{"id":"https://openalex.org/W2316461318","doi":"https://doi.org/10.1109/tdsc.2016.2545671","title":"Towards Transparent Debugging","display_name":"Towards Transparent Debugging","publication_year":2016,"publication_date":"2016-03-23","ids":{"openalex":"https://openalex.org/W2316461318","doi":"https://doi.org/10.1109/tdsc.2016.2545671","mag":"2316461318"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2016.2545671","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2016.2545671","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101886601","display_name":"Fengwei Zhang","orcid":"https://orcid.org/0000-0003-3365-2526"},"institutions":[{"id":"https://openalex.org/I185443292","display_name":"Wayne State University","ror":"https://ror.org/01070mq45","country_code":"US","type":"education","lineage":["https://openalex.org/I185443292"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fengwei Zhang","raw_affiliation_strings":["Department of Computer Science, Wayne State University, Detroit, MI"],"raw_orcid":"https://orcid.org/0000-0003-3365-2526","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Wayne State University, Detroit, MI","institution_ids":["https://openalex.org/I185443292"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030030910","display_name":"Kevin Leach","orcid":"https://orcid.org/0000-0002-4001-3442"},"institutions":[{"id":"https://openalex.org/I51556381","display_name":"University of Virginia","ror":"https://ror.org/0153tk833","country_code":"US","type":"education","lineage":["https://openalex.org/I51556381"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kevin Leach","raw_affiliation_strings":["Department of Computer Science, University of Virginia, Charlottesville, VA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Virginia, Charlottesville, VA","institution_ids":["https://openalex.org/I51556381"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041500780","display_name":"Angelos Stavrou","orcid":"https://orcid.org/0000-0001-9888-0592"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Angelos Stavrou","raw_affiliation_strings":["Department of Computer Science, George Mason University, Fairfax, VA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, George Mason University, Fairfax, VA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100664241","display_name":"Haining Wang","orcid":"https://orcid.org/0000-0002-9665-7511"},"institutions":[{"id":"https://openalex.org/I86501945","display_name":"University of Delaware","ror":"https://ror.org/01sbq1a82","country_code":"US","type":"education","lineage":["https://openalex.org/I86501945"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haining Wang","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Delaware, Newark, DE"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Delaware, Newark, DE","institution_ids":["https://openalex.org/I86501945"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2504,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.79614641,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"15","issue":"2","first_page":"321","last_page":"335"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.8533455729484558},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8443354368209839},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.7559999227523804},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.7021586298942566},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.6417282819747925},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.554636538028717},{"id":"https://openalex.org/keywords/x86","display_name":"x86","score":0.48739510774612427},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.48139381408691406},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.46741485595703125},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.3471270203590393},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.31588292121887207}],"concepts":[{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.8533455729484558},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8443354368209839},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.7559999227523804},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.7021586298942566},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.6417282819747925},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.554636538028717},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.48739510774612427},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.48139381408691406},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.46741485595703125},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.3471270203590393},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.31588292121887207},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2016.2545671","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2016.2545671","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W23711711","https://openalex.org/W78162143","https://openalex.org/W1534092936","https://openalex.org/W1598700299","https://openalex.org/W1641762327","https://openalex.org/W1970914644","https://openalex.org/W1975177131","https://openalex.org/W1975582382","https://openalex.org/W1990360323","https://openalex.org/W2000249510","https://openalex.org/W2024109642","https://openalex.org/W2032151752","https://openalex.org/W2053343312","https://openalex.org/W2057801703","https://openalex.org/W2065085847","https://openalex.org/W2070041400","https://openalex.org/W2072052933","https://openalex.org/W2092307728","https://openalex.org/W2100002952","https://openalex.org/W2101889913","https://openalex.org/W2102001185","https://openalex.org/W2112731379","https://openalex.org/W2114441612","https://openalex.org/W2115175195","https://openalex.org/W2117882778","https://openalex.org/W2119251836","https://openalex.org/W2140807364","https://openalex.org/W2145688371","https://openalex.org/W2158699246","https://openalex.org/W2176830056","https://openalex.org/W2294049595","https://openalex.org/W2412686421","https://openalex.org/W6601006388","https://openalex.org/W6637110787","https://openalex.org/W6677522032","https://openalex.org/W6685576885","https://openalex.org/W6715176570"],"related_works":["https://openalex.org/W2083200807","https://openalex.org/W2154523322","https://openalex.org/W2364195017","https://openalex.org/W2049983405","https://openalex.org/W2355430452","https://openalex.org/W2384430124","https://openalex.org/W2368895433","https://openalex.org/W2761289806","https://openalex.org/W2059691853","https://openalex.org/W2353726459"],"abstract_inverted_index":{"Traditional":[0],"malware":[1],"analysis":[2],"relies":[3],"on":[4,75,135,179],"virtualization":[5,76],"or":[6,43,77],"emulation":[7,78],"technology":[8],"to":[9,17,41,66,83,121],"run":[10],"samples":[11],"in":[12,33,62],"a":[13,51,59,122,126,131],"confined":[14],"environment,":[15,36],"and":[16,28,79,98,112,139,151,165,172,182],"analyze":[18],"malicious":[19],"activities":[20],"by":[21,143],"instrumenting":[22],"code":[23],"execution.":[24],"However,":[25],"virtual":[26],"machines":[27],"emulators":[29],"inevitably":[30],"create":[31],"artifacts":[32],"the":[34,63,91,95,119,168],"execution":[35],"making":[37],"these":[38],"approaches":[39],"vulnerable":[40],"detection":[42],"subversion.":[44],"In":[45],"this":[46],"paper,":[47],"we":[48,140],"present":[49],"MALT,":[50],"debugging":[52,101,106,127,171],"framework":[53],"that":[54,160],"employs":[55],"System":[56],"Management":[57],"Mode,":[58],"CPU":[60],"mode":[61],"x86":[64],"architecture,":[65],"transparently":[67],"study":[68],"armored":[69],"malware.":[70],"MALT":[71,103,117,134],"does":[72],"not":[73],"depend":[74],"thus":[80],"is":[81],"immune":[82],"threats":[84],"targeting":[85],"such":[86],"environments.":[87],"Our":[88],"approach":[89],"reduces":[90],"attack":[92],"surface":[93],"at":[94],"software":[96],"level,":[97],"advances":[99],"state-of-the-art":[100],"transparency.":[102],"embodies":[104],"various":[105],"functions,":[107],"including":[108],"register/memory":[109],"accesses,":[110],"breakpoints,":[111],"seven":[113],"stepping":[114],"modes.":[115],"Additionally,":[116],"restores":[118],"system":[120],"clean":[123],"state":[124],"after":[125],"session.":[128],"We":[129],"implemented":[130],"prototype":[132,162],"of":[133,147],"two":[136],"physical":[137],"machines,":[138],"conducted":[141],"experiments":[142],"testing":[144],"an":[145],"array":[146],"existing":[148],"anti-virtualization,":[149],"anti-emulation,":[150],"packing":[152],"techniques":[153],"against":[154,167],"MALT.":[155],"The":[156],"experimental":[157],"results":[158],"show":[159],"our":[161],"remains":[163],"transparent":[164],"undetected":[166],"samples.":[169],"Furthermore,":[170],"restoration":[173],"introduce":[174],"moderate":[175],"but":[176],"manageable":[177],"overheads":[178],"both":[180],"Windows":[181],"Linux":[183],"platforms.":[184]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}