{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,8]],"date-time":"2026-09-08T06:16:02Z","timestamp":1788848162766,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,5,13]],"date-time":"2024-05-13T00:00:00Z","timestamp":1715558400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,5,13]]},"DOI":"10.1145\/3589334.3645540","type":"proceedings-article","created":{"date-parts":[[2024,5,8]],"date-time":"2024-05-08T07:08:13Z","timestamp":1715152093000},"page":"1768-1778","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Detecting and Understanding Self-Deleting JavaScript Code"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-1758-5461","authenticated-orcid":false,"given":"Xinzhe","family":"Wang","sequence":"first","affiliation":[{"name":"The Chinese University of Hong Kong, Hong Kong SAR, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-7898-6895","authenticated-orcid":false,"given":"Zeyang","family":"Zhuang","sequence":"additional","affiliation":[{"name":"The Chinese University of Hong Kong, Hong Kong SAR, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8260-3304","authenticated-orcid":false,"given":"Wei","family":"Meng","sequence":"additional","affiliation":[{"name":"The Chinese University of Hong Kong, Hong Kong SAR, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6313-6288","authenticated-orcid":false,"given":"James","family":"Cheng","sequence":"additional","affiliation":[{"name":"The Chinese University of Hong Kong, Hong Kong SAR, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,5,13]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.07.001"},{"key":"e_1_3_2_2_2_1","volume-title":"Proceedings of the 2018 Annual Network and Distributed System Security Symposium (NDSS)","author":"Lee Bo Li Kyu Hyung","year":"2018","unstructured":"Kyu Hyung Lee Bo Li, Phani Vadrevu and Roberto Perdisci. 2018. JSgraph: Enabling Reconstruction of Web Attacks via Efficient Tracking of Live In-Browser JavaScript Executions. In Proceedings of the 2018 Annual Network and Distributed System Security Symposium (NDSS). San Diego, CA, USA."},{"key":"e_1_3_2_2_3_1","volume-title":"Proceedings of the 20th USENIX Security Symposium (Security)","author":"Curtsinger Charlie","year":"2011","unstructured":"Charlie Curtsinger, Benjamin Livshits, Benjamin Zorn, and Christian Seifert. 2011. ZOZZLE: Fast and Precise In-Browser JavaScript Malware Detection. In Proceedings of the 20th USENIX Security Symposium (Security). San Francisco, CA, USA."},{"key":"e_1_3_2_2_4_1","unstructured":"Cybereason Nocturnus. 2019. Dropping Anchor: From a TrickBot Infection to the Discovery of the Anchor Malware. https:\/\/www.cybereason.com\/blog\/research\/dropping-anchor-from-a-trickbot-infection-to-the-discovery-of-the-anchor-malware."},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560604"},{"key":"e_1_3_2_2_6_1","volume-title":"Detecting and Classifying Self-Deleting Windows Malware Using Prefetch Files. In 2022 IEEE 12th Annual Computing and Communication Workshop and Conference (CCWC). IEEE, 0745--0751","author":"Duby Adam","year":"2022","unstructured":"Adam Duby, Teryl Taylor, Gedare Bloom, and Yanyan Zhuang. 2022. Detecting and Classifying Self-Deleting Windows Malware Using Prefetch Files. In 2022 IEEE 12th Annual Computing and Communication Workshop and Conference (CCWC). IEEE, 0745--0751."},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101764"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3345656"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359813"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93411-2_14"},{"key":"e_1_3_2_2_11_1","unstructured":"Xunchao Hu Yao Cheng Yue Duan Andrew Henderson and Heng Yin. 2017. JSForce: A Forced Execution Engine for Malicious JavaScript Detection. In SecureComm."},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313521"},{"key":"e_1_3_2_2_13_1","unstructured":"Microsoft Security Intelligence. 2017. TrojanDownloader:Win32\/Nemim.gen!A. https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=TrojanDownloader:Win32\/Nemim.gen!A."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355599"},{"key":"e_1_3_2_2_15_1","volume-title":"Proceedings of the 8th ACM Workshop on Artificial Intelligence and Security (AISec '15)","author":"Kantchelian Alex","unstructured":"Alex Kantchelian, Michael Carl Tschantz, Sadia Afroz, Brad Miller, Vaishaal Shankar, Rekha Bachwani, Anthony D. Joseph, and J. D. Tygar. [n.,d.]. Better Malware Ground Truth: Techniques for Weighting Anti-Virus Vendor Labels. In Proceedings of the 8th ACM Workshop on Artificial Intelligence and Security (AISec '15). 45--56."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"crossref","unstructured":"Amin Kharraz William Robertson Davide Balzarotti Leyla Bilge and Engin Kirda. 2015. Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks. In Detection of Intrusions and Malware and Vulnerability Assessment. 3--24.","DOI":"10.1007\/978-3-319-20550-2_1"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052674"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3190978"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23186"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23414"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23386"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382267"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2009.5403020"},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23094"},{"key":"e_1_3_2_2_25_1","volume-title":"Proceedings of the 30th USENIX Security Symposium (Security). Virtual Event.","author":"Musch Marius","year":"2021","unstructured":"Marius Musch and Martin Johns. 2021. U Can't Debug This: Detecting JavaScript Anti-Debugging Techniques in the Wild. In Proceedings of the 30th USENIX Security Symposium (Security). Virtual Event."},{"key":"e_1_3_2_2_26_1","unstructured":"Lukasz Olejnik. 2017. Stealing sensitive browser data with the W3C Ambient Light Sensor API. https:\/\/blog.lukaszolejnik.com\/stealing-sensitive-browser-data-with-the-w3c-ambient-light-sensor-api\/."},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"crossref","unstructured":"\u0141ukasz Olejnik Gunes Acar Claude Castelluccia and Claudia Diaz. 2016. The Leaking Battery. In Data Privacy Management and Security Assurance. 254--263.","DOI":"10.1007\/978-3-319-29883-2_18"},{"key":"e_1_3_2_2_28_1","unstructured":"H. Petrak. 2021. Javascript Malware Collection. https:\/\/github.com\/HynekPetrak\/javascript-malware-collection."},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22655-7_4"},{"key":"e_1_3_2_2_30_1","volume-title":"Proceedings of the 31st USENIX Security Symposium (Security)","author":"Senol Asuman","year":"2022","unstructured":"Asuman Senol, Gunes Acar, Mathias Humbert, and Frederik Zuiderveen Borgesius. 2022. Leaky Forms: A Study of Email and Password Exfiltration Before Form Submission. In Proceedings of the 31st USENIX Security Symposium (Security). Boston, MA, USA."},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313752"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24202"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24028"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417267"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380203"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","unstructured":"Xinzhe Wang Zeyang Zhuang Wei Meng and James Cheng. 2024. JSRay: Self-Deleting JavaScript Code Monitor. https:\/\/doi.org\/10.5281\/zenodo.10676966","DOI":"10.5281\/zenodo.10676966"},{"key":"e_1_3_2_2_37_1","unstructured":"WHATWG. 2022. HTML Standard. https:\/\/html.spec.whatwg.org\/."},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435364"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468577"}],"event":{"name":"WWW '24: The ACM Web Conference 2024","location":"Singapore Singapore","acronym":"WWW '24","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM Web Conference 2024"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589334.3645540","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3589334.3645540","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T00:28:57Z","timestamp":1755822537000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589334.3645540"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,13]]},"references-count":39,"alternative-id":["10.1145\/3589334.3645540","10.1145\/3589334"],"URL":"https:\/\/doi.org\/10.1145\/3589334.3645540","relation":{},"subject":[],"published":{"date-parts":[[2024,5,13]]},"assertion":[{"value":"2024-05-13","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}