{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T19:15:09Z","timestamp":1783192509507,"version":"3.54.6"},"publisher-location":"New York, NY, USA","reference-count":60,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,5,30]],"date-time":"2022-05-30T00:00:00Z","timestamp":1653868800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1700544"],"award-info":[{"award-number":["1700544"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,5,30]]},"DOI":"10.1145\/3488932.3517423","type":"proceedings-article","created":{"date-parts":[[2022,5,24]],"date-time":"2022-05-24T04:23:26Z","timestamp":1653366206000},"page":"873-887","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["Understanding and Detecting Remote Infection on Linux-based IoT Devices"],"prefix":"10.1145","author":[{"given":"Hongda","family":"Li","sequence":"first","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qiqing","family":"Huang","sequence":"additional","affiliation":[{"name":"University of Buffalo, SUNY, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fei","family":"Ding","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongxin","family":"Hu","sequence":"additional","affiliation":[{"name":"University of Buffalo, SUNY, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Long","family":"Cheng","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, SC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guofei","family":"Gu","sequence":"additional","affiliation":[{"name":"Texas A&M University, College Station, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ziming","family":"Zhao","sequence":"additional","affiliation":[{"name":"University of Buffalo, SUNY, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,5,30]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-04283-1_6"},{"key":"e_1_3_2_2_2_1","volume-title":"International Conference on Applications and Techniques in Information Security. Springer, 181--189","author":"Bin Abbas Muhamed Fauzi","year":"2017","unstructured":"Muhamed Fauzi Bin Abbas and Thambipillai Srikanthan . 2017 . Low-complexity signature-based Malware detection for IoT devices . In International Conference on Applications and Techniques in Information Security. Springer, 181--189 . Muhamed Fauzi Bin Abbas and Thambipillai Srikanthan. 2017. Low-complexity signature-based Malware detection for IoT devices. In International Conference on Applications and Techniques in Information Security. Springer, 181--189."},{"key":"e_1_3_2_2_3_1","unstructured":"Akamai. 2016. Akamai's State of the Internet \/ Security Q3 2016 Report. https:\/\/www.akamai.com\/us\/en\/multimedia\/documents\/state-of-theinternet\/q3--2016-state-of-the-internet-security-report.pdf.  Akamai. 2016. Akamai's State of the Internet \/ Security Q3 2016 Report. https:\/\/www.akamai.com\/us\/en\/multimedia\/documents\/state-of-theinternet\/q3--2016-state-of-the-internet-security-report.pdf."},{"key":"e_1_3_2_2_4_1","volume-title":"Amro Awad, and David Mohaisen.","author":"Alasmary Hisham","year":"2021","unstructured":"Hisham Alasmary , Afsah Anwar , Ahmed Abusnaina , Abdulrahman Alabduljabbar , Mohammed Abuhamad , An Wang , Dae Hun Nyang , Amro Awad, and David Mohaisen. 2021 . SHELLCORE : Automating Malicious IoT Software Detection Using Shell Commands Representation. IEEE Internet of Things Journal ( 2021). Hisham Alasmary, Afsah Anwar, Ahmed Abusnaina, Abdulrahman Alabduljabbar, Mohammed Abuhamad, An Wang, Dae Hun Nyang, Amro Awad, and David Mohaisen. 2021. SHELLCORE: Automating Malicious IoT Software Detection Using Shell Commands Representation. IEEE Internet of Things Journal (2021)."},{"key":"e_1_3_2_2_5_1","unstructured":"Omar Alrawi Charles Lever Kevin Valakuzhy Kevin Snow Fabian Monrose Manos Antonakakis etal 2021. The Circle Of Life: A Large-Scale Study of The IoT Malware Lifecycle. In 30th {USENIX} Security Symposium ({USENIX} Security 21).  Omar Alrawi Charles Lever Kevin Valakuzhy Kevin Snow Fabian Monrose Manos Antonakakis et al. 2021. The Circle Of Life: A Large-Scale Study of The IoT Malware Lifecycle. In 30th {USENIX} Security Symposium ({USENIX} Security 21)."},{"key":"e_1_3_2_2_6_1","unstructured":"Manos Antonakakis Tim April Michael Bailey Matt Bernhard Elie Bursztein Jaime Cochran Zakir Durumeric J Alex Halderman Luca Invernizzi Michalis Kallitsis etal 2017. Understanding the mirai botnet. In 26th {USENIX} Security Symposium ({USENIX} Security 17). 1093--1110.  Manos Antonakakis Tim April Michael Bailey Matt Bernhard Elie Bursztein Jaime Cochran Zakir Durumeric J Alex Halderman Luca Invernizzi Michalis Kallitsis et al. 2017. Understanding the mirai botnet. In 26th {USENIX} Security Symposium ({USENIX} Security 17). 1093--1110."},{"key":"e_1_3_2_2_7_1","unstructured":"Bashlex 2021. Bashlex - Python parser for bash. https:\/\/github.com\/idank\/bashlex.  Bashlex 2021. Bashlex - Python parser for bash. https:\/\/github.com\/idank\/bashlex."},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329847"},{"key":"e_1_3_2_2_9_1","unstructured":"Eric Brown. 2018. Linux Still Rules IoT Says Survey with Raspbian Leading the Way. https:\/\/circuitcellar.com\/cc-blog\/linux-still-rules-iot-says-survey-withraspbian-leading-the-way\/.  Eric Brown. 2018. Linux Still Rules IoT Says Survey with Raspbian Leading the Way. https:\/\/circuitcellar.com\/cc-blog\/linux-still-rules-iot-says-survey-withraspbian-leading-the-way\/."},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ejor.2016.07.012"},{"key":"e_1_3_2_2_11_1","unstructured":"Busybox man pages - user commands 2021. Busybox man pages - user commands. https:\/\/busybox.net\/downloads\/BusyBox.html.  Busybox man pages - user commands 2021. Busybox man pages - user commands. https:\/\/busybox.net\/downloads\/BusyBox.html."},{"key":"e_1_3_2_2_12_1","first-page":"1","article-title":"Towards Automated Dynamic Analysis for Linux-based Embedded Firmware","volume":"16","author":"Chen Daming D","year":"2016","unstructured":"Daming D Chen , Maverick Woo , David Brumley , and Manuel Egele . 2016 . Towards Automated Dynamic Analysis for Linux-based Embedded Firmware .. In NDSS , Vol. 16. 1 -- 16 . Daming D Chen, Maverick Woo, David Brumley, and Manuel Egele. 2016. Towards Automated Dynamic Analysis for Linux-based Embedded Firmware.. In NDSS, Vol. 16. 1--16.","journal-title":"NDSS"},{"key":"e_1_3_2_2_13_1","volume-title":"Iot malware: Comprehensive survey, analysis framework and case studies. BlackHat USA","author":"Costin Andrei","year":"2018","unstructured":"Andrei Costin and Jonas Zaddach . 2018. Iot malware: Comprehensive survey, analysis framework and case studies. BlackHat USA ( 2018 ). Andrei Costin and Jonas Zaddach. 2018. Iot malware: Comprehensive survey, analysis framework and case studies. BlackHat USA (2018)."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00054"},{"key":"e_1_3_2_2_15_1","volume-title":"Understanding Fileless Attacks on Linux-based IoT Devices with HoneyCloud. In 17th Annual International Conference on Mobile Systems, Applications, and Services. 482?493","author":"Dang Fan","year":"2019","unstructured":"Fan Dang , Zhenhua Li , Yunhao Liu , Ennan Zhai , Qi Alfred Chen , Tianyin Xu , Yan Chen , and Jingyu Yang . 2019 . Understanding Fileless Attacks on Linux-based IoT Devices with HoneyCloud. In 17th Annual International Conference on Mobile Systems, Applications, and Services. 482?493 . Fan Dang, Zhenhua Li, Yunhao Liu, Ennan Zhai, Qi Alfred Chen, Tianyin Xu, Yan Chen, and Jingyu Yang. 2019. Understanding Fileless Attacks on Linux-based IoT Devices with HoneyCloud. In 17th Annual International Conference on Mobile Systems, Applications, and Services. 482?493."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3384727"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.09.002"},{"key":"e_1_3_2_2_18_1","unstructured":"Dyn. 2016. Dyn analysis summary of Friday October 21 attack. https:\/\/dyn.com\/blog\/dyn-analysis-summary-of-friday-october-21-attack\/.  Dyn. 2016. Dyn analysis summary of Friday October 21 attack. https:\/\/dyn.com\/blog\/dyn-analysis-summary-of-friday-october-21-attack\/."},{"key":"e_1_3_2_2_19_1","volume-title":"Attacks on more virtual machine emulators. Symantec Technology Exchange 55","author":"Ferrie Peter","year":"2007","unstructured":"Peter Ferrie . 2007. Attacks on more virtual machine emulators. Symantec Technology Exchange 55 ( 2007 ). Peter Ferrie. 2007. Attacks on more virtual machine emulators. Symantec Technology Exchange 55 (2007)."},{"key":"e_1_3_2_2_20_1","unstructured":"firmwalker 2017. firmwalker. https:\/\/github.com\/danieluhricek\/LiSa.  firmwalker 2017. firmwalker. https:\/\/github.com\/danieluhricek\/LiSa."},{"key":"e_1_3_2_2_21_1","unstructured":"firmware-mod-kit 2017. firmware-mod-kit. https:\/\/github.com\/rampageX\/firmware-mod-kit.  firmware-mod-kit 2017. firmware-mod-kit. https:\/\/github.com\/rampageX\/firmware-mod-kit."},{"key":"e_1_3_2_2_22_1","unstructured":"Neil J. Gunther. 2010. UNIX Load Average Part 1: How It Works. https:\/\/www.helpsystems.com\/resources\/guides\/unix-load-average-part1-how-it-works.  Neil J. Gunther. 2010. UNIX Load Average Part 1: How It Works. https:\/\/www.helpsystems.com\/resources\/guides\/unix-load-average-part1-how-it-works."},{"key":"e_1_3_2_2_23_1","unstructured":"Michael Haag. 2013. Kaiten - Linux Backdoor. http:\/\/blog.michaelhaag.org\/2013\/12\/kaiten-linux-backdoor.html.  Michael Haag. 2013. Kaiten - Linux Backdoor. http:\/\/blog.michaelhaag.org\/2013\/12\/kaiten-linux-backdoor.html."},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196511"},{"key":"e_1_3_2_2_25_1","unstructured":"Here Document 2021. Here Document. https:\/\/en.wikipedia.org\/wiki\/Here_document.  Here Document 2021. Here Document. https:\/\/en.wikipedia.org\/wiki\/Here_document."},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"crossref","unstructured":"Stephen Herwig Katura Harvey George Hughey Richard Roberts and Dave Levin. 2019. Measurement and Analysis of Hajime a Peer-to-peer IoT Botnet.. In NDSS.  Stephen Herwig Katura Harvey George Hughey Richard Roberts and Dave Levin. 2019. Measurement and Analysis of Hajime a Peer-to-peer IoT Botnet.. In NDSS.","DOI":"10.14722\/ndss.2019.23488"},{"key":"e_1_3_2_2_27_1","volume-title":"Improving network intrusion detection classifiers by non-payload-based exploit-independent obfuscations: An adversarial approach. arXiv preprint arXiv:1805.02684","author":"Homoliak Ivan","year":"2018","unstructured":"Ivan Homoliak , Martin Teknos , Mart\u00edn Ochoa , Dominik Breitenbacher , Saeid Hosseini , and Petr Hanacek . 2018. Improving network intrusion detection classifiers by non-payload-based exploit-independent obfuscations: An adversarial approach. arXiv preprint arXiv:1805.02684 ( 2018 ). Ivan Homoliak, Martin Teknos, Mart\u00edn Ochoa, Dominik Breitenbacher, Saeid Hosseini, and Petr Hanacek. 2018. Improving network intrusion detection classifiers by non-payload-based exploit-independent obfuscations: An adversarial approach. arXiv preprint arXiv:1805.02684 (2018)."},{"key":"e_1_3_2_2_28_1","volume-title":"ACM International Workshop on Security and Privacy Analytics. 54--63","author":"Romeo \u00cd\u00f1igo \u00cdncer","year":"2018","unstructured":"\u00cd\u00f1igo \u00cdncer Romeo , Michael Theodorides , Sadia Afroz , and David Wagner . 2018 . Adversarially robust malware detection using monotonic classification . In ACM International Workshop on Security and Privacy Analytics. 54--63 . \u00cd\u00f1igo \u00cdncer Romeo, Michael Theodorides, Sadia Afroz, and David Wagner. 2018. Adversarially robust malware detection using monotonic classification. In ACM International Workshop on Security and Privacy Analytics. 54--63."},{"key":"e_1_3_2_2_29_1","unstructured":"Rhena Inocencio. 2014. BASHLITE Affects Devices Running on BusyBox. http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/bashlite-affectsdevices-running-on-busybox\/.  Rhena Inocencio. 2014. BASHLITE Affects Devices Running on BusyBox. http:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/bashlite-affectsdevices-running-on-busybox\/."},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029815"},{"key":"e_1_3_2_2_31_1","unstructured":"Libelium. 2014. Top 50 Internet of Things Application. http:\/\/www.libelium.com\/resources\/ top_50_iot_sensor_applications_ranking\/.  Libelium. 2014. Top 50 Internet of Things Application. http:\/\/www.libelium.com\/resources\/ top_50_iot_sensor_applications_ranking\/."},{"key":"e_1_3_2_2_32_1","unstructured":"LightSensor-daemon 2021. LightSensor-daemon for OpenWrt. http:\/\/www.aboehler.at\/hg\/lightSensor-daemon.  LightSensor-daemon 2021. LightSensor-daemon for OpenWrt. http:\/\/www.aboehler.at\/hg\/lightSensor-daemon."},{"key":"e_1_3_2_2_33_1","unstructured":"David Lindner. 2018. OWASP Internet Of Things Top 10 2018 Released. https:\/\/nvisium.com\/blog\/2019\/01\/02\/internet-of-things-owasp-top-10- 2018-released.html.  David Lindner. 2018. OWASP Internet Of Things Top 10 2018 Released. https:\/\/nvisium.com\/blog\/2019\/01\/02\/internet-of-things-owasp-top-10- 2018-released.html."},{"key":"e_1_3_2_2_34_1","unstructured":"Linux man pages - user commands 2021. Linux man pages - user commands. https:\/\/linux.die.net\/man\/1\/.  Linux man pages - user commands 2021. Linux man pages - user commands. https:\/\/linux.die.net\/man\/1\/."},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.48"},{"key":"e_1_3_2_2_36_1","volume-title":"Gordon Ross, and Gianluca Stringhini.","author":"Mariconti Enrico","year":"2017","unstructured":"Enrico Mariconti , Lucky Onwuzurike , Panagiotis Andriotis , Emiliano De Cristofaro , Gordon Ross, and Gianluca Stringhini. 2017 . MAMADROID : Detecting Android Malware by Building Markov Chains of Behavioral Models . (2017). Enrico Mariconti, Lucky Onwuzurike, Panagiotis Andriotis, Emiliano De Cristofaro, Gordon Ross, and Gianluca Stringhini. 2017. MAMADROID: Detecting Android Malware by Building Markov Chains of Behavioral Models. (2017)."},{"key":"e_1_3_2_2_37_1","volume-title":"New IoT-malware grew three-fold in H1","author":"Mikhail Kuzin Vladimir Kuskov","year":"2018","unstructured":"Vladimir Kuskov Mikhail Kuzin , Yaroslav Shmelev . 2018. New IoT-malware grew three-fold in H1 2018 . https:\/\/securelist.com\/new-trends-in-the-world-of-iotthreats\/87991\/. Vladimir Kuskov Mikhail Kuzin, Yaroslav Shmelev. 2018. New IoT-malware grew three-fold in H1 2018. https:\/\/securelist.com\/new-trends-in-the-world-of-iotthreats\/87991\/."},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-40667-1_7"},{"key":"e_1_3_2_2_39_1","unstructured":"Bradley Austin Miller. 2015. Scalable platform for malicious content detection integrating machine learning and manual review. Ph. D. Dissertation. UC Berkeley.  Bradley Austin Miller. 2015. Scalable platform for malicious content detection integrating machine learning and manual review. Ph. D. Dissertation. UC Berkeley."},{"key":"e_1_3_2_2_40_1","unstructured":"Mirai Source code 2016. Leaked Mirai Source Code for Research\/IoC Development Purposes. https:\/\/github.com\/jgamblin\/Mirai-Source-Code.  Mirai Source code 2016. Leaked Mirai Source Code for Research\/IoC Development Purposes. https:\/\/github.com\/jgamblin\/Mirai-Source-Code."},{"key":"e_1_3_2_2_41_1","unstructured":"MJPGStreamer 2021. MJPG Streamer for OpenWrt. https:\/\/openwrt.org\/packages\/pkgdata\/mjpg-streamer.  MJPGStreamer 2021. MJPG Streamer for OpenWrt. https:\/\/openwrt.org\/packages\/pkgdata\/mjpg-streamer."},{"key":"e_1_3_2_2_42_1","unstructured":"Motion 2021. The Motion program. https:\/\/motion-project.github.io\/index.html.  Motion 2021. The Motion program. https:\/\/motion-project.github.io\/index.html."},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2019.00080"},{"key":"e_1_3_2_2_44_1","unstructured":"OpenWrt Project 2021. OpenWrt Porject. https:\/\/openwrt.org\/.  OpenWrt Project 2021. OpenWrt Porject. https:\/\/openwrt.org\/."},{"key":"e_1_3_2_2_45_1","volume-title":"9th USENIX Workshop on Offensive Technologies (WOOT'15)","author":"Pa Pa Yin Minn","year":"2015","unstructured":"Yin Minn Pa Pa , Shogo Suzuki , Katsunari Yoshioka , Tsutomu Matsumoto , Takahiro Kasama , and Christian Rossow . 2015 . IoTPOT: analysing the rise of IoT compromises . In 9th USENIX Workshop on Offensive Technologies (WOOT'15) . Yin Minn Pa Pa, Shogo Suzuki, Katsunari Yoshioka, Tsutomu Matsumoto, Takahiro Kasama, and Christian Rossow. 2015. IoTPOT: analysing the rise of IoT compromises. In 9th USENIX Workshop on Offensive Technologies (WOOT'15)."},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.5555\/2396231.2396233"},{"key":"e_1_3_2_2_47_1","volume-title":"OS 2021. Raspberry Pi OS (previously called Raspbian). https:\/\/www.raspberrypi.org\/downloads\/raspberry-pi-os\/.","author":"Raspbian","unstructured":"Raspbian OS 2021. Raspberry Pi OS (previously called Raspbian). https:\/\/www.raspberrypi.org\/downloads\/raspberry-pi-os\/. Raspbian OS 2021. Raspberry Pi OS (previously called Raspbian). https:\/\/www.raspberrypi.org\/downloads\/raspberry-pi-os\/."},{"key":"e_1_3_2_2_48_1","volume-title":"rocket-fast system for log processing","author":"Rsyslog","year":"2021","unstructured":"Rsyslog : rocket-fast system for log processing 2021 . Rsyslog . https:\/\/en.wikipedia.org\/wiki\/Rsyslog. Rsyslog: rocket-fast system for log processing 2021. Rsyslog. https:\/\/en.wikipedia.org\/wiki\/Rsyslog."},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04342-0_7"},{"key":"e_1_3_2_2_50_1","unstructured":"Miroslav Stampar. 2021. IPsum Threat Intelligence. https:\/\/github.com\/stamparm\/ipsum.  Miroslav Stampar. 2021. IPsum Threat Intelligence. https:\/\/github.com\/stamparm\/ipsum."},{"key":"e_1_3_2_2_51_1","unstructured":"Miroslav Stampar. 2021. Maltrail Malicious Traffic Detection System. https:\/\/github.com\/stamparm\/maltrail.  Miroslav Stampar. 2021. Maltrail Malicious Traffic Detection System. https:\/\/github.com\/stamparm\/maltrail."},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2018.10315"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2420"},{"key":"e_1_3_2_2_54_1","unstructured":"The networkx package 2021. NetworkX ? Network Analysis Package in Python. https:\/\/networkx.org\/.  The networkx package 2021. NetworkX ? Network Analysis Package in Python. https:\/\/networkx.org\/."},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_26"},{"key":"e_1_3_2_2_56_1","unstructured":"2021. Virustotal-free online virus malware and url scanner. https:\/\/www.virustotal.com\/en. (2021).  2021. Virustotal-free online virus malware and url scanner. https:\/\/www.virustotal.com\/en. (2021)."},{"key":"e_1_3_2_2_57_1","unstructured":"VirusShare.com 2021. VirusShare.com. https:\/\/virusshare.com\/.  VirusShare.com 2021. VirusShare.com. https:\/\/virusshare.com\/."},{"key":"e_1_3_2_2_58_1","unstructured":"Wifatch source repository 2015. Linux.Wifatch. https:\/\/gitlab.com\/rav7teif\/linux.wifatch.  Wifatch source repository 2015. Linux.Wifatch. https:\/\/gitlab.com\/rav7teif\/linux.wifatch."},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660359"},{"key":"e_1_3_2_2_60_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Zhu Shuofei","year":"2020","unstructured":"Shuofei Zhu , Jianjun Shi , Limin Yang , Boqin Qin , Ziyi Zhang , Linhai Song , and Gang Wang . 2020 . Measuring and modeling the label dynamics of online antimalware engines . In 29th USENIX Security Symposium (USENIX Security 20) . 2361--2378. Shuofei Zhu, Jianjun Shi, Limin Yang, Boqin Qin, Ziyi Zhang, Linhai Song, and Gang Wang. 2020. Measuring and modeling the label dynamics of online antimalware engines. In 29th USENIX Security Symposium (USENIX Security 20). 2361--2378."}],"event":{"name":"ASIA CCS '22: ACM Asia Conference on Computer and Communications Security","location":"Nagasaki Japan","acronym":"ASIA CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3488932.3517423","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/abs\/10.1145\/3488932.3517423","content-type":"text\/html","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3488932.3517423","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3488932.3517423","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T19:31:27Z","timestamp":1750188687000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3488932.3517423"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5,30]]},"references-count":60,"alternative-id":["10.1145\/3488932.3517423","10.1145\/3488932"],"URL":"https:\/\/doi.org\/10.1145\/3488932.3517423","relation":{},"subject":[],"published":{"date-parts":[[2022,5,30]]},"assertion":[{"value":"2022-05-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}