{"id":"https://openalex.org/W6944136254","doi":"https://doi.org/10.18420/sicherheit2022_03","title":"5.-8. April 2022","display_name":"5.-8. April 2022","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W6944136254","doi":"https://doi.org/10.18420/sicherheit2022_03"},"language":"en","primary_location":{"id":"doi:10.18420/sicherheit2022_03","is_oa":true,"landing_page_url":"https://doi.org/10.18420/sicherheit2022_03","pdf_url":null,"source":{"id":"https://openalex.org/S7407052918","display_name":"Gesellschaft f\u00fcr Informatik (GI)","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.18420/sicherheit2022_03","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Gruber, Jan","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Gruber, Jan","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"Freiling, Felix C.","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Freiling, Felix C.","raw_affiliation_strings":[],"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.26676668,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.8313999772071838,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.8313999772071838,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.06319999694824219,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.01860000006854534,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sandbox","display_name":"Sandbox (software development)","score":0.8493000268936157},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7853999733924866},{"id":"https://openalex.org/keywords/turing","display_name":"Turing","score":0.43380001187324524},{"id":"https://openalex.org/keywords/interface","display_name":"Interface (matter)","score":0.41200000047683716},{"id":"https://openalex.org/keywords/graphical-user-interface","display_name":"Graphical user interface","score":0.3788999915122986},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.34139999747276306},{"id":"https://openalex.org/keywords/user-interface","display_name":"User interface","score":0.33869999647140503}],"concepts":[{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.8493000268936157},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7853999733924866},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.756600022315979},{"id":"https://openalex.org/C9870796","wikidata":"https://www.wikidata.org/wiki/Q490481","display_name":"Turing","level":2,"score":0.43380001187324524},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43070000410079956},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.41200000047683716},{"id":"https://openalex.org/C37789001","wikidata":"https://www.wikidata.org/wiki/Q782543","display_name":"Graphical user interface","level":2,"score":0.3788999915122986},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.34139999747276306},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.33869999647140503},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.3352999985218048},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.329800009727478},{"id":"https://openalex.org/C129671850","wikidata":"https://www.wikidata.org/wiki/Q210501","display_name":"Introspection","level":2,"score":0.3052999973297119},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.29120001196861267},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.263700008392334},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.26249998807907104},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.26159998774528503},{"id":"https://openalex.org/C146047270","wikidata":"https://www.wikidata.org/wiki/Q469666","display_name":"Human\u2013machine system","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.2581000030040741}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18420/sicherheit2022_03","is_oa":true,"landing_page_url":"https://doi.org/10.18420/sicherheit2022_03","pdf_url":null,"source":{"id":"https://openalex.org/S7407052918","display_name":"Gesellschaft f\u00fcr Informatik (GI)","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.18420/sicherheit2022_03","is_oa":true,"landing_page_url":"https://doi.org/10.18420/sicherheit2022_03","pdf_url":null,"source":{"id":"https://openalex.org/S7407052918","display_name":"Gesellschaft f\u00fcr Informatik (GI)","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6827962398529053}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Sandboxes":[0],"are":[1,33],"an":[2],"indispensable":[3],"tool":[4],"in":[5,88,113],"dynamic":[6],"malware":[7,12,112],"analysis":[8],"today.":[9],"However,":[10],"modern":[11],"often":[13],"employs":[14],"sandbox-detection":[15,31],"methods":[16],"to":[17,38,48,64,116],"exhibit":[18],"non-malicious":[19],"behavior":[20],"within":[21],"sandboxes":[22,118],"and":[23,74,102],"therefore":[24],"evade":[25],"automatic":[26],"analysis.":[27],"One":[28],"category":[29],"of":[30,42,83],"techniques":[32],"reverse":[34],"Turing":[35],"tests":[36],"(RTTs)":[37],"determine":[39,71],"the":[40,67,94,114],"presence":[41],"a":[43,54,89],"human":[44,76,85],"operator.":[45],"In":[46],"order":[47],"pass":[49],"these":[50],"RTTs,":[51],"we":[52],"propose":[53],"novel":[55],"approach":[56,101],"which":[57],"builds":[58],"upon":[59],"virtual":[60],"machine":[61],"introspection":[62],"(VMI)":[63],"automatically":[65],"reconstruct":[66],"graphical":[68],"user":[69],"interface,":[70],"clickable":[72],"buttons":[73],"inject":[75],"interface":[77,86],"device":[78],"events":[79],"via":[80],"direct":[81],"control":[82],"virtualized":[84],"devices":[87],"stealthy":[90],"way.":[91],"We":[92],"extend":[93],"VMI-based":[95],"open-source":[96],"sandbox":[97],"DRAKVUF":[98],"with":[99],"our":[100],"show":[103],"that":[104],"it":[105],"successfully":[106],"passes":[107],"RTTs":[108],"commonly":[109],"employed":[110],"by":[111],"wild":[115],"detect":[117]},"counts_by_year":[],"updated_date":"2025-11-06T06:51:31.235846","created_date":"2025-10-10T00:00:00"}