{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T20:03:39Z","timestamp":1791230619426,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":37,"publisher":"ACM","license":[{"start":{"date-parts":[[2007,10,28]],"date-time":"2007-10-28T00:00:00Z","timestamp":1193529600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2007,10,28]]},"DOI":"10.1145\/1315245.1315286","type":"proceedings-article","created":{"date-parts":[[2007,11,15]],"date-time":"2007-11-15T14:30:20Z","timestamp":1195137020000},"page":"317-329","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":262,"title":["Polyglot"],"prefix":"10.1145","author":[{"given":"Juan","family":"Caballero","sequence":"first","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Heng","family":"Yin","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA &amp; College of William and Mary, Williamsburg, VA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhenkai","family":"Liang","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dawn","family":"Song","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA &amp; UC Berkeley, Berkeley, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2007,10,28]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"How Samba Was Written. http:\/\/samba.org\/ftp\/tridge\/misc\/french cafe.txt.  How Samba Was Written. http:\/\/samba.org\/ftp\/tridge\/misc\/french cafe.txt."},{"key":"e_1_3_2_1_2_1","unstructured":"Icqlib: The ICQ Library. http:\/\/kicq.sourceforge.net\/icqlib.shtml.  Icqlib: The ICQ Library. http:\/\/kicq.sourceforge.net\/icqlib.shtml."},{"key":"e_1_3_2_1_3_1","unstructured":"Libyahoo2: A C Library for Yahoo! Messenger. http:\/\/libyahoo2.sourceforge.net.  Libyahoo2: A C Library for Yahoo! Messenger. http:\/\/libyahoo2.sourceforge.net."},{"key":"e_1_3_2_1_4_1","unstructured":"MSN Messenger Protocol. http:\/\/www.hypothetic.org\/docs\/msn\/index.php.  MSN Messenger Protocol. http:\/\/www.hypothetic.org\/docs\/msn\/index.php."},{"key":"e_1_3_2_1_5_1","unstructured":"Qemu: Open Source Processor Emulator. http:\/\/fabrice.bellard.free.fr\/qemu\/.  Qemu: Open Source Processor Emulator. http:\/\/fabrice.bellard.free.fr\/qemu\/."},{"key":"e_1_3_2_1_6_1","unstructured":"Tcpdump. http:\/\/www.tcpdump.org\/.  Tcpdump. http:\/\/www.tcpdump.org\/."},{"key":"e_1_3_2_1_7_1","unstructured":"The UnOfficial AIM\/OSCAR Protocol Specification. http:\/\/www.oilcan.org\/oscar\/.  The UnOfficial AIM\/OSCAR Protocol Specification. http:\/\/www.oilcan.org\/oscar\/."},{"key":"e_1_3_2_1_8_1","unstructured":"Wireshark Network Protocol Analyzer. http:\/\/www.wireshark.org.  Wireshark Network Protocol Analyzer. http:\/\/www.wireshark.org."},{"key":"e_1_3_2_1_9_1","unstructured":"M. A. Beddoe. Network Protocol Analysis Using Bioinformatics Algorithms. http:\/\/www.baselineresearch.net\/PI\/.  M. A. Beddoe. Network Protocol Analysis Using Bioinformatics Algorithms. http:\/\/www.baselineresearch.net\/PI\/."},{"key":"e_1_3_2_1_10_1","volume-title":"Generic Application-Level Protocol Analyzer and Its Language. Network and Distributed System Security Symposium","author":"Borisov N.","year":"2007"},{"key":"e_1_3_2_1_11_1","volume-title":"USENIX Security Symposium","author":"Brumley D.","year":"2007"},{"key":"e_1_3_2_1_12_1","volume-title":"FiG: Automatic Fingerprint Generation. Network and Distributed System Security Symposium","author":"Caballero J.","year":"2007"},{"key":"e_1_3_2_1_13_1","volume-title":"Understanding Data Lifetime Via Whole System Simulation. USENIX Security Symposium","author":"Chow J.","year":"2004"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095824"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1187976.1187977"},{"key":"e_1_3_2_1_16_1","first-page":"4234","volume":"4234","author":"Crocker D.","year":"2005","journal-title":"Augmented BNF for Syntax Specifications: ABNF. RFC"},{"key":"e_1_3_2_1_17_1","volume-title":"USENIX Security Symposium","author":"Cui W.","year":"2007"},{"key":"e_1_3_2_1_18_1","volume-title":"Protocol-Independent Adaptive Replay of Application Dialog. Network and Distributed System Security Symposium","author":"Cui W.","year":"2006"},{"key":"e_1_3_2_1_19_1","volume-title":"Dynamic Application-Layer Protocol Analysis for Network Intrusion Detection. USENIX Security Symposium","author":"Dreger H.","year":"2006"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1068009.1068185"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080173.1080183"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177096"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.49"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2006.29"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177123"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1146238.1146241"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"crossref","unstructured":"P. V. Mockapetris. Domain Names - Implementation and Specification. RFC 1035 (Standard) IETF Request for Comments 1035 November 1987.   P. V. Mockapetris. Domain Names - Implementation and Specification. RFC 1035 (Standard) IETF Request for Comments 1035 November 1987.","DOI":"10.17487\/rfc1035"},{"key":"e_1_3_2_1_28_1","volume-title":"Network and Distributed System Security Symposium","author":"Newsome J.","year":"2005"},{"key":"e_1_3_2_1_29_1","volume-title":"Vulnerability-Specific Execution Filtering for Exploit Prevention on Commodity Software. Network and Distributed System Security Symposium","author":"Newsome J.","year":"2006"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180444"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.55"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251086.1251088"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177119"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1218063.1217938"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1024393.1024404"},{"key":"e_1_3_2_1_36_1","volume-title":"Cross-Site Scripting Prevention with Dynamic Data Tainting and Static Analysis. Network and Distributed System Security Symposium","author":"Vogt P.","year":"2007"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315261"}],"event":{"name":"CCS07: 14th ACM Conference on Computer and Communications Security 2007","location":"Alexandria Virginia USA","acronym":"CCS07","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 14th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1315245.1315286","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1315245.1315286","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T14:58:21Z","timestamp":1750258701000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1315245.1315286"}},"subtitle":["automatic extraction of protocol message format using dynamic binary analysis"],"short-title":[],"issued":{"date-parts":[[2007,10,28]]},"references-count":37,"alternative-id":["10.1145\/1315245.1315286","10.1145\/1315245"],"URL":"https:\/\/doi.org\/10.1145\/1315245.1315286","relation":{},"subject":[],"published":{"date-parts":[[2007,10,28]]},"assertion":[{"value":"2007-10-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}