{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:12:48Z","timestamp":1750219968802,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":24,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T00:00:00Z","timestamp":1693267200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,8,29]]},"DOI":"10.1145\/3600160.3605035","type":"proceedings-article","created":{"date-parts":[[2023,8,9]],"date-time":"2023-08-09T22:54:41Z","timestamp":1691621681000},"page":"1-8","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["JITScanner: Just-in-Time Executable Page Check in the Linux Operating System"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-0552-7894","authenticated-orcid":false,"given":"Pasquale","family":"Caporaso","sequence":"first","affiliation":[{"name":"University of Rome \u201cTor Vergata\u201d, Italy and CNIT Natl. Network Assessment and Monitoring Lab, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7277-7423","authenticated-orcid":false,"given":"Giuseppe","family":"Bianchi","sequence":"additional","affiliation":[{"name":"University of Rome \u201cTor Vergata\u201d, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5616-7980","authenticated-orcid":false,"given":"Francesco","family":"Quaglia","sequence":"additional","affiliation":[{"name":"University of Rome \u201cTor Vergata\u201d, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,8,29]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2017. Page Table Isolation (PTI). https:\/\/docs.kernel.org\/x86\/pti.html."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS.2015.47"},{"key":"e_1_3_2_1_3_1","unstructured":"[3] acquasecurity. 2020\u20132023. https:\/\/aquasecurity.github.io\/tracee\/v0.6.4\/."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3365001"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.11.004"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-022-00417-2"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","unstructured":"Alexei Bulazel and B\u00fclent Yener. 2017. A Survey On Automated Dynamic Malware Analysis Evasion and Counter-Evasion: PC Mobile and Web. 1\u201321. https:\/\/doi.org\/10.1145\/3150376.3150378","DOI":"10.1145\/3150376.3150378"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3519601"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3214781"},{"key":"e_1_3_2_1_10_1","unstructured":"IBM. 1993. The JIT compiler. https:\/\/www.ibm.com\/docs\/en\/ztpf\/1.1.0.15?topic=reference-jit-compiler."},{"volume-title":"The antivirus hacker\u2019s handbook","author":"Koret Joxean","key":"e_1_3_2_1_11_1","unstructured":"Joxean Koret and Elias Bachaalany. 2015. The antivirus hacker\u2019s handbook. John Wiley & Sons."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.15"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3139472"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.42"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISPRAS53967.2021.00011"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373335"},{"key":"e_1_3_2_1_17_1","article-title":"Return-Oriented Programming: Systems, Languages, and Applications","volume":"15","author":"Roemer Ryan","year":"2012","unstructured":"Ryan Roemer, Erik Buchanan, Hovav Shacham, and Stefan Savage. 2012. Return-Oriented Programming: Systems, Languages, and Applications. ACM Trans. Info. & System Security 15, 1 (3 2012).","journal-title":"ACM Trans. Info. & System Security"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2379810.2379814"},{"key":"e_1_3_2_1_19_1","unstructured":"Sysdig. 2016\u20132023. The Falco project. https:\/\/falco.org\/."},{"key":"e_1_3_2_1_20_1","unstructured":"VirusTotal. 2014\u20132023. Yara rules. https:\/\/virustotal.github.io\/yara\/."},{"key":"e_1_3_2_1_21_1","unstructured":"VirusTotal. 2014\u20132023. Yara rules database. https:\/\/github.com\/Yara-Rules\/rules."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420979"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2013.6682767"},{"key":"e_1_3_2_1_24_1","volume-title":"RAID 2016, Paris, France, September 19-21, 2016, Proceedings 19","author":"Yokoyama Akira","year":"2016","unstructured":"Akira Yokoyama, Kou Ishii, Rui Tanabe, Yinmin Papa, Katsunari Yoshioka, Tsutomu Matsumoto, Takahiro Kasama, Daisuke Inoue, Michael Brengel, Michael Backes, 2016. Sandprint: Fingerprinting malware sandboxes to provide intelligence for sandbox evasion. In Research in Attacks, Intrusions, and Defenses: 19th International Symposium, RAID 2016, Paris, France, September 19-21, 2016, Proceedings 19. Springer, 165\u2013187."}],"event":{"name":"ARES 2023: The 18th International Conference on Availability, Reliability and Security","acronym":"ARES 2023","location":"Benevento Italy"},"container-title":["Proceedings of the 18th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605035","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3600160.3605035","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:49:16Z","timestamp":1750182556000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605035"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,29]]},"references-count":24,"alternative-id":["10.1145\/3600160.3605035","10.1145\/3600160"],"URL":"https:\/\/doi.org\/10.1145\/3600160.3605035","relation":{},"subject":[],"published":{"date-parts":[[2023,8,29]]},"assertion":[{"value":"2023-08-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}