{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T10:39:14Z","timestamp":1776681554237,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,5,29]],"date-time":"2018-05-29T00:00:00Z","timestamp":1527552000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,5,29]]},"DOI":"10.1145\/3196494.3196515","type":"proceedings-article","created":{"date-parts":[[2018,5,31]],"date-time":"2018-05-31T13:18:28Z","timestamp":1527772708000},"page":"457-468","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":103,"title":["Hardware Performance Counters Can Detect Malware"],"prefix":"10.1145","author":[{"given":"Boyou","family":"Zhou","sequence":"first","affiliation":[{"name":"Boston University, Boston, MA, USA"}]},{"given":"Anmol","family":"Gupta","sequence":"additional","affiliation":[{"name":"Boston University, Boston, MA, USA"}]},{"given":"Rasoul","family":"Jahanshahi","sequence":"additional","affiliation":[{"name":"Boston University, Boston, MA, USA"}]},{"given":"Manuel","family":"Egele","sequence":"additional","affiliation":[{"name":"Boston University, Boston, MA, USA"}]},{"given":"Ajay","family":"Joshi","sequence":"additional","affiliation":[{"name":"Boston University, Boston, MA, USA"}]}],"member":"320","published-online":{"date-parts":[[2018,5,29]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Intel Itanium Architecture Software Developer's Manual. Intel Corporation 2010. Intel Itanium Architecture Software Developer's Manual. Intel Corporation 2010."},{"key":"e_1_3_2_1_2_1","volume-title":"Inc.","author":"Kernel Developer's BIOS","year":"2015"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2485922.2485970"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.28"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/3195638.3195683"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2857055"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11379-1_6"},{"key":"e_1_3_2_1_8_1","first-page":"651","volume-title":"Proceedings of the 21st International Symposium on High Performance Computer Architecture (HPCA)","author":"Ozsoy Meltem","year":"2015"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26362-5_1"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3123939.3123972"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1064978.1065034"},{"key":"e_1_3_2_1_12_1","first-page":"41","volume-title":"USENIX Annual Technical Conference, FREENIX Track","author":"Bellard Fabrice","year":"2005"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1273442.1250746"},{"key":"e_1_3_2_1_14_1","unstructured":"Dynamorio dynamic instrumentation tool platform. http:\/\/www.dynamorio.org\/ 2017. (Accessed on 12\/02\/2017). Dynamorio dynamic instrumentation tool platform. http:\/\/www.dynamorio.org\/ 2017. (Accessed on 12\/02\/2017)."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3052999"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29737-3_26"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1186736.1186737"},{"key":"e_1_3_2_1_18_1","unstructured":"Linux perf. http:\/\/www.brendangregg.com\/perf.html 2017. (Accessed on 11\/19\/2017). Linux perf. http:\/\/www.brendangregg.com\/perf.html 2017. (Accessed on 11\/19\/2017)."},{"key":"e_1_3_2_1_19_1","first-page":"287","volume-title":"USENIX Security Symposium (SP)","author":"Kirat Dhilung","year":"2014"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/IISWC.2008.4636099"},{"key":"e_1_3_2_1_21_1","unstructured":"Ian Goodfellow Yoshua Bengio and Aaron Courville. Deep learning. MIT press 2016. Ian Goodfellow Yoshua Bengio and Aaron Courville. Deep learning. MIT press 2016."},{"key":"e_1_3_2_1_22_1","unstructured":"Pivotal Software Inc. Rabbitmq. http:\/\/www.rabbitmq.com\/ 2017. (Accessed on 11\/12\/2017). Pivotal Software Inc. Rabbitmq. http:\/\/www.rabbitmq.com\/ 2017. (Accessed on 11\/12\/2017)."},{"key":"e_1_3_2_1_23_1","unstructured":"Samba - opening windows to a wider world. https:\/\/www.samba.org\/ 2017. (Accessed on 12\/05\/2017). Samba - opening windows to a wider world. https:\/\/www.samba.org\/ 2017. (Accessed on 12\/05\/2017)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"crossref","unstructured":"bindfs. https:\/\/bindfs.org\/ 2017. (Accessed on 12\/05\/2017). bindfs. https:\/\/bindfs.org\/ 2017. (Accessed on 12\/05\/2017).","DOI":"10.15520\/jbme.2017.vol5.iss11.270.pp05-12"},{"key":"e_1_3_2_1_25_1","unstructured":"Paul J. Drongowski. An introduction to analysis and optimization with amd codeanalyst performance analyzer 2008. Paul J. Drongowski. An introduction to analysis and optimization with amd codeanalyst performance analyzer 2008."},{"key":"e_1_3_2_1_26_1","unstructured":"Virustotal. Virustotal. https:\/\/www.virustotal.com\/ 2017. (Accessed on 07\/12\/2017). Virustotal. Virustotal. https:\/\/www.virustotal.com\/ 2017. (Accessed on 07\/12\/2017)."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45719-2_11"},{"key":"e_1_3_2_1_28_1","unstructured":"Futuremark. https:\/\/www.futuremark.com\/ 2017. (Accessed on 11\/15\/2017). Futuremark. https:\/\/www.futuremark.com\/ 2017. (Accessed on 11\/15\/2017)."},{"key":"e_1_3_2_1_29_1","unstructured":"Performance: Python package index. https:\/\/pypi.python.org\/pypi\/performance\/0.5.1 2017. (Accessed on 11\/30\/2017). Performance: Python package index. https:\/\/pypi.python.org\/pypi\/performance\/0.5.1 2017. (Accessed on 11\/30\/2017)."},{"key":"e_1_3_2_1_30_1","unstructured":"Ninite. https:\/\/ninite.com\/ 2017. (Accessed on 11\/15\/2017). Ninite. https:\/\/ninite.com\/ 2017. (Accessed on 11\/15\/2017)."},{"key":"e_1_3_2_1_31_1","unstructured":"Npackd. https:\/\/npackd.appspot.com\/ 2017. (Accessed on 11\/15\/2017). Npackd. https:\/\/npackd.appspot.com\/ 2017. (Accessed on 11\/15\/2017)."},{"key":"e_1_3_2_1_32_1","unstructured":"Android debug bridge. https:\/\/developer.android.com\/studio\/command-line\/adb.html 2017. (Accessed on 11\/12\/2017). Android debug bridge. https:\/\/developer.android.com\/studio\/command-line\/adb.html 2017. (Accessed on 11\/12\/2017)."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISPASS.2013.6557172"},{"key":"e_1_3_2_1_34_1","unstructured":"S.S. Haykin . Communication System . Wiley Series in Management Series . John Wiley &Sons 1983 . S.S. Haykin. Communication System. Wiley Series in Management Series. John Wiley &Sons 1983."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.5555\/1953048.2078195"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.5555\/646943.712093"},{"key":"e_1_3_2_1_37_1","first-page":"174","volume-title":"KDD","author":"John George H","year":"1995"},{"key":"e_1_3_2_1_38_1","volume-title":"ICML","author":"Rennie J","year":"2003"},{"key":"e_1_3_2_1_39_1","first-page":"1137","volume-title":"Ijcai","author":"Ron Kohavi","year":"1995"},{"key":"e_1_3_2_1_40_1","first-page":"129","volume-title":"Proceedings of Security and Privacy","author":"Young Adam","year":"1996"},{"key":"e_1_3_2_1_41_1","unstructured":"Kaspersky security bulletin 2016. review of the year. overall statistics for 2016. https:\/\/securelist.com\/kaspersky-security-bulletin-2016-executive-summary\/76858\/. (Accessed on 12\/10\/2017). Kaspersky security bulletin 2016. review of the year. overall statistics for 2016. https:\/\/securelist.com\/kaspersky-security-bulletin-2016-executive-summary\/76858\/. (Accessed on 12\/10\/2017)."},{"key":"e_1_3_2_1_42_1","unstructured":"Cryptography reference (windows). https:\/\/msdn.microsoft.com\/en-us\/library\/aa380256.aspx 2017. (Accessed on 11\/18\/2017). Cryptography reference (windows). https:\/\/msdn.microsoft.com\/en-us\/library\/aa380256.aspx 2017. (Accessed on 11\/18\/2017)."}],"event":{"name":"ASIA CCS '18: ACM Asia Conference on Computer and Communications Security","location":"Incheon Republic of Korea","acronym":"ASIA CCS '18","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2018 on Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3196494.3196515","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3196494.3196515","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,4]],"date-time":"2025-07-04T22:26:06Z","timestamp":1751667966000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3196494.3196515"}},"subtitle":["Myth or Fact?"],"short-title":[],"issued":{"date-parts":[[2018,5,29]]},"references-count":42,"alternative-id":["10.1145\/3196494.3196515","10.1145\/3196494"],"URL":"https:\/\/doi.org\/10.1145\/3196494.3196515","relation":{},"subject":[],"published":{"date-parts":[[2018,5,29]]},"assertion":[{"value":"2018-05-29","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}