{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,13]],"date-time":"2026-03-13T04:14:36Z","timestamp":1773375276359,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":9,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Natural Science Foundation of China","award":["61972224"],"award-info":[{"award-number":["61972224"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3420014","type":"proceedings-article","created":{"date-parts":[[2021,3,4]],"date-time":"2021-03-04T16:22:09Z","timestamp":1614874929000},"page":"2089-2091","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["LPET -- Mining MS-Windows Software Privilege Escalation Vulnerabilities by Monitoring Interactive Behavior"],"prefix":"10.1145","author":[{"given":"Can","family":"Huang","sequence":"first","affiliation":[{"name":"Peking University, Beijing, China"}]},{"given":"Xinhui","family":"Han","sequence":"additional","affiliation":[{"name":"Peking University, Beijing, China"}]},{"given":"Guorui","family":"Yu","sequence":"additional","affiliation":[{"name":"Peking University, Beijing, China"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2016. PowerUp. [Online]. https:\/\/github.com\/PowerShellEmpire\/PowerTools\/tree\/master\/PowerUp.  2016. PowerUp. [Online]. https:\/\/github.com\/PowerShellEmpire\/PowerTools\/tree\/master\/PowerUp."},{"key":"e_1_3_2_1_2_1","unstructured":"2020. PrivescCheck. [Online]. https:\/\/github.com\/itm4n\/PrivescCheck.  2020. PrivescCheck. [Online]. https:\/\/github.com\/itm4n\/PrivescCheck."},{"key":"e_1_3_2_1_3_1","unstructured":"MITRE ATT&CK. 2020. Privilege Escalation. [Online]. https:\/\/attack.mitre.org\/TA0004\/.  MITRE ATT&CK. 2020. Privilege Escalation. [Online]. https:\/\/attack.mitre.org\/TA0004\/."},{"key":"e_1_3_2_1_4_1","first-page":"418","article-title":"Method and system for detecting privilege escalation vulnerabilities in source code","volume":"7","author":"Berg Ryan James","year":"2008","journal-title":"US Patent"},{"key":"e_1_3_2_1_5_1","volume-title":"Software Vulnerability Mining Based on the Human-Computer Coordination. In International Conference on Intelligent Human Systems Integration. Springer, 532--538","author":"Liu Jie","year":"2020"},{"key":"e_1_3_2_1_6_1","first-page":"313","article-title":"Multilevel metamodel for heuristic search of vulnerabilities in the software source code","volume":"9","author":"Markov AS","year":"2016","journal-title":"International Journal of Control Theory and Applications"},{"key":"e_1_3_2_1_7_1","unstructured":"Microsoft. 2018. Event Tracing. [Online]. https:\/\/docs.microsoft.com\/en-us\/windows\/desktop\/ETW\/event-tracing-portal.  Microsoft. 2018. Event Tracing. [Online]. https:\/\/docs.microsoft.com\/en-us\/windows\/desktop\/ETW\/event-tracing-portal."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.37"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/VLSI-DAT.2018.8373240"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3420014","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3420014","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:01:32Z","timestamp":1750197692000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3420014"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":9,"alternative-id":["10.1145\/3372297.3420014","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3420014","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}