Matches in SemOpenAlex for { <https://semopenalex.org/work/W102746433> ?p ?o ?g. }
- W102746433 endingPage "9" @default.
- W102746433 startingPage "9" @default.
- W102746433 abstract "The availability of off-the-shelf exploitation toolkits for compromising hosts, coupled with the rapid rate of exploit discovery and disclosure, has made exploit or vulnerability-based detection far less effective than it once was. For instance, the increasing use of metamorphic and polymorphic techniques to deploy code injection attacks continues to confound signature-based detection techniques. The key to detecting these attacks lies in the ability to discover the presence of the injected code (or, shellcode). One promising technique for doing so is to examine data (be that from network streams or buffers of a process) and efficiently execute its content to find what lurks within. Unfortunately, current approaches for achieving this goal are not robust to evasion or scalable, primarily because of their reliance on software-based CPU emulators. In this paper, we argue that the use of software-based emulation techniques are not necessary, and instead propose a new framework that leverages hardware virtualization to better enable the detection of code injection attacks. We also report on our experience using this framework to analyze a corpus of malicious Portable Document Format (PDF) files and network-based attacks." @default.
- W102746433 created "2016-06-24" @default.
- W102746433 creator A5019527145 @default.
- W102746433 creator A5063703305 @default.
- W102746433 creator A5069862528 @default.
- W102746433 creator A5085361000 @default.
- W102746433 date "2011-08-08" @default.
- W102746433 modified "2023-09-26" @default.
- W102746433 title "SHELLOS: enabling fast detection and forensic analysis of code injection attacks" @default.
- W102746433 cites W1491237615 @default.
- W102746433 cites W1520941164 @default.
- W102746433 cites W1522250664 @default.
- W102746433 cites W1530813112 @default.
- W102746433 cites W1561880491 @default.
- W102746433 cites W1585348082 @default.
- W102746433 cites W1591237315 @default.
- W102746433 cites W1592520897 @default.
- W102746433 cites W1671661096 @default.
- W102746433 cites W1761672165 @default.
- W102746433 cites W1791341372 @default.
- W102746433 cites W1970867218 @default.
- W102746433 cites W1989060313 @default.
- W102746433 cites W1992181084 @default.
- W102746433 cites W1993651556 @default.
- W102746433 cites W2010440413 @default.
- W102746433 cites W2014742088 @default.
- W102746433 cites W2052372681 @default.
- W102746433 cites W2095610745 @default.
- W102746433 cites W2099382052 @default.
- W102746433 cites W2101310246 @default.
- W102746433 cites W2114604089 @default.
- W102746433 cites W2122177035 @default.
- W102746433 cites W2125895608 @default.
- W102746433 cites W2146211060 @default.
- W102746433 cites W2157912940 @default.
- W102746433 cites W2158302406 @default.
- W102746433 cites W2294049595 @default.
- W102746433 cites W2295386615 @default.
- W102746433 cites W58852127 @default.
- W102746433 cites W7103708 @default.
- W102746433 cites W74995240 @default.
- W102746433 cites W78162143 @default.
- W102746433 cites W2466075874 @default.
- W102746433 cites W2885254278 @default.
- W102746433 hasPublicationYear "2011" @default.
- W102746433 type Work @default.
- W102746433 sameAs 102746433 @default.
- W102746433 citedByCount "27" @default.
- W102746433 countsByYear W1027464332012 @default.
- W102746433 countsByYear W1027464332013 @default.
- W102746433 countsByYear W1027464332014 @default.
- W102746433 countsByYear W1027464332015 @default.
- W102746433 countsByYear W1027464332016 @default.
- W102746433 countsByYear W1027464332017 @default.
- W102746433 countsByYear W1027464332018 @default.
- W102746433 countsByYear W1027464332019 @default.
- W102746433 countsByYear W1027464332020 @default.
- W102746433 countsByYear W1027464332021 @default.
- W102746433 crossrefType "proceedings-article" @default.
- W102746433 hasAuthorship W102746433A5019527145 @default.
- W102746433 hasAuthorship W102746433A5063703305 @default.
- W102746433 hasAuthorship W102746433A5069862528 @default.
- W102746433 hasAuthorship W102746433A5085361000 @default.
- W102746433 hasConcept C111919701 @default.
- W102746433 hasConcept C149635348 @default.
- W102746433 hasConcept C149810388 @default.
- W102746433 hasConcept C162324750 @default.
- W102746433 hasConcept C165696696 @default.
- W102746433 hasConcept C177264268 @default.
- W102746433 hasConcept C199360897 @default.
- W102746433 hasConcept C203014093 @default.
- W102746433 hasConcept C26517878 @default.
- W102746433 hasConcept C2776760102 @default.
- W102746433 hasConcept C2777904410 @default.
- W102746433 hasConcept C2781251061 @default.
- W102746433 hasConcept C38652104 @default.
- W102746433 hasConcept C41008148 @default.
- W102746433 hasConcept C43126263 @default.
- W102746433 hasConcept C48044578 @default.
- W102746433 hasConcept C50522688 @default.
- W102746433 hasConcept C541664917 @default.
- W102746433 hasConcept C86803240 @default.
- W102746433 hasConcept C8891405 @default.
- W102746433 hasConcept C95713431 @default.
- W102746433 hasConcept C98045186 @default.
- W102746433 hasConceptScore W102746433C111919701 @default.
- W102746433 hasConceptScore W102746433C149635348 @default.
- W102746433 hasConceptScore W102746433C149810388 @default.
- W102746433 hasConceptScore W102746433C162324750 @default.
- W102746433 hasConceptScore W102746433C165696696 @default.
- W102746433 hasConceptScore W102746433C177264268 @default.
- W102746433 hasConceptScore W102746433C199360897 @default.
- W102746433 hasConceptScore W102746433C203014093 @default.
- W102746433 hasConceptScore W102746433C26517878 @default.
- W102746433 hasConceptScore W102746433C2776760102 @default.
- W102746433 hasConceptScore W102746433C2777904410 @default.
- W102746433 hasConceptScore W102746433C2781251061 @default.
- W102746433 hasConceptScore W102746433C38652104 @default.