{"id":"https://openalex.org/W2903064080","doi":"https://doi.org/10.1145/3289239.3289245","title":"SysTaint","display_name":"SysTaint","publication_year":2018,"publication_date":"2018-12-03","ids":{"openalex":"https://openalex.org/W2903064080","doi":"https://doi.org/10.1145/3289239.3289245","mag":"2903064080"},"language":"en","primary_location":{"id":"doi:10.1145/3289239.3289245","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3289239.3289245","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 8th Software Security, Protection, and Reverse Engineering Workshop","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/11311/1071459","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020466309","display_name":"Gabriele Viglianisi","orcid":null},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Gabriele Viglianisi","raw_affiliation_strings":["Politecnico di Milano"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Milano","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048211949","display_name":"Michele Carminati","orcid":"https://orcid.org/0000-0001-8284-6074"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Michele Carminati","raw_affiliation_strings":["Politecnico di Milano"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Milano","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054840981","display_name":"Mario Polino","orcid":"https://orcid.org/0000-0002-0925-2306"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mario Polino","raw_affiliation_strings":["Politecnico di Milano"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Milano","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071672404","display_name":"Andrea Continella","orcid":"https://orcid.org/0000-0002-0329-1830"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Andrea Continella","raw_affiliation_strings":["Politecnico di Milano"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Milano","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046604572","display_name":"Stefano Zanero","orcid":"https://orcid.org/0000-0003-4710-5283"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Stefano Zanero","raw_affiliation_strings":["Politecnico di Milano"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Milano","institution_ids":["https://openalex.org/I93860229"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I93860229"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8848904371261597},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.8553845882415771},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7702857851982117},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.7286398410797119},{"id":"https://openalex.org/keywords/command-and-control","display_name":"Command and control","score":0.6856712102890015},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6673232316970825},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6391029953956604},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.6013731956481934},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5107629299163818},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.5027680397033691},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4350169599056244},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2247961461544037},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.11297944188117981},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.09164619445800781}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8848904371261597},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8553845882415771},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7702857851982117},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.7286398410797119},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.6856712102890015},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6673232316970825},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6391029953956604},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.6013731956481934},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5107629299163818},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.5027680397033691},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4350169599056244},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2247961461544037},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.11297944188117981},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.09164619445800781}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3289239.3289245","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3289239.3289245","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 8th Software Security, Protection, and Reverse Engineering Workshop","raw_type":"proceedings-article"},{"id":"pmh:oai:re.public.polimi.it:11311/1071459","is_oa":true,"landing_page_url":"http://hdl.handle.net/11311/1071459","pdf_url":null,"source":{"id":"https://openalex.org/S4306400312","display_name":"Virtual Community of Pathological Anatomy (University of Castilla La Mancha)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79189158","host_organization_name":"University of Castilla-La Mancha","host_organization_lineage":["https://openalex.org/I79189158"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:re.public.polimi.it:11311/1071459","is_oa":true,"landing_page_url":"http://hdl.handle.net/11311/1071459","pdf_url":null,"source":{"id":"https://openalex.org/S4306400312","display_name":"Virtual Community of Pathological Anatomy (University of Castilla La Mancha)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79189158","host_organization_name":"University of Castilla-La Mancha","host_organization_lineage":["https://openalex.org/I79189158"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W126407768","https://openalex.org/W179510128","https://openalex.org/W1553308705","https://openalex.org/W1590929875","https://openalex.org/W1965817476","https://openalex.org/W2083183119","https://openalex.org/W2092756033","https://openalex.org/W2095519872","https://openalex.org/W2100307718","https://openalex.org/W2101217223","https://openalex.org/W2128213437","https://openalex.org/W2145688371","https://openalex.org/W2156453323","https://openalex.org/W2176830056","https://openalex.org/W2215262239","https://openalex.org/W2559964890","https://openalex.org/W2574215789","https://openalex.org/W2588425636","https://openalex.org/W2620946705","https://openalex.org/W2742100187","https://openalex.org/W2766852928","https://openalex.org/W2806678366","https://openalex.org/W2806988516"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W1599449514","https://openalex.org/W2768892939","https://openalex.org/W2469507153","https://openalex.org/W2008790809","https://openalex.org/W2134874482","https://openalex.org/W4285507391","https://openalex.org/W4210907385"],"abstract_inverted_index":{"The":[0],"ever-increasing":[1],"number":[2],"of":[3,18,36,49,65],"malware":[4,23,57],"samples":[5],"demands":[6],"for":[7],"automated":[8],"tools":[9],"that":[10,45],"aid":[11],"the":[12,15,34,47,63],"analysts":[13],"in":[14,56],"reverse":[16],"engineering":[17],"complex":[19],"malicious":[20,37],"binaries.":[21],"Frequently,":[22],"communicates":[24],"over":[25],"an":[26],"encrypted":[27],"channel":[28],"with":[29],"external":[30],"network":[31,66],"resources":[32],"under":[33],"control":[35,46],"actors,":[38],"such":[39],"as":[40],"Command":[41],"and":[42,61],"Control":[43],"servers":[44],"botnet":[48],"infected":[50],"machines.":[51],"Hence,":[52],"a":[53],"key":[54],"aspect":[55],"analysis":[58],"is":[59],"uncovering":[60],"understanding":[62],"semantics":[64],"communications.":[67]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2018-12-11T00:00:00"}