{"id":"https://openalex.org/W2765713146","doi":"https://doi.org/10.1145/3133956.3134035","title":"FlashGuard","display_name":"FlashGuard","publication_year":2017,"publication_date":"2017-10-27","ids":{"openalex":"https://openalex.org/W2765713146","doi":"https://doi.org/10.1145/3133956.3134035","mag":"2765713146"},"language":"en","primary_location":{"id":"doi:10.1145/3133956.3134035","doi":"https://doi.org/10.1145/3133956.3134035","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3133956.3134035","pdf_url":null,"source":{"id":"https://openalex.org/S4393917527","display_name":"ACM SIGSAC Conference on Computer and Communications Security (CCS)","issn_l":"1543-7221","issn":["1543-7221"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["norway-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005380910","display_name":"Jian Huang","orcid":"https://orcid.org/0000-0002-1125-671X","observed_orcids":["https://orcid.org/0000-0002-1125-671X"]},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jian Huang","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079032972","display_name":"Jun Chen Xu","orcid":"https://orcid.org/0000-0002-9255-0434","observed_orcids":["https://orcid.org/0000-0002-9255-0434"]},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jun Xu","raw_affiliation_strings":["Pennsylvania State University, University Park, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041094652","display_name":"Xinyu Xing","orcid":"https://orcid.org/0000-0001-6733-226X","observed_orcids":["https://orcid.org/0000-0001-6733-226X"]},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinyu Xing","raw_affiliation_strings":["Pennsylvania State University, University Park, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100346828","display_name":"Peng Liu","orcid":"https://orcid.org/0000-0002-5091-8464","observed_orcids":["https://orcid.org/0000-0002-5091-8464","https://orcid.org/0000-0003-4175-504X","https://orcid.org/0000-0003-4929-0531","https://orcid.org/0000-0003-2583-9112","https://orcid.org/0009-0008-0468-432X","https://orcid.org/0000-0002-0492-0029","https://orcid.org/0000-0003-3292-8551","https://orcid.org/0000-0002-7855-3110","https://orcid.org/0000-0002-6694-1693"]},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Peng Liu","raw_affiliation_strings":["Pennsylvania State University, University Park, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082772077","display_name":"Moinuddin K. Qureshi","orcid":"https://orcid.org/0000-0002-1314-9096","observed_orcids":["https://orcid.org/0000-0002-1314-9096"]},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Moinuddin K. Qureshi","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.4775,"has_fulltext":false,"cited_by_count":87,"citation_normalized_percentile":{"value":0.97274717,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"2231","last_page":"2244"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.8881999850273132,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.8881999850273132,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.10360000282526016,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware-detection","display_name":"ransomware detection","score":0.9399999976158142},{"id":"https://openalex.org/keywords/antivirus-evasion","display_name":"antivirus evasion","score":0.6650000214576721},{"id":"https://openalex.org/keywords/file-encryption","display_name":"file encryption","score":0.7239999771118164},{"id":"https://openalex.org/keywords/storage-overhead","display_name":"storage overhead","score":0.4690000116825104}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9677615761756897},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7299288511276245},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5826102495193481},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5792465209960938},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5629361867904663},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4648612439632416},{"id":"https://openalex.org/C2781426709","wikidata":"https://www.wikidata.org/wiki/Q1414572","display_name":"Ransom","level":2,"score":0.4437633156776428},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4322457015514374},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.4145504832267761},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3133956.3134035","doi":"https://doi.org/10.1145/3133956.3134035","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3133956.3134035","pdf_url":null,"source":{"id":"https://openalex.org/S4393917527","display_name":"ACM SIGSAC Conference on Computer and Communications Security (CCS)","issn_l":"1543-7221","issn":["1543-7221"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["norway-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G4529271126","display_name":"TWC: Small: Collaborative: Towards Agile and Privacy-Preserving Cloud Computing","funder_award_id":"1422594","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8798368995","display_name":"Breakthrough: CPS-Security: Towards Provably Correct Distributed Attack-Resilient Control of Unmanned-Vehicle-Operator Networks","funder_award_id":"1505664","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G95709145","display_name":"CSR: Small:  Memory System Optimizations to Enable Fast-Response Mobile Devices at Low Power","funder_award_id":"1526798","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W135447215","https://openalex.org/W159205158","https://openalex.org/W185637121","https://openalex.org/W1487370894","https://openalex.org/W1513366578","https://openalex.org/W1534546243","https://openalex.org/W1553242235","https://openalex.org/W1575126375","https://openalex.org/W1599767316","https://openalex.org/W1622883104","https://openalex.org/W1842221318","https://openalex.org/W2035752434","https://openalex.org/W2051435086","https://openalex.org/W2066220442","https://openalex.org/W2076342816","https://openalex.org/W2108183412","https://openalex.org/W2119359024","https://openalex.org/W2132372908","https://openalex.org/W2132929952","https://openalex.org/W2165068957","https://openalex.org/W2201220957","https://openalex.org/W2296579688","https://openalex.org/W2343806569","https://openalex.org/W2461373307","https://openalex.org/W2513529237","https://openalex.org/W2550109527","https://openalex.org/W2559964890","https://openalex.org/W2573184146","https://openalex.org/W2575073887","https://openalex.org/W2601591992","https://openalex.org/W2670925489"],"related_works":["https://openalex.org/W3178388256","https://openalex.org/W4411594285","https://openalex.org/W4414290413","https://openalex.org/W2901458495","https://openalex.org/W4411523089","https://openalex.org/W3208935820","https://openalex.org/W3136914374","https://openalex.org/W2923699932","https://openalex.org/W2890196927","https://openalex.org/W3001968429"],"abstract_inverted_index":{"Encryption":[0],"ransomware":[1,29,39,46,69,108,125],"is":[2,47,57],"a":[3,13,38,62,93],"malicious":[4],"software":[5],"that":[6,34],"stealthily":[7],"encrypts":[8],"user":[9,56],"files":[10,50],"and":[11,54,103,131],"demands":[12],"ransom":[14,63],"to":[15,18,27,60,64,78,95,113,122],"provide":[16],"access":[17,65],"these":[19],"files.":[20,67],"Several":[21],"prior":[22],"studies":[23],"have":[24,89],"developed":[25],"systems":[26],"detect":[28],"by":[30,42],"monitoring":[31],"the":[32,43,45,55,134],"activities":[33],"typically":[35],"occur":[36],"during":[37],"attack.":[40],"Unfortunately,":[41],"time":[44],"detected,":[48],"some":[49],"already":[51],"undergo":[52],"encryption":[53],"still":[58,105],"required":[59],"pay":[61],"those":[66],"Furthermore,":[68],"variants":[70],"can":[71,109],"obtain":[72,110],"kernel":[73,111],"privilege,":[74],"which":[75],"allows":[76],"them":[77],"terminate":[79],"software-based":[80,129],"defense":[81],"systems,":[82],"such":[83,98],"as":[84,92,107],"anti-virus.":[85],"While":[86],"periodic":[87],"backups":[88,99],"been":[90],"explored":[91],"means":[94],"mitigate":[96],"ransomware,":[97],"incur":[100],"storage":[101,135],"overheads":[102,136],"are":[104],"vulnerable":[106],"privilege":[112],"stop":[114],"or":[115],"destroy":[116],"backups.":[117,138],"Ideally,":[118],"we":[119],"would":[120],"like":[121],"defend":[123],"against":[124],"without":[126,132],"relying":[127],"on":[128],"solutions":[130],"incurring":[133],"of":[137]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":7},{"year":2019,"cited_by_count":14},{"year":2018,"cited_by_count":9}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2017-11-10T00:00:00"}