{"id":"https://openalex.org/W2051498836","doi":"https://doi.org/10.1145/1866307.1866356","title":"BLADE","display_name":"BLADE","publication_year":2010,"publication_date":"2010-10-04","ids":{"openalex":"https://openalex.org/W2051498836","doi":"https://doi.org/10.1145/1866307.1866356","mag":"2051498836"},"language":"en","primary_location":{"id":"doi:10.1145/1866307.1866356","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1866307.1866356","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th ACM conference on Computer and communications security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013217302","display_name":"Long Lu","orcid":"https://orcid.org/0000-0003-1550-479X"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Long Lu","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085002486","display_name":"Vinod Yegneswaran","orcid":"https://orcid.org/0000-0003-0718-6605"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vinod Yegneswaran","raw_affiliation_strings":["SRI International, Menlo Park, CA, USA","SRI-International, Menlo Park, CA, USA"],"affiliations":[{"raw_affiliation_string":"SRI International, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]},{"raw_affiliation_string":"SRI-International, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022253423","display_name":"Phillip Porras","orcid":"https://orcid.org/0000-0003-4661-2443"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Phillip Porras","raw_affiliation_strings":["SRI International, Menlo Park, CA, USA","SRI-International, Menlo Park, CA, USA"],"affiliations":[{"raw_affiliation_string":"SRI International, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]},{"raw_affiliation_string":"SRI-International, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047140382","display_name":"Wenke Lee","orcid":"https://orcid.org/0000-0003-2761-1277"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenke Lee","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5013217302"],"corresponding_institution_ids":["https://openalex.org/I130701444"],"apc_list":null,"apc_paid":null,"fwci":18.139,"has_fulltext":false,"cited_by_count":144,"citation_normalized_percentile":{"value":0.99636201,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"440","last_page":"450"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8640491962432861},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8322094678878784},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7950222492218018},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.5614057183265686},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5584694743156433},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.5272815823554993},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.5167759656906128},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5081701278686523},{"id":"https://openalex.org/keywords/download","display_name":"Download","score":0.5068603157997131},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.44661280512809753},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.36613523960113525}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8640491962432861},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8322094678878784},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7950222492218018},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.5614057183265686},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5584694743156433},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.5272815823554993},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.5167759656906128},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5081701278686523},{"id":"https://openalex.org/C2780154274","wikidata":"https://www.wikidata.org/wiki/Q7126717","display_name":"Download","level":2,"score":0.5068603157997131},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44661280512809753},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.36613523960113525}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1866307.1866356","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1866307.1866356","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th ACM conference on Computer and communications security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.699999988079071,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W40177048","https://openalex.org/W97539848","https://openalex.org/W191098608","https://openalex.org/W202500387","https://openalex.org/W1491237615","https://openalex.org/W1520941164","https://openalex.org/W1546773937","https://openalex.org/W1583098994","https://openalex.org/W1598325486","https://openalex.org/W1705596515","https://openalex.org/W1761672165","https://openalex.org/W1842679320","https://openalex.org/W1993295335","https://openalex.org/W2003189607","https://openalex.org/W2089562790","https://openalex.org/W2095610745","https://openalex.org/W2102671922","https://openalex.org/W2111165162","https://openalex.org/W2113167642","https://openalex.org/W2122997043","https://openalex.org/W2154022444","https://openalex.org/W2914982603","https://openalex.org/W6603957951","https://openalex.org/W6608239868","https://openalex.org/W6674628898","https://openalex.org/W6676915735"],"related_works":["https://openalex.org/W2900526031","https://openalex.org/W4296272594","https://openalex.org/W1966145327","https://openalex.org/W4360993664","https://openalex.org/W2465235098","https://openalex.org/W2470029541","https://openalex.org/W2470502009","https://openalex.org/W2167003418","https://openalex.org/W2728713145","https://openalex.org/W2171035369"],"abstract_inverted_index":{"Web-based":[0],"surreptitious":[1],"malware":[2,39,198],"infections":[3],"(i.e.,":[4],"drive-by":[5,138,197],"downloads)":[6],"have":[7],"become":[8],"the":[9,20,80,95,134,142,150,191],"primary":[10],"method":[11],"used":[12],"to":[13,36,85,94,102,133],"deliver":[14],"malicious":[15,90,180],"software":[16],"onto":[17],"computers":[18],"across":[19],"Internet.":[21,192],"To":[22],"address":[23],"this":[24],"threat,":[25],"we":[26],"present":[27,141],"a":[28,72,104,183,206],"browser":[29,56,69,100],"independent":[30],"operating":[31],"system":[32,48,97],"kernel":[33],"extension":[34],"designed":[35],"eliminate":[37],"driveby":[38],"installations.":[40],"The":[41],"BLADE":[42,78,110,146,193],"(Block":[43],"All":[44],"Drive-by":[45],"download":[46,70,87],"Exploits)":[47],"asserts":[49],"that":[50,130],"all":[51,196],"executable":[52],"files":[53],"delivered":[54],"through":[55],"downloads":[57,101],"must":[58],"result":[59],"from":[60,157],"explicit":[61,115],"user":[62],"consent":[63],"and":[64,88,120,127,154,175,205],"transparently":[65],"redirects":[66],"every":[67],"unconsented":[68],"into":[71],"nonexecutable":[73],"secure":[74],"zone":[75],"of":[76,82,117,136,144,162,173,186],"disk.":[77],"thwarts":[79],"ability":[81],"browser-based":[83],"exploits":[84,119,188],"surreptitiously":[86],"execute":[89],"content":[91],"by":[92],"remapping":[93],"file":[96],"only":[98],"those":[99],"which":[103],"programmatically":[105],"inferred":[106],"user-consent":[107],"is":[108,121],"correlated,":[109],"provides":[111],"its":[112,163],"protection":[113],"without":[114],"knowledge":[116],"any":[118],"thus":[122],"resilient":[123],"against":[124,177],"code":[125],"obfuscation":[126],"zero-day":[128],"threats":[129],"directly":[131],"contribute":[132],"pervasiveness":[135],"today's":[137],"malware.":[139],"We":[140],"design":[143],"our":[145],"prototype":[147],"implementation":[148],"for":[149],"Microsoft":[151],"Windows":[152],"platform,":[153],"report":[155],"results":[156],"as":[158],"extensive":[159],"empirical":[160],"evaluation":[161,169],"effectiveness":[164],"on":[165],"popular":[166],"browsers.":[167],"Our":[168],"includes":[170],"multiple":[171],"versions":[172],"IE":[174],"Firefox,":[176],"1,934":[178],"active":[179],"URLs,":[181],"representing":[182],"broad":[184],"spectrum":[185],"web-based":[187],"not":[189],"plaguing":[190],"successfully":[194],"blocked":[195],"install":[199],"attempts":[200],"with":[201],"zero":[202],"false":[203],"positives":[204],"3%":[207],"worst-case":[208],"performance":[209],"cost.":[210]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":19},{"year":2016,"cited_by_count":15},{"year":2015,"cited_by_count":19},{"year":2014,"cited_by_count":17},{"year":2013,"cited_by_count":19},{"year":2012,"cited_by_count":18}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2016-06-24T00:00:00"}
