{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T01:54:51Z","timestamp":1779328491756,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":56,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,10,30]],"date-time":"2017-10-30T00:00:00Z","timestamp":1509321600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["1526798"],"award-info":[{"award-number":["1526798"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["1422594"],"award-info":[{"award-number":["1422594"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["1505664"],"award-info":[{"award-number":["1505664"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"ARO","award":["W911NF-13-1-0421"],"award-info":[{"award-number":["W911NF-13-1-0421"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,10,30]]},"DOI":"10.1145\/3133956.3134035","type":"proceedings-article","created":{"date-parts":[[2017,10,27]],"date-time":"2017-10-27T12:48:18Z","timestamp":1509108498000},"page":"2231-2244","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":65,"title":["FlashGuard"],"prefix":"10.1145","author":[{"given":"Jian","family":"Huang","sequence":"first","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jun","family":"Xu","sequence":"additional","affiliation":[{"name":"Pennsylvania State University, University Park, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xinyu","family":"Xing","sequence":"additional","affiliation":[{"name":"Pennsylvania State University, University Park, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peng","family":"Liu","sequence":"additional","affiliation":[{"name":"Pennsylvania State University, University Park, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Moinuddin K.","family":"Qureshi","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2017,10,30]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"USENIX Annual Technical Conference. 57--70","author":"Agrawal Nitin","year":"2008","unstructured":"Nitin Agrawal, Vijayan Prabhakaran, Ted Wobber, John D Davis, Mark S Manasse, and Rina Panigrahy. 2008. Design Tradeoffs for SSD Performance.. In USENIX Annual Technical Conference. 57--70."},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26362-5_18"},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.peva.2010.07.003"},{"key":"e_1_3_2_2_4_1","unstructured":"Cerber Ransomware - New But Mature. 2016. https:\/\/blog.malwarebytes.com\/threat-analysis\/2016\/03\/ cerber-ransomware-new-but-mature\/. (2016)."},{"key":"e_1_3_2_2_5_1","volume-title":"Tivoli Storage Manager and VERITAS NetBackup in Real-World Environments. A summary by IBM of the whitepaper and benchmark written by Progressive Strategies","author":"Comparing IBM","year":"2002","unstructured":"IBM Comparing. 2002. Tivoli Storage Manager and VERITAS NetBackup in Real-World Environments. A summary by IBM of the whitepaper and benchmark written by Progressive Strategies (2002)."},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991110"},{"key":"e_1_3_2_2_7_1","unstructured":"Data Recovery. 2014. https:\/\/support.microsoft.com\/en-us\/help\/835840\/data-recovery. (2014)."},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2882903.2915219"},{"key":"e_1_3_2_2_9_1","volume-title":"Proc. 38th IEEE Symposium on Security and Privacy (Oakland'17)","author":"Dongpeng Xu Jiang Ming","year":"2017","unstructured":"Jiang Ming Dongpeng Xu and Dinghao Wu. 2017. Cryptographic Function Detection in Obfuscated Binaries via Bit-precise Symbolic Loop Mapping. In Proc. 38th IEEE Symposium on Security and Privacy (Oakland'17). San Jose, CA."},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2089125.2089126"},{"key":"e_1_3_2_2_11_1","volume-title":"Bringing science to digital forensics with standardized forensic corpora. digital investigation 6","author":"Garfinkel Simson","year":"2009","unstructured":"Simson Garfinkel, Paul Farrell, Vassil Roussev, and George Dinolt. 2009. Bringing science to digital forensics with standardized forensic corpora. digital investigation 6 (2009), S2--S11."},{"key":"e_1_3_2_2_12_1","volume-title":"Cloud based storage: A brief look at dropbox. Chronicles 30, 4","author":"Gross James","year":"2013","unstructured":"James Gross. 2013. Cloud based storage: A brief look at dropbox. Chronicles 30, 4 (2013)."},{"key":"e_1_3_2_2_13_1","unstructured":"How Ransomware Became a Billion-Dollar Nightmare for Business. 2016. https:\/\/www.theatlantic.com\/business\/archive\/2016\/09\/ransomware-us\/ 498602\/. (2016)."},{"key":"e_1_3_2_2_14_1","volume-title":"Qureshi","author":"Huang Jian","year":"2017","unstructured":"Jian Huang, Anirudh Badam, Laura Caulfield, Suman Nath, Sudipta Sengupta, Bikash Sharma, and Moinuddin K. Qureshi. 2017. FlashBlox: Achieving Both Performance Isolation and Uniform Lifetime for Virtualized SSDs. In Proc. FAST'17. Santa Clara, CA."},{"key":"e_1_3_2_2_15_1","volume-title":"Proc. 2015 USENIX Annual Technical Conference (USENIX ATC'15)","author":"Huang Jian","unstructured":"Jian Huang, Anirudh Badam, Ranveer Chandra, and Edmund B. Nightingale. 2015. WearDrive: Fast and Energy-Efficient Storage for Wearables. In Proc. 2015 USENIX Annual Technical Conference (USENIX ATC'15). Santa Clara, CA."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2749469.2750420"},{"key":"e_1_3_2_2_17_1","volume-title":"Ransomware: How consumers and businesses value their data. Technical Report","author":"Force Research IBM","year":"2016","unstructured":"IBM X-Force Research. 2016. Ransomware: How consumers and businesses value their data. Technical Report (2016)."},{"key":"e_1_3_2_2_18_1","unstructured":"IOzone Lab. 2016. http:\/\/www.iozone.org\/. (2016)."},{"key":"e_1_3_2_2_19_1","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Kharaz Amin","year":"2016","unstructured":"Amin Kharaz, Sajjad Arshad, Collin Mulliner, William Robertson, and Engin Kirda. 2016. UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware. In 25th USENIX Security Symposium (USENIX Security 16). USENIX Association, Austin, TX, 757--772."},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-20550-2_1"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2385603.2385607"},{"key":"e_1_3_2_2_22_1","volume-title":"BPLRU: A Buffer Management Scheme for Improving Random Writes in Flash Storage. In FAST'08","author":"Kim Hyojun","year":"2008","unstructured":"Hyojun Kim and Seongjun Ahn. 2008. BPLRU: A Buffer Management Scheme for Improving Random Writes in Flash Storage. In FAST'08. San Jose, CA."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053035"},{"key":"e_1_3_2_2_24_1","first-page":"27","article-title":"An Efficient Secure Deletion Scheme for Flash File Systems","volume":"26","author":"Lee Jaeheung","year":"2010","unstructured":"Jaeheung Lee, Sangho Yi, Junyoung Heo, Hyungbae Park, Sung Y Shin, and Yookun Cho. 2010. An Efficient Secure Deletion Scheme for Flash File Systems. J. Inf. Sci. Eng. 26, 1 (2010), 27--38.","journal-title":"J. Inf. Sci. Eng."},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.5555\/2591305.2591316"},{"key":"e_1_3_2_2_26_1","volume-title":"The Rise of Android Ransomware. White Paper","author":"Lipovsky Robert","year":"2016","unstructured":"Robert Lipovsky, Lukas Stefanko, and Gabriel Branisa. 2016. The Rise of Android Ransomware. White Paper (2016)."},{"key":"e_1_3_2_2_27_1","unstructured":"Master File Table (Windows). 2017. https:\/\/msdn.microsoft.com\/en-us\/library\/windows\/desktop\/aa365230(v=vs.85).aspx. (2017)."},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1416944.1416949"},{"key":"e_1_3_2_2_29_1","unstructured":"NetApp. 1997. http:\/\/www.shub-internet.org\/brad\/FreeBSD\/postmark.html. (1997)."},{"key":"e_1_3_2_2_30_1","volume-title":"Ransomware: a growing menace","author":"O'Gorman Gavin","unstructured":"Gavin O'Gorman and Geoff McDonald. 2012. Ransomware: a growing menace. Symantec Corporation."},{"key":"e_1_3_2_2_31_1","first-page":"441","article-title":"Network file system. (Oct. 21 2008)","volume":"7","author":"Palevich John H","year":"2008","unstructured":"John H Palevich and Martin Taillefer. 2008. Network file system. (Oct. 21 2008). US Patent 7,441,012.","journal-title":"US Patent"},{"key":"e_1_3_2_2_32_1","volume-title":"USENIX Annual Technical Conference, General Track. 105--120","author":"Prabhakaran Vijayan","year":"2005","unstructured":"Vijayan Prabhakaran, Andrea C Arpaci-Dusseau, and Remzi H Arpaci-Dusseau. 2005. Analysis and Evolution of Journaling File Systems.. In USENIX Annual Technical Conference, General Track. 105--120."},{"key":"e_1_3_2_2_33_1","volume-title":"inexpensive backup solutions for open systems. \" O'Reilly Media","author":"Preston Curtis","unstructured":"Curtis Preston. 2007. Backup & recovery: inexpensive backup solutions for open systems. \" O'Reilly Media, Inc.\"."},{"key":"e_1_3_2_2_34_1","unstructured":"Ransomware Definition. 2016. http:\/\/www.trendmicro.com\/vinfo\/us\/security\/definition\/ransomware. (2016)."},{"key":"e_1_3_2_2_35_1","unstructured":"Ransomware on Mobile Devices. 2016. http:\/\/www.hipaajournal.com\/ransomware-mobile-devices\/. (2016)."},{"key":"e_1_3_2_2_36_1","volume-title":"the Tool of Choice for Cyber Extortion","author":"Ransomware","year":"2016","unstructured":"Ransomware: the Tool of Choice for Cyber Extortion. 2016. https:\/\/www.fireeye.com\/current-threats\/what-is-cyber-security\/ransomware. html. (2016)."},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.28"},{"key":"e_1_3_2_2_38_1","volume-title":"Proc. USENIX Security'12","author":"Reardon Joel","year":"2012","unstructured":"Joel Reardon, Srdjan Capkun, and David Basin. 2012. Data Node Encrypted File System: Efficient Secure Deletion for Flash Memory. In Proc. USENIX Security'12. Bellevue, WA."},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0052348"},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/146941.146943"},{"key":"e_1_3_2_2_41_1","volume-title":"Microsoft Windows Internals: Microsoft Windows Server","author":"Russinovich Mark E","year":"2003","unstructured":"Mark E Russinovich, David A Solomon, and Jim Allchin. 2005. Microsoft Windows Internals: Microsoft Windows Server 2003, Windows XP, and Windows 2000. Vol. 4. Microsoft Press Redmond."},{"key":"e_1_3_2_2_42_1","volume-title":"Power Solutions","author":"Sankaran Ananda","year":"2004","unstructured":"Ananda Sankaran, Kevin Guinn, and Dat Nguyen. 2004. Volume shadow copy service. Power Solutions, March (2004)."},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2016.46"},{"key":"e_1_3_2_2_45_1","unstructured":"D. Sgandurra L. Mu\u00f1oz-Gonz\u00e1lez R. Mohsen and E. C. Lupu. 2016. Automated Dynamic Analysis of Ransomware: Benefits Limitations and use for Detection. ArXiv e-prints (Sept. 2016). arXiv:cs.CR\/1609.03020"},{"key":"e_1_3_2_2_46_1","volume-title":"Ransomware and Businesses","author":"Report Special","year":"2016","unstructured":"Special Report: Ransomware and Businesses. 2016. http:\/\/www.symantec.com\/content\/en\/us\/enterprise\/media\/security_response\/ whitepapers\/ISTR2016_Ransomware_and_Businesses.pdf. (2016)."},{"key":"e_1_3_2_2_47_1","volume-title":"Close in on HDDs","author":"SSD","year":"2016","unstructured":"SSD prices plummet again, Close in on HDDs. 2016. http:\/\/www.pcworld.com\/article\/3040591\/storage\/ ssd-prices-plummet-again-close-in-on-hdds.html. (2016)."},{"key":"e_1_3_2_2_48_1","volume-title":"An On-line Transaction Processing Benchmark","year":"2001","unstructured":"TPC-C: An On-line Transaction Processing Benchmark. 2001. http:\/\/www.tpc.org\/tpcc\/. (2001)."},{"key":"e_1_3_2_2_49_1","volume-title":"Proc. 6th USENIX on File and Storage Technologies (FAST'10)","author":"Verma Akshat","year":"2010","unstructured":"Akshat Verma, Ricardo Koller, Luis Useche, and Raju Rangaswami. 2010. SRCMap: Energy Proportional Storage Using Dynamic Consolidation. In Proc. 6th USENIX on File and Storage Technologies (FAST'10). San Jose, CA."},{"key":"e_1_3_2_2_50_1","volume-title":"Proc. 4th Workshop on Interactions of NVM\/Flash with Operating System and Workloads (INFLOW'16)","author":"Verschoren Robin","year":"2016","unstructured":"Robin Verschoren and Benny Van Houdt. 2016. On the Impact of Garbage Collection on Flash-Based SSD Endurance. In Proc. 4th Workshop on Interactions of NVM\/Flash with Operating System and Workloads (INFLOW'16). Savannah, GA."},{"key":"e_1_3_2_2_51_1","volume-title":"Proc. 10th USENIX conference on File and Storage Technologies (FAST'12)","author":"Virable Michael","unstructured":"Michael Virable, Stefan Savage, and Geoffrey M. Voelker. 2012. BlueSky: A Cloud- Backed File System for the Enterprise. In Proc. 10th USENIX conference on File and Storage Technologies (FAST'12). San Jose, CA."},{"key":"e_1_3_2_2_52_1","volume-title":"Malware and URL Scanner","author":"Free Online Virus VirusTotal","year":"2016","unstructured":"VirusTotal - Free Online Virus, Malware and URL Scanner. 2016. https:\/\/www.virustotal.com\/. (2016)."},{"key":"e_1_3_2_2_53_1","unstructured":"WannaCry Ransomware Attack. 2017. https:\/\/en.wikipedia.org\/wiki\/WannaCry_ransomware_attack. (2017)."},{"key":"e_1_3_2_2_54_1","volume-title":"Proc. 9th USENIX Conference on File and Storage Technologies (FAST'11)","author":"Chung Wei Michael Yung","year":"2011","unstructured":"Michael Yung Chung Wei, Laura M Grupp, Frederick E Spada, and Steven Swan- son. 2011. Reliably Erasing Data from Flash-Based Solid State Drives.. In Proc. 9th USENIX Conference on File and Storage Technologies (FAST'11)."},{"key":"e_1_3_2_2_55_1","unstructured":"Will you backups protect you against ransomware. 2016. http:\/\/www.csoonline.com\/article\/3075385\/backup-recovery\/ will-your-backups-protect-you-against-ransomware.html. (2016)."},{"key":"e_1_3_2_2_56_1","unstructured":"WMIC - Take Command-line Control over WMI. 2002. (2002)."},{"key":"e_1_3_2_2_57_1","unstructured":"Write Amplification Factor. 2017. https:\/\/en.wikipedia.org\/wiki\/Write_amplification. (2017)."}],"event":{"name":"CCS '17: 2017 ACM SIGSAC Conference on Computer and Communications Security","location":"Dallas Texas USA","acronym":"CCS '17","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3133956.3134035","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3133956.3134035","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3133956.3134035","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:11:03Z","timestamp":1750212663000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3133956.3134035"}},"subtitle":["Leveraging Intrinsic Flash Properties to Defend Against Encryption Ransomware"],"short-title":[],"issued":{"date-parts":[[2017,10,30]]},"references-count":56,"alternative-id":["10.1145\/3133956.3134035","10.1145\/3133956"],"URL":"https:\/\/doi.org\/10.1145\/3133956.3134035","relation":{},"subject":[],"published":{"date-parts":[[2017,10,30]]},"assertion":[{"value":"2017-10-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}