{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,22]],"date-time":"2026-10-22T00:06:42Z","timestamp":1792627602483,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":99,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,10,15]],"date-time":"2018-10-15T00:00:00Z","timestamp":1539561600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency","doi-asserted-by":"publisher","award":["FA8650-15-C-7561"],"award-info":[{"award-number":["FA8650-15-C-7561"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,10,15]]},"DOI":"10.1145\/3243734.3243829","type":"proceedings-article","created":{"date-parts":[[2018,10,16]],"date-time":"2018-10-16T17:38:33Z","timestamp":1539711513000},"page":"1883-1898","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":55,"title":["Threat Intelligence Computing"],"prefix":"10.1145","author":[{"given":"Xiaokui","family":"Shu","sequence":"first","affiliation":[{"name":"IBM Research, Yorktown Heights, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Frederico","family":"Araujo","sequence":"additional","affiliation":[{"name":"IBM Research, Yorktown Heights, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Douglas L.","family":"Schales","sequence":"additional","affiliation":[{"name":"IBM Research, Yorktown Heights, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marc Ph.","family":"Stoecklin","sequence":"additional","affiliation":[{"name":"IBM Research, Yorktown Heights, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiyong","family":"Jang","sequence":"additional","affiliation":[{"name":"IBM Research, Yorktown Heights, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Heqing","family":"Huang","sequence":"additional","affiliation":[{"name":"IBM Research, Yorktown Heights, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Josyula R.","family":"Rao","sequence":"additional","affiliation":[{"name":"IBM Research, Yorktown Heights, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2018,10,15]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"Luca Aceto and Andy Gordon. 2005. Algebraic Process Calculi: The First Twenty Five Years and Beyond. BRICS publications Bertinoro Forli Italy.  Luca Aceto and Andy Gordon. 2005. Algebraic Process Calculi: The First Twenty Five Years and Beyond. BRICS publications Bertinoro Forli Italy."},{"key":"e_1_3_2_2_2_1","volume-title":"Proceedings of USENIX Security Symposium. ACM","author":"Bates Adam","year":"2015"},{"key":"e_1_3_2_2_3_1","first-page":"148","article-title":"Paranoid Penguin: An Introduction to Novell AppArmor","volume":"2006","author":"Bauer Mick","year":"2006","journal-title":"Linux Journal"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2808769.2808773"},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420969"},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030100"},{"key":"e_1_3_2_2_7_1","volume-title":"Proceedings of the 20th Network and Distributed System Security Symposium (NDSS). The Internet Society","author":"Bugiel Sven","year":"2012"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66332-6_4"},{"key":"e_1_3_2_2_9_1","volume-title":"Retrieved","author":"Black Carbon","year":"2018"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1541880.1541882"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.14778\/1687627.1687711"},{"key":"e_1_3_2_2_12_1","volume-title":"Retrieved","year":"2018"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.5555\/645839.670735"},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1987.232894"},{"key":"e_1_3_2_2_15_1","volume-title":"Retrieved","author":"Dillon Sean","year":"2017"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134015"},{"key":"e_1_3_2_2_17_1","volume-title":"Proceedings of the 2004 IEEE Symposium on Security and Privacy. IEEE Press","author":"Feng H.H."},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23379"},{"key":"e_1_3_2_2_19_1","volume-title":"Retrieved","author":"Fewer Stephen","year":"2013"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/1947337.1947356"},{"key":"e_1_3_2_2_21_1","volume-title":"Retrieved","author":"Fox-Brewster Thomas","year":"2017"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.11"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3167132.3167305"},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/11663812_10"},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.1"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23089"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1368310.1368332"},{"key":"e_1_3_2_2_28_1","volume-title":"Proceedings of the 17th USENIX Security Symposium (Security'08)","author":"Gu Guofei","year":"2008"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2015.34"},{"key":"e_1_3_2_2_30_1","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Hossain Md Nahid"},{"key":"e_1_3_2_2_31_1","volume-title":"Retrieved","author":"HP.","year":"2018"},{"key":"e_1_3_2_2_32_1","volume-title":"2016 Annual Conference on Information Science and Systems (CISS). IEEE Press","author":"Huber C."},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134646"},{"key":"e_1_3_2_2_34_1","volume-title":"Retrieved","author":"IBM.","year":"2018"},{"key":"e_1_3_2_2_35_1","volume-title":"Retrieved","author":"IBM.","year":"2018"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23269"},{"key":"e_1_3_2_2_37_1","volume-title":"USENIX Security Symposium. ACM","author":"Jacob Gregoire","year":"2011"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134045"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2006.69"},{"key":"e_1_3_2_2_40_1","volume-title":"Proceedings of USENIX Security Symposium. ACM","author":"Kapravelos Alexandros","year":"2014"},{"key":"e_1_3_2_2_41_1","volume-title":"Proceedings of USENIX Security Symposium. ACM","author":"Kharraz Amin","year":"2016"},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945467"},{"key":"e_1_3_2_2_43_1","volume-title":"Proceedings of the 12th Network and Distributed System Security Symposium (NDSS). The Internet Society","author":"King Samuel T","year":"2005"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.5555\/1855768.1855790"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813724"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23220"},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23306"},{"key":"e_1_3_2_2_48_1","volume-title":"Retrieved","author":"Leach P.","year":"2018"},{"key":"e_1_3_2_2_49_1","volume-title":"Proceedings of the 20th Network and Distributed System Security Symposium (NDSS). The Internet Society","author":"Lee Kyu Hyung","year":"2013"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.5555\/1267549.1267555"},{"key":"e_1_3_2_2_51_1","volume-title":"Proceedings of the 20th Network and Distributed System Security Symposium (NDSS). The Internet Society","author":"Lever Charles","year":"2013"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978315"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.5555\/1896579.1896728"},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23254"},{"key":"e_1_3_2_2_55_1","volume-title":"A real-time intrusion-detection expert system (IDES). SRI International Computer Science Laboratory","author":"Lunt Teresa F"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2017.95"},{"key":"e_1_3_2_2_57_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23350"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939783"},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"crossref","unstructured":"J. Mao J. Bian G. Bai R. Wang Y. Chen Y. Xiao and Z. Liang. 2018. Detecting Malicious Behaviors in JavaScript Applications. IEEE Access 6 (Jan 2018) 12284--12294.  J. Mao J. Bian G. Bai R. Wang Y. Chen Y. Xiao and Z. Liang. 2018. Detecting Malicious Behaviors in JavaScript Applications. IEEE Access 6 (Jan 2018) 12284--12294.","DOI":"10.1109\/ACCESS.2018.2795383"},{"key":"e_1_3_2_2_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029823"},{"key":"e_1_3_2_2_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/1127345.1127348"},{"key":"e_1_3_2_2_62_1","volume-title":"USENIX Security Symposium. ACM","author":"Nagaraja Shishir","year":"2010"},{"key":"e_1_3_2_2_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134074"},{"key":"e_1_3_2_2_64_1","volume-title":"Retrieved","author":"Technology Neo","year":"2018"},{"key":"e_1_3_2_2_65_1","volume-title":"Retrieved","author":"Technology Neo","year":"2018"},{"key":"e_1_3_2_2_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948137"},{"key":"e_1_3_2_2_67_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2004.11"},{"key":"e_1_3_2_2_68_1","volume-title":"Retrieved","author":"OASIS.","year":"2018"},{"key":"e_1_3_2_2_69_1","volume-title":"Metasploit: The penetration tester's guide","author":"O'Gorman Jim","year":"2011"},{"key":"e_1_3_2_2_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2015.14"},{"key":"e_1_3_2_2_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991122"},{"key":"e_1_3_2_2_72_1","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420989"},{"key":"e_1_3_2_2_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815072.2815073"},{"key":"e_1_3_2_2_74_1","volume-title":"Proceedings of the 31st IEEE International Conference on Data Engineering. IEEE Press","author":"Schales D. L."},{"key":"e_1_3_2_2_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/2798727"},{"key":"e_1_3_2_2_76_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315313"},{"key":"e_1_3_2_2_77_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134105"},{"key":"e_1_3_2_2_78_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813654"},{"key":"e_1_3_2_2_79_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26362-5_13"},{"key":"e_1_3_2_2_80_1","doi-asserted-by":"publisher","DOI":"10.1145\/3105761"},{"key":"e_1_3_2_2_81_1","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052587"},{"key":"e_1_3_2_2_82_1","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC.2009.99"},{"key":"e_1_3_2_2_83_1","volume-title":"Retrieved","year":"2018"},{"key":"e_1_3_2_2_84_1","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134604"},{"key":"e_1_3_2_2_85_1","volume-title":"2016 IEEE Conference on Communications and Network Security (CNS). IEEE Press","author":"Sun X."},{"key":"e_1_3_2_2_86_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23145"},{"key":"e_1_3_2_2_87_1","doi-asserted-by":"publisher","DOI":"10.1504\/IJICS.2013.058210"},{"key":"e_1_3_2_2_88_1","volume-title":"Proceedings of the 2001 IEEE Symposium on Security and Privacy. IEEE Press","author":"Wagner D."},{"key":"e_1_3_2_2_89_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.34"},{"key":"e_1_3_2_2_90_1","doi-asserted-by":"publisher","DOI":"10.1145\/1410234.1410238"},{"key":"e_1_3_2_2_91_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11212-1_23"},{"key":"e_1_3_2_2_92_1","volume-title":"Proceedings of the 1999 IEEE Symposium on Security and Privacy. IEEE Press","author":"Warrender C."},{"key":"e_1_3_2_2_93_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978378"},{"key":"e_1_3_2_2_94_1","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523670"},{"key":"e_1_3_2_2_95_1","volume-title":"Retrieved","year":"2018"},{"key":"e_1_3_2_2_96_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315261"},{"key":"e_1_3_2_2_97_1","volume-title":"Systematic Mining of Associated Server Herds for Malware Campaign Discovery. In 2015 IEEE 35th International Conference on Distributed Computing Systems. IEEE Press","author":"Zhang J."},{"key":"e_1_3_2_2_98_1","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963435"},{"key":"e_1_3_2_2_99_1","doi-asserted-by":"publisher","DOI":"10.14778\/2856318.2856320"}],"event":{"name":"CCS '18: 2018 ACM SIGSAC Conference on Computer and Communications Security","location":"Toronto Canada","acronym":"CCS '18","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243734.3243829","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3243734.3243829","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3243734.3243829","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:08:19Z","timestamp":1750212499000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243734.3243829"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,10,15]]},"references-count":99,"alternative-id":["10.1145\/3243734.3243829","10.1145\/3243734"],"URL":"https:\/\/doi.org\/10.1145\/3243734.3243829","relation":{},"subject":[],"published":{"date-parts":[[2018,10,15]]},"assertion":[{"value":"2018-10-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}