{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,24]],"date-time":"2025-10-24T16:44:52Z","timestamp":1761324292409,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":23,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,12,6]],"date-time":"2019-12-06T00:00:00Z","timestamp":1575590400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Key R&D Program of Guangdong Province","award":["2019B010136001"],"award-info":[{"award-number":["2019B010136001"]}]},{"name":"National Natural Science Foundation of China","award":["61872110"],"award-info":[{"award-number":["61872110"]}]},{"name":"National Key R&D Program of China","award":["2016YFB0800803, 2018YFB1004005"],"award-info":[{"award-number":["2016YFB0800803, 2018YFB1004005"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,12,6]]},"DOI":"10.1145\/3386415.3387091","type":"proceedings-article","created":{"date-parts":[[2020,5,31]],"date-time":"2020-05-31T04:22:36Z","timestamp":1590898956000},"page":"1-5","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Out-of-Domain Characteristic Based Hierarchical Emulator Detection for Mobile"],"prefix":"10.1145","author":[{"given":"Jie","family":"Lin","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen Shenzhen China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chuanyi","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen Shenzhen China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Binxing","family":"Fang","sequence":"additional","affiliation":[{"name":"Department of Information and Electronic Engineering, Chinese Academy of Engineering, Beijing China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,5,30]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"MOBIS","author":"Decker Michael","year":"2005","unstructured":"Michael Decker , Rebecca Bulander , Gunther Schiefer , and Bemhard Kolmel . A System for Mobile and Wireless Advertising. In: Krogstie J., Kautz K., Allen D. (eds) Mobile Information Systems II . MOBIS 2005 . IFIP --- The International Federation for Information Processing, vol 191. Springer, Boston, MA. Michael Decker, Rebecca Bulander, Gunther Schiefer, and Bemhard Kolmel. A System for Mobile and Wireless Advertising. In: Krogstie J., Kautz K., Allen D. (eds) Mobile Information Systems II. MOBIS 2005. IFIP --- The International Federation for Information Processing, vol 191. Springer, Boston, MA."},{"volume-title":"Xuefeng Liu. Fraus: Launching Cost-efficient and Scalable Mobile Click Fraud Has Never Been So Easy. 2018 IEEE Conference on Communications and Network Security (CNS).","author":"Wen Elliott","key":"e_1_3_2_1_2_1","unstructured":"Elliott Wen , Jiannong Cao , Jiaxing Shen , Xuefeng Liu. Fraus: Launching Cost-efficient and Scalable Mobile Click Fraud Has Never Been So Easy. 2018 IEEE Conference on Communications and Network Security (CNS). Elliott Wen, Jiannong Cao, Jiaxing Shen, Xuefeng Liu. Fraus: Launching Cost-efficient and Scalable Mobile Click Fraud Has Never Been So Easy. 2018 IEEE Conference on Communications and Network Security (CNS)."},{"key":"e_1_3_2_1_3_1","first-page":"29","volume-title":"Proceedings of the 2005 IEEE Workshop on Information Assurance and Security","author":"Holz Thorsten","unstructured":"Thorsten Holz , Frederic Raynal . Detecting Honeypots and other suspicious environments . Proceedings of the 2005 IEEE Workshop on Information Assurance and Security , pp. 29 -- 36 . Thorsten Holz, Frederic Raynal. Detecting Honeypots and other suspicious environments. Proceedings of the 2005 IEEE Workshop on Information Assurance and Security, pp. 29--36."},{"key":"e_1_3_2_1_4_1","first-page":"7","volume-title":"Selected Project Reports","author":"Franklin Jason","year":"2005","unstructured":"Jason Franklin , Mark Luk , Jonathan M. McCune . Detecting the Presence of a VMM through Side-Effect Analysis . Selected Project Reports , Fall 2005 Advanced OS & Distributed Systems (15-712) , pp. 7 -- 21 . Jason Franklin, Mark Luk, Jonathan M. McCune. Detecting the Presence of a VMM through Side-Effect Analysis. Selected Project Reports, Fall 2005 Advanced OS & Distributed Systems (15-712), pp. 7--21."},{"key":"e_1_3_2_1_5_1","first-page":"1","volume-title":"Engin Kirda. Detecting System Emulators. ISC 2007","author":"Raffetseder Thomas","year":"2007","unstructured":"Thomas Raffetseder , Christopher Kruegel , and Engin Kirda. Detecting System Emulators. ISC 2007 , LNCS 4779, pp. 1 -- 18 , 2007 . Thomas Raffetseder, Christopher Kruegel, and Engin Kirda. Detecting System Emulators. ISC 2007, LNCS 4779, pp. 1--18, 2007."},{"key":"e_1_3_2_1_6_1","volume-title":"Symantec Advanced Threat Research","author":"Ferrie Peter","year":"2007","unstructured":"Peter Ferrie . Attacks on More Virtual Machine Emulators . Symantec Advanced Threat Research , 2007 . Peter Ferrie. Attacks on More Virtual Machine Emulators. Symantec Advanced Threat Research, 2007."},{"key":"e_1_3_2_1_7_1","unstructured":"Roberto Paleari Lorenzo Martignoni Giampaolo Fresi Roglia Danilo Bruschi. A fistful of red-pills: How to automatically generate procedures to detect CPU emulators. USENIX woot09.  Roberto Paleari Lorenzo Martignoni Giampaolo Fresi Roglia Danilo Bruschi. A fistful of red-pills: How to automatically generate procedures to detect CPU emulators. USENIX woot09."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"crossref","unstructured":"Boris Lau Vanja Svajcer. Measuring virtual machine detection in malware using DSD tracer J Comput Virol (2010) 6: 181--195.  Boris Lau Vanja Svajcer. Measuring virtual machine detection in malware using DSD tracer J Comput Virol (2010) 6:181--195.","DOI":"10.1007\/s11416-008-0096-y"},{"key":"e_1_3_2_1_9_1","first-page":"182","volume-title":"Brent Byunghoon Kang. Rethinking anti-emulation techniques for large-scale software deployment. computers & security 83","author":"Jang Daehee","year":"2019","unstructured":"Daehee Jang , Yunjong Jeong , Sungman Lee , Minjoon Park , Kuenhwan Kwak , Donguk Kim , Brent Byunghoon Kang. Rethinking anti-emulation techniques for large-scale software deployment. computers & security 83 ( 2019 ), pp. 182 -- 200 . Daehee Jang, Yunjong Jeong, Sungman Lee, Minjoon Park, Kuenhwan Kwak, Donguk Kim, Brent Byunghoon Kang. Rethinking anti-emulation techniques for large-scale software deployment. computers & security 83 (2019), pp. 182--200."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2592791.2592796"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590325"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664250"},{"key":"e_1_3_2_1_13_1","volume-title":"Architectural principles for virtual computer systems. Technical report AD-772 809","author":"Goldberg Robert P.","year":"1973","unstructured":"Robert P. Goldberg . Architectural principles for virtual computer systems. Technical report AD-772 809 , Harvard University , 1973 . Robert P. Goldberg. Architectural principles for virtual computer systems. Technical report AD-772 809, Harvard University, 1973."},{"key":"e_1_3_2_1_14_1","volume-title":"An x86 protected mode virtual machine monitor for the mit exokernel. Thesis (S.B. and M. Eng.)","author":"Coffing Charles L.","year":"1999","unstructured":"Charles L. Coffing . An x86 protected mode virtual machine monitor for the mit exokernel. Thesis (S.B. and M. Eng.) , Massachusetts Institute of Technology , 1999 . Charles L. Coffing. An x86 protected mode virtual machine monitor for the mit exokernel. Thesis (S.B. and M. Eng.), Massachusetts Institute of Technology, 1999."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1133373.1133375"},{"key":"e_1_3_2_1_16_1","first-page":"56","volume":"48","author":"Uhlig Rich","year":"2005","unstructured":"Rich Uhlig , Gil Neiger , Dion Rodgers , etc. Intel Virtualization Technology . Computer , IEEE Computer Society , 2005 , 48 -- 56 . Rich Uhlig, Gil Neiger, Dion Rodgers, etc. Intel Virtualization Technology. Computer, IEEE Computer Society, 2005, 48--56.","journal-title":"IEEE Computer Society"},{"volume-title":"Fast and Portable Dynamic Translator. USENIX Association FREENIX Track: 2005 USENIX Annual Technical Conference, 41--46","author":"Bellard Fabrice","key":"e_1_3_2_1_17_1","unstructured":"Fabrice Bellard . QEMU , a Fast and Portable Dynamic Translator. USENIX Association FREENIX Track: 2005 USENIX Annual Technical Conference, 41--46 . Fabrice Bellard. QEMU, a Fast and Portable Dynamic Translator. USENIX Association FREENIX Track: 2005 USENIX Annual Technical Conference, 41--46."},{"key":"e_1_3_2_1_18_1","unstructured":"Oracle VM VirtualBox User Manual Version 6.0.6.  Oracle VM VirtualBox User Manual Version 6.0.6."},{"key":"e_1_3_2_1_19_1","volume-title":"2007 Linux Symposium","volume":"2007","author":"Kivity Avi","unstructured":"Avi Kivity , Yaniv Kamay , Dor Laor , etc. kvm : the Linux Virtual Machine Monitor . 2007 Linux Symposium , Volume One, 2007 , 225--230. Avi Kivity, Yaniv Kamay, Dor Laor, etc. kvm: the Linux Virtual Machine Monitor. 2007 Linux Symposium, Volume One, 2007, 225--230."},{"key":"e_1_3_2_1_20_1","unstructured":"The Intel\u00ae 64 and IA-32 Architectures Software Developer's Manual.  The Intel\u00ae 64 and IA-32 Architectures Software Developer's Manual."},{"key":"e_1_3_2_1_21_1","unstructured":"AMD64 Architecture Programmer's Manual Volume 2: System Programming.  AMD64 Architecture Programmer's Manual Volume 2: System Programming."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4302-6131-5"},{"key":"e_1_3_2_1_23_1","volume-title":"COSC 530: Semester Project Dalvik Virtual Machine. DVM Project Repor. Innovative Computing Laboratory","author":"Nathawat Laxman","year":"2013","unstructured":"Laxman Nathawat , Yuping Lu , Chunyan Tang , Ye Sun . COSC 530: Semester Project Dalvik Virtual Machine. DVM Project Repor. Innovative Computing Laboratory , The University of Tennessee , Knoxville . December 3, 2013 . Laxman Nathawat, Yuping Lu, Chunyan Tang, Ye Sun. COSC 530: Semester Project Dalvik Virtual Machine. DVM Project Repor. Innovative Computing Laboratory, The University of Tennessee, Knoxville. December 3, 2013."}],"event":{"name":"ICITEE-2019: 2nd International Conference on Information Technologies and Electrical Engineering","acronym":"ICITEE-2019","location":"Zhuzhou Hunan China"},"container-title":["Proceedings of the 2nd International Conference on Information Technologies and Electrical Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3386415.3387091","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3386415.3387091","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:44:49Z","timestamp":1750203889000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3386415.3387091"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,12,6]]},"references-count":23,"alternative-id":["10.1145\/3386415.3387091","10.1145\/3386415"],"URL":"https:\/\/doi.org\/10.1145\/3386415.3387091","relation":{},"subject":[],"published":{"date-parts":[[2019,12,6]]},"assertion":[{"value":"2020-05-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}