{"id":"https://openalex.org/W2100002952","doi":"https://doi.org/10.1145/2151024.2151053","title":"V2E","display_name":"V2E","publication_year":2012,"publication_date":"2012-03-03","ids":{"openalex":"https://openalex.org/W2100002952","doi":"https://doi.org/10.1145/2151024.2151053","mag":"2100002952"},"language":"en","primary_location":{"id":"doi:10.1145/2151024.2151053","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2151024.2151053","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 8th ACM SIGPLAN/SIGOPS conference on Virtual Execution Environments","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5016808177","display_name":"Lok-Kwong Yan","orcid":null},"institutions":[{"id":"https://openalex.org/I1280414376","display_name":"United States Air Force Research Laboratory","ror":"https://ror.org/02e2egq70","country_code":"US","type":"facility","lineage":["https://openalex.org/I1280414376","https://openalex.org/I1330347796","https://openalex.org/I4210102105","https://openalex.org/I4389425425"]},{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Lok-Kwong Yan","raw_affiliation_strings":["Syracuse University & Air Force Research Laboratory, Syracuse, NY, USA"],"affiliations":[{"raw_affiliation_string":"Syracuse University & Air Force Research Laboratory, Syracuse, NY, USA","institution_ids":["https://openalex.org/I1280414376","https://openalex.org/I70983195"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054846635","display_name":"Manjukumar Jayachandra","orcid":null},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Manjukumar Jayachandra","raw_affiliation_strings":["Syracuse University, Syracuse, NY, USA"],"affiliations":[{"raw_affiliation_string":"Syracuse University, Syracuse, NY, USA","institution_ids":["https://openalex.org/I70983195"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100695047","display_name":"Mu Zhang","orcid":"https://orcid.org/0000-0001-5905-9515"},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mu Zhang","raw_affiliation_strings":["Syracuse University, Syracuse, NY, USA"],"affiliations":[{"raw_affiliation_string":"Syracuse University, Syracuse, NY, USA","institution_ids":["https://openalex.org/I70983195"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073376805","display_name":"Heng Yin","orcid":"https://orcid.org/0000-0002-8942-7742"},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Heng Yin","raw_affiliation_strings":["Syracuse University, Syracuse, NY, USA"],"affiliations":[{"raw_affiliation_string":"Syracuse University, Syracuse, NY, USA","institution_ids":["https://openalex.org/I70983195"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5016808177"],"corresponding_institution_ids":["https://openalex.org/I1280414376","https://openalex.org/I70983195"],"apc_list":null,"apc_paid":null,"fwci":6.3661,"has_fulltext":false,"cited_by_count":63,"citation_normalized_percentile":{"value":0.97942916,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"227","last_page":"238"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.8390743136405945},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8250725269317627},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.7044016122817993},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6714844703674316},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6115172505378723},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5582399964332581},{"id":"https://openalex.org/keywords/instrumentation","display_name":"Instrumentation (computer programming)","score":0.5485866069793701},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5170727372169495},{"id":"https://openalex.org/keywords/hardware-virtualization","display_name":"Hardware virtualization","score":0.4538409411907196},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.4519212245941162},{"id":"https://openalex.org/keywords/virtual-instrumentation","display_name":"Virtual instrumentation","score":0.45022767782211304},{"id":"https://openalex.org/keywords/extensibility","display_name":"Extensibility","score":0.44717004895210266},{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.43422091007232666},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.413545161485672},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.41102293133735657},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.34749385714530945},{"id":"https://openalex.org/keywords/computer-architecture","display_name":"Computer architecture","score":0.34153252840042114},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.2595621943473816},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.2308274805545807},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.14073064923286438}],"concepts":[{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.8390743136405945},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8250725269317627},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.7044016122817993},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6714844703674316},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6115172505378723},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5582399964332581},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.5485866069793701},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5170727372169495},{"id":"https://openalex.org/C68793194","wikidata":"https://www.wikidata.org/wiki/Q1616095","display_name":"Hardware virtualization","level":5,"score":0.4538409411907196},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.4519212245941162},{"id":"https://openalex.org/C2781331281","wikidata":"https://www.wikidata.org/wiki/Q2392056","display_name":"Virtual instrumentation","level":3,"score":0.45022767782211304},{"id":"https://openalex.org/C32833848","wikidata":"https://www.wikidata.org/wiki/Q4115054","display_name":"Extensibility","level":2,"score":0.44717004895210266},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.43422091007232666},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.413545161485672},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.41102293133735657},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.34749385714530945},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.34153252840042114},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.2595621943473816},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.2308274805545807},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.14073064923286438},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2151024.2151053","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2151024.2151053","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 8th ACM SIGPLAN/SIGOPS conference on Virtual Execution Environments","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W11234669","https://openalex.org/W78162143","https://openalex.org/W143519483","https://openalex.org/W324032601","https://openalex.org/W1522250664","https://openalex.org/W1549813142","https://openalex.org/W1608705608","https://openalex.org/W1613865581","https://openalex.org/W1641762327","https://openalex.org/W1867761151","https://openalex.org/W1910686388","https://openalex.org/W1992181084","https://openalex.org/W1994584977","https://openalex.org/W2014589236","https://openalex.org/W2049867480","https://openalex.org/W2059385647","https://openalex.org/W2065566278","https://openalex.org/W2089560940","https://openalex.org/W2112731379","https://openalex.org/W2117030266","https://openalex.org/W2120297918","https://openalex.org/W2122532513","https://openalex.org/W2128389850","https://openalex.org/W2134633067","https://openalex.org/W2136245903","https://openalex.org/W2140807364","https://openalex.org/W2142892618","https://openalex.org/W2151135920","https://openalex.org/W2156453323","https://openalex.org/W2156858199","https://openalex.org/W2159702664","https://openalex.org/W2161992906","https://openalex.org/W2163292449","https://openalex.org/W4239813889","https://openalex.org/W4254234063","https://openalex.org/W4285719527","https://openalex.org/W6631155369","https://openalex.org/W6639864006"],"related_works":["https://openalex.org/W2354385412","https://openalex.org/W4285507391","https://openalex.org/W2007647094","https://openalex.org/W2610659201","https://openalex.org/W2183925834","https://openalex.org/W2242595288","https://openalex.org/W3107556205","https://openalex.org/W65788704","https://openalex.org/W3136388389","https://openalex.org/W1608166398"],"abstract_inverted_index":{"A":[0],"transparent":[1,16],"and":[2,22,37,64,79,101,111,123,140,184,188,199],"extensible":[3,29],"malware":[4,18,100,133,168,203],"analysis":[5,38,52,65,81,89,117],"platform":[6,13,43,118,159],"is":[7,67,103,128,135,151],"essential":[8],"for":[9,34,76],"defeating":[10],"malware.":[11],"This":[12],"should":[14,26],"be":[15,28,96],"so":[17],"cannot":[19],"easily":[20,97,161],"detect":[21],"bypass":[23],"it.":[24],"It":[25],"also":[27],"to":[30,163],"provide":[31],"strong":[32,74],"support":[33,63,75],"heavyweight":[35],"instrumentation":[36,62,78],"efficiency.":[39],"However,":[40,88],"no":[41],"existing":[42],"can":[44,56,95,160],"meet":[45],"both":[46,109,196],"requirements.":[47],"Leveraging":[48],"hardware":[49,121,138],"virtualization":[50,122,139],"technology,":[51],"platforms":[53,90],"like":[54],"Ether":[55],"achieve":[57,108],"good":[58,80],"transparency,":[59],"but":[60],"its":[61,186],"efficiency":[66,82,189],"poor.":[68],"In":[69],"contrast,":[70],"software":[71,93,124],"emulation":[72,94],"provides":[73],"code":[77],"by":[83,99,190],"using":[84],"dynamic":[85],"binary":[86],"translation.":[87],"based":[91],"on":[92],"detected":[98],"thus":[102],"poor":[104],"in":[105,143],"transparency.":[106],"To":[107],"transparency":[110],"extensibility,":[112],"we":[113],"propose":[114],"a":[115,171,175,180],"new":[116],"that":[119],"combines":[120],"emulation.":[125],"The":[126],"essence":[127],"precise":[129],"heterogeneous":[130],"replay:":[131],"the":[132,148,158],"execution":[134,149],"recorded":[136],"via":[137],"then":[141],"replayed":[142],"software.":[144],"Our":[145],"design":[146],"ensures":[147],"replay":[150],"precise.":[152],"Moreover,":[153],"with":[154,195],"page-level":[155],"recording":[156],"granularity,":[157],"adjust":[162],"analyze":[164],"various":[165],"forms":[166],"of":[167],"(a":[169],"process,":[170],"kernel":[172],"module,":[173],"or":[174],"shared":[176],"library).":[177],"We":[178],"implemented":[179],"prototype":[181],"called":[182],"V2E":[183],"demonstrated":[185],"capability":[187],"conducting":[191],"an":[192],"extensive":[193],"evaluation":[194],"synthetic":[197],"samples":[198],"14":[200],"realworld":[201],"emulation-resistant":[202],"samples.":[204]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":6},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":6},{"year":2015,"cited_by_count":11},{"year":2014,"cited_by_count":8},{"year":2013,"cited_by_count":4},{"year":2012,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2016-06-24T00:00:00"}