{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,25]],"date-time":"2026-10-25T17:34:57Z","timestamp":1792949697142,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":62,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,5]],"date-time":"2020-10-05T00:00:00Z","timestamp":1601856000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"U. S. National Institute of Food and Agriculture","award":["2017-70016-26051"],"award-info":[{"award-number":["2017-70016-26051"]}]},{"name":"National Science Foundation","award":["1846291, 1700499, 2031002, 1642143, and 1759856"],"award-info":[{"award-number":["1846291, 1700499, 2031002, 1642143, and 1759856"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,5]]},"DOI":"10.1145\/3320269.3384727","type":"proceedings-article","created":{"date-parts":[[2020,10,5]],"date-time":"2020-10-05T16:33:23Z","timestamp":1601915603000},"page":"33-46","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":57,"title":["DeepPower: Non-intrusive and Deep Learning-based Detection of IoT Malware Using Power Side Channels"],"prefix":"10.1145","author":[{"given":"Fei","family":"Ding","sequence":"first","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongda","family":"Li","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Feng","family":"Luo","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongxin","family":"Hu","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Long","family":"Cheng","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hai","family":"Xiao","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rong","family":"Ge","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,10,5]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"https:\/\/0x00sec.org\/t\/iot-malware-droppers-mirai-and-hajime\/1966","author":"Mirai T Malware Droppers","year":"2017"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-5421-1_15"},{"key":"e_1_3_2_1_3_1","volume-title":"Turning internet of things (iot) into internet of vulnerabilities (iov): Iot botnets. arXiv preprint arXiv:1702.03681","author":"Angrishi Kishore","year":"2017"},{"key":"e_1_3_2_1_4_1","first-page":"1093","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Antonakakis Manos","year":"2017"},{"key":"e_1_3_2_1_5_1","volume-title":"https:\/\/www.belkin.com\/us\/p\/P-F7C029\/","author":"Smart Plug Wemo Insight","year":"2019"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2016.7472621"},{"key":"e_1_3_2_1_7_1","volume-title":"https:\/\/research.checkpoint.com\/good-zero-day-skiddie\/","author":"Botnet Recruitment Huawei Home","year":"2017"},{"key":"e_1_3_2_1_8_1","volume-title":"The Full Investigation. https:\/\/research.checkpoint.com\/iotroop-botnet-full-investigation\/","author":"Botnet IoTroop","year":"2017"},{"key":"e_1_3_2_1_9_1","volume-title":"HealthTech","author":"Clark Shane S","year":"2013"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00054"},{"key":"e_1_3_2_1_11_1","volume-title":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=cve-2012--1823","year":"2012"},{"key":"e_1_3_2_1_12_1","volume-title":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2014--6271","year":"2014"},{"key":"e_1_3_2_1_13_1","volume-title":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2014--9583","year":"2014"},{"key":"e_1_3_2_1_14_1","volume-title":"http:\/\/www.devttys0.com\/2014\/05\/hacking-the-d-link-dsp-w215-smart-plug\/","author":"Smart Plug Hacking","year":"2014"},{"key":"e_1_3_2_1_15_1","volume-title":"leave my Internet of Things alone! http:\/\/www.deependresearch.org\/2013\/12\/hey-zollard-leave-my-internet-of-things.html","author":"Zollard Hey","year":"2013"},{"key":"e_1_3_2_1_16_1","volume-title":"Iot malware. https:\/\/github.com\/ifding\/iot-malware","author":"Ding Fei","year":"2017"},{"key":"e_1_3_2_1_17_1","volume-title":"Machine learning ddos detection for consumer internet of things devices. arXiv preprint arXiv:1804.04159","author":"Doshi Rohan","year":"2018"},{"key":"e_1_3_2_1_18_1","volume-title":"https:\/\/github.com\/EliasKotlyar\/Xiaomi-Dafang-Hacks","year":"2019"},{"key":"e_1_3_2_1_19_1","first-page":"1","volume-title":"USENIX Security Symposium","volume":"7","author":"Gu Guofei","year":"2007"},{"key":"e_1_3_2_1_20_1","unstructured":"Michael Haag. Kaiten - Linux Backdoor. http:\/\/blog.michaelhaag.org\/2013\/12\/kaiten-linux-backdoor.html 2013.  Michael Haag. Kaiten - Linux Backdoor. http:\/\/blog.michaelhaag.org\/2013\/12\/kaiten-linux-backdoor.html 2013."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134081"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_1_23_1","volume-title":"Breaking Down Mirai: An IoT DDoS Botnet Analysis. https:\/\/www.incapsula.com\/blog\/malware-analysis-mirai-ddos-botnet.html","author":"Herzberg Ben","year":"2016"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCP.2016.7737142"},{"key":"e_1_3_2_1_26_1","unstructured":"Rhena Inocencio. BASHLITE Affects Devices Running on BusyBox. http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/bashlite-affects-devices-running-on-busybox\/ 2014.  Rhena Inocencio. BASHLITE Affects Devices Running on BusyBox. http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/bashlite-affects-devices-running-on-busybox\/ 2014."},{"key":"e_1_3_2_1_27_1","volume-title":"https:\/\/pierrekim.github.io\/blog\/2017-03-08-camera-goahead-0day.html","author":"Multiple","year":"2017"},{"key":"e_1_3_2_1_28_1","volume-title":"Heads of the Hydra. Malware for Network Devices. https:\/\/securelist.com\/heads-of-the-hydra-malware-for-network-devices\/36396\/","author":"Janus Marta","year":"2011"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC.2017.7868464"},{"key":"e_1_3_2_1_30_1","volume-title":"BASHLITE Malware leverages ShellShock Bug to Hijack Devices Running BusyBox. https:\/\/thehackernews.com\/2014\/11\/bashlite-malware-leverages-shellshock.html","author":"Khandelwal Swati","year":"2014"},{"key":"e_1_3_2_1_31_1","volume-title":"Deep learning. nature, 521(7553):436","author":"LeCun Yann","year":"2015"},{"key":"e_1_3_2_1_32_1","volume-title":"TheMoon - A P2P botnet targeting Home Routers. https:\/\/blog.fortinet.com\/2016\/10\/20\/themoon-a-p2p-botnet-targeting-home-routers","author":"Liu Bing","year":"2016"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978299"},{"key":"e_1_3_2_1_34_1","volume-title":"Effective approaches to attention-based neural machine translation. arXiv preprint arXiv:1508.04025","author":"Luong Minh-Thang","year":"2015"},{"key":"e_1_3_2_1_35_1","unstructured":"Michal Malik and Marc-Etienne M.L\u00e9veill\u00e9. Meet Remaiten - a Linux bot on steroids targeting routers and potentially other IoT devices. https:\/\/www.welivesecurity.com\/2016\/03\/30\/meet-remaiten-a-linux-bot-on-steroids-targeting-routers-and-potentially-other-iot-devices\/ 2016.  Michal Malik and Marc-Etienne M.L\u00e9veill\u00e9. Meet Remaiten - a Linux bot on steroids targeting routers and potentially other IoT devices. https:\/\/www.welivesecurity.com\/2016\/03\/30\/meet-remaiten-a-linux-bot-on-steroids-targeting-routers-and-potentially-other-iot-devices\/ 2016."},{"key":"e_1_3_2_1_36_1","volume-title":"http:\/\/blog.malwaremustdie.org\/2015\/07\/mmd-0037--2015-bad-shellshock.html","author":"ad Shellshock A","year":"2015"},{"key":"e_1_3_2_1_37_1","volume-title":"http:\/\/blog.malwaremustdie.org\/2016\/02\/mmd-0052--2016-skidddos-elf-distribution.html","author":"Botnet Overview","year":"2016"},{"key":"e_1_3_2_1_38_1","volume-title":"http:\/\/blog.malwaremustdie.org\/2016\/10\/mmd-0059--2016-linuxirctelnet-new-ddos.html","author":"Telnet","year":"2016"},{"key":"e_1_3_2_1_39_1","volume-title":"http:\/\/blog.malwaremustdie.org\/2016\/10\/mmd-0058--2016-elf-linuxnyadrop.html","author":"NyaDrop","year":"2017"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/HPCSim.2014.6903732"},{"key":"e_1_3_2_1_41_1","volume-title":"https:\/\/github.com\/jgamblin\/Mirai-Source-Code","author":"Leaked","year":"2016"},{"key":"e_1_3_2_1_42_1","volume-title":"Kitsune: An ensemble of autoencoders for online network intrusion detection. arXiv preprint arXiv:1802.09089","author":"Mirsky Yisroel","year":"2018"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3079856.3080223"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2019.00080"},{"key":"e_1_3_2_1_45_1","volume-title":"https:\/\/openwrt.org\/docs\/guide-user\/installation\/sysupgrade.cli","author":"Upgrading","year":"2019"},{"key":"e_1_3_2_1_46_1","volume-title":"9th USENIX Workshop on Offensive Technologies (WOOT 15)","author":"Pa Pa Yin Minn","year":"2015"},{"key":"e_1_3_2_1_47_1","unstructured":"\u201cbrickerbot\u201d results in pdos attack.  \u201cbrickerbot\u201d results in pdos attack."},{"key":"e_1_3_2_1_48_1","volume-title":"https:\/\/blog.radware.com\/security\/2017\/10\/iot_reaper-botnet\/","author":"Reaper Why","year":"2017"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2012.05.001"},{"key":"e_1_3_2_1_50_1","volume-title":"Sanjiva Prasad, Daniele Sgandurra, Yaokai Feng, and Kouichi Sakurai. Lightweight classification of iot malware based on image recognition. arXiv preprint arXiv:1802.03714","author":"Su Jiawei","year":"2018"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2420"},{"key":"e_1_3_2_1_52_1","volume-title":"http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/new-linux-malware-exploits-cgi-vulnerability\/","author":"Malware New Linux","year":"2017"},{"key":"e_1_3_2_1_53_1","unstructured":"Persirai: New Internet of Things (IoT) Botnet Targets IP Cameras. http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/persirai-new-internet-things-iot-botnet-targets-ip-cameras\/ 2017.  Persirai: New Internet of Things (IoT) Botnet Targets IP Cameras. http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/persirai-new-internet-things-iot-botnet-targets-ip-cameras\/ 2017."},{"key":"e_1_3_2_1_54_1","volume-title":"http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/reigning-king-ip-camera-botnets-challengers\/","author":"Camera Botnets The Reigning","year":"2017"},{"key":"e_1_3_2_1_55_1","volume-title":"https:\/\/securelist.com\/hajime-the-mysterious-evolving-botnet\/78160\/","author":"van der Wiel Jornt","year":"2017"},{"key":"e_1_3_2_1_56_1","volume-title":"https:\/\/virusshare.com\/","author":"Caring Because Sharing","year":"2019"},{"key":"e_1_3_2_1_57_1","volume-title":"\u201cbackdoor","author":"Whittaker Zack","year":"2016"},{"key":"e_1_3_2_1_58_1","volume-title":"https:\/\/gitlab.com\/rav7teif\/linux.wifatch","author":"Wifatch","year":"2015"},{"key":"e_1_3_2_1_59_1","volume-title":"https:\/\/researchcenter.paloaltonetworks.com\/2017\/04\/unit42-new-iotlinux-malware-targets-dvrs-forms-botnet\/","author":"Xiao Claud","year":"2017"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1631\/FITEE.1601540"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/2834050.2834095"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098052"}],"event":{"name":"ASIA CCS '20: The 15th ACM Asia Conference on Computer and Communications Security","location":"Taipei Taiwan","acronym":"ASIA CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 15th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3320269.3384727","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3320269.3384727","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3320269.3384727","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:41:27Z","timestamp":1750200087000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3320269.3384727"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,5]]},"references-count":62,"alternative-id":["10.1145\/3320269.3384727","10.1145\/3320269"],"URL":"https:\/\/doi.org\/10.1145\/3320269.3384727","relation":{},"subject":[],"published":{"date-parts":[[2020,10,5]]},"assertion":[{"value":"2020-10-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}