch Tracing. In USENIX Security Symposium. 447--462","author":"Pappas Vasilis","key":"e_1_3_2_1_16_1","unstructured":"Vasilis Pappas , Michalis Polychronakis , and Angelos D. Keromytis . 2013 . Transparent ROP Exploit Mitigation Using Indirect Branch Tracing. In USENIX Security Symposium. 447--462 . Vasilis Pappas, Michalis Polychronakis, and Angelos D. Keromytis. 2013. Transparent ROP Exploit Mitigation Using Indirect Branch Tracing. In USENIX Security Symposium. 447--462."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/HOTCHIPS.2011.7477494"},{"key":"e_1_3_2_1_18_1","first-page":"2825","article-title":"Scikit-learn: Machine learning in Python","author":"Pedregosa Fabian","year":"2011","unstructured":"Fabian Pedregosa , Ga\u00ebl Varoquaux , Alexandre Gramfort , Vincent Michel , Bertrand Thirion , Olivier Grisel , Mathieu Blondel , Peter Prettenhofer , Ron Weiss , Vincent Dubourg , and others. 2011 . Scikit-learn: Machine learning in Python . Journal of Machine Learning Research 12 , Oct (2011), 2825 -- 2830 . Fabian Pedregosa, Ga\u00ebl Varoquaux, Alexandre Gramfort, Vincent Michel, Bertrand Thirion, Olivier Grisel, Mathieu Blondel, Peter Prettenhofer, Ron Weiss, Vincent Dubourg, and others. 2011. Scikit-learn: Machine learning in Python. Journal of Machine Learning Research 12, Oct (2011), 2825--2830.","journal-title":"Journal of Machine Learning Research 12"},{"key":"e_1_3_2_1_19_1","first-page":"554","article-title":"The infinite Gaussian mixture model","volume":"12","author":"Rasmussen Carl Edward","year":"1999","unstructured":"Carl Edward Rasmussen . 1999 . The infinite Gaussian mixture model . In NIPS , Vol. 12. 554 -- 560 . Carl Edward Rasmussen. 1999. The infinite Gaussian mixture model. In NIPS, Vol. 12. 554--560.","journal-title":"NIPS"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/DFT.2008.53"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2005.34"},{"key":"e_1_3_2_1_22_1","volume-title":"Inside the windows vista kernel: Part 3. Microsoft TechNet Magazine","author":"Russinovich Mark","year":"2007","unstructured":"Mark Russinovich . 2007. Inside the windows vista kernel: Part 3. Microsoft TechNet Magazine ( 2007 ). Mark Russinovich. 2007. Inside the windows vista kernel: Part 3. Microsoft TechNet Magazine (2007)."},{"key":"e_1_3_2_1_23_1","unstructured":"Ralph Gregory Taylor. 1998. Models of computation and formal languages. (1998).   Ralph Gregory Taylor. 1998. Models of computation and formal languages. (1998)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1555815.1555771"}],"event":{"name":"CF '17: Computing Frontiers Conference","sponsor":["SIGMICRO ACM Special Interest Group on Microarchitectural Research and Processing"],"location":"Siena Italy","acronym":"CF '17"},"container-title":["Proceedings of the Computing Frontiers Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3075564.3075578","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3075564.3075578","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:03:42Z","timestamp":1750215822000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3075564.3075578"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,5,15]]},"references-count":24,"alternative-id":["10.1145\/3075564.3075578","10.1145\/3075564"],"URL":"https:\/\/doi.org\/10.1145\/3075564.3075578","relation":{},"subject":[],"published":{"date-parts":[[2017,5,15]]},"assertion":[{"value":"2017-05-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}