{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,14]],"date-time":"2026-01-14T20:48:03Z","timestamp":1768423683124,"version":"3.49.0"},"reference-count":57,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2008,5]]},"DOI":"10.1109\/sp.2008.8","type":"proceedings-article","created":{"date-parts":[[2008,5,29]],"date-time":"2008-05-29T14:03:27Z","timestamp":1212069807000},"page":"296-310","source":"Crossref","is-referenced-by-count":30,"title":["Cloaker: Hardware Supported Rootkit Concealment"],"prefix":"10.1109","author":[{"given":"Francis M.","family":"David","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ellick M.","family":"Chan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jeffrey C.","family":"Carlyle","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Roy H.","family":"Campbell","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"35","first-page":"29","article-title":"integrating flexible support for security policies into the linux operating system","author":"loscocco","year":"2001","journal-title":"Proceedings of the USENIX Annual Technical Conference FREENIX Track"},{"key":"36","first-page":"279","article-title":"lmbench: portable tools for performance analysis","author":"mcvoy","year":"1996","journal-title":"Proceedings of the USENIX Annual Technical Conference"},{"key":"33","article-title":"vboot kit: compromising windows vista security","author":"kumar","year":"2007","journal-title":"Black Hat Europe'06"},{"key":"34","doi-asserted-by":"publisher","DOI":"10.1145\/224056.224075"},{"key":"39","year":"0"},{"key":"37","year":"0","journal-title":"MotorolaFans Forum"},{"key":"38","year":"0"},{"key":"43","article-title":"detecting windows server compromises","author":"rutkowska","year":"2003","journal-title":"HiverCon Security Conference"},{"key":"42","author":"rutkowska","year":"0","journal-title":"Patchfinder2"},{"key":"41","doi-asserted-by":"publisher","DOI":"10.1145\/1190216.1190270"},{"key":"40","first-page":"179","article-title":"copilot - a coprocessor-based kernel runtime integrity monitor","author":"nick","year":"2004","journal-title":"Proceedings of the 13th USENIX Security Symposium"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095826"},{"key":"23","author":"grand","year":"0"},{"key":"24","author":"grizzard","year":"2006","journal-title":"Towards Self-Healing Systems Re-establishing Trust in Compromised Systems"},{"key":"25","article-title":"implementing and detecting a pci rootkit","author":"heasman","year":"2006"},{"key":"26","article-title":"implementing and detecting an acpi bios rootkit","author":"heasman","year":"2006","journal-title":"Black Hat Europe'06"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1145\/378993.379006"},{"key":"28","first-page":"229","article-title":"oslo: improving the security of trusted computing","author":"kauer","year":"2007","journal-title":"Proc 10th Usenix Security Symp"},{"key":"29","article-title":"experiences with tripwire: using integrity checkers for intrusion detection","author":"kim","year":"0"},{"key":"3","year":"0"},{"key":"2","author":"alves","year":"0","journal-title":"TrustZone Integrated Hardware and Software Security"},{"key":"1","first-page":"1","article-title":"mapbox: using parameterized behavior classes to confine untrusted applications","author":"acharya","year":"2000","journal-title":"Proc 9th Usenix Security Symp"},{"key":"7","year":"0"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.1145\/945465.945467"},{"key":"6","year":"0","journal-title":"Five Billionth ARM Processor for Mobile Devices"},{"key":"5","year":"0","journal-title":"ARM926EJ-S Technical Reference Manual"},{"key":"32","first-page":"191","article-title":"secure execution via program shepherding","author":"kiriansky","year":"2002","journal-title":"Proc 10th Usenix Security Symp"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1997.601317"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.38"},{"key":"9","article-title":"firewire: all your memory are belong to us","author":"becher","year":"2005","journal-title":"CanSecWest"},{"key":"8","article-title":"paladin: automated detection and containment of rootkit attacks","author":"baliga","year":"2006"},{"key":"57","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2003.1209945"},{"key":"56","article-title":"worldwide pc adoption forecast, 2007 to 2015","author":"yates","year":"2007","journal-title":"Forrester Research Report"},{"key":"19","author":"op","year":"0","journal-title":"The FU rootkit"},{"key":"55","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2005.163"},{"key":"17","article-title":"porting choices to arm architecture based platforms","author":"david","year":"2007"},{"key":"18","author":"ferrie","year":"0","journal-title":"Attacks on Virtual Machine Emulators"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1145\/1247660.1247690"},{"key":"16","article-title":"a case study of the rustock rootkit and spam bot","author":"chiang","year":"2007","journal-title":"Proceedings of the First Workshop on Hot Topics in Understanding Botnets"},{"key":"13","author":"butler","year":"2004","journal-title":"VICE - Catch the hookers! In Black Hat USA"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2003.12.001"},{"key":"11","author":"browne","year":"2007","journal-title":"Multiple SIMs Quantifying the phenomenon taking mobile penetration beyond 100"},{"key":"12","year":"2006","journal-title":"Bryce Cogswell and Mark Russinovich RootkitRevealer"},{"key":"21","article-title":"a virtual machine introspection based architecture for intrusion detection","author":"garfinkel","year":"2003","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"20","article-title":"compatibility is not transparency: vmm detection myths and realities","author":"garfinkel","year":"2007","journal-title":"Proc Workshop Hot Topics in Operating Systems"},{"key":"49","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095812"},{"key":"48","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294294"},{"key":"45","article-title":"beyond the cpu: defeating hardware based ram acquisition","author":"rutkowska","year":"2007","journal-title":"Black Hat DC"},{"key":"44","article-title":"subverting vista kernel for fun and profit","author":"rutkowska","year":"2006","journal-title":"SyScan 2006"},{"key":"47","year":"0"},{"key":"46","year":"0"},{"key":"10","first-page":"368","article-title":"detecting stealth software with strider ghostbuster","author":"beck","year":"2005","journal-title":"Proc Int l Conf Dependable Systems and Networks"},{"key":"51","article-title":"eeye bootroot","author":"soeder","year":"2005","journal-title":"Black Hat USA"},{"key":"52","article-title":"raising the bar for windows rootkit detection","volume":"11","author":"sparks","year":"2005","journal-title":"Phrack"},{"key":"53","year":"0"},{"key":"54","year":"0","journal-title":"Texas Instruments OMAP Platform"},{"key":"50","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301329"}],"event":{"name":"2008 IEEE Symposium on Security and Privacy (sp 2008)","location":"Oakland, CA, USA","start":{"date-parts":[[2008,5,18]]},"end":{"date-parts":[[2008,5,22]]}},"container-title":["2008 IEEE Symposium on Security and Privacy (sp 2008)"],"original-title":[],"link":[{"URL":"https:\/\/2.zoppoz.workers.dev:443\/http\/xplorestaging.ieee.org\/ielx5\/4531131\/4531132\/04531160.pdf?arnumber=4531160","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,16]],"date-time":"2017-03-16T17:21:55Z","timestamp":1489684915000},"score":1,"resource":{"primary":{"URL":"https:\/\/2.zoppoz.workers.dev:443\/http\/ieeexplore.ieee.org\/document\/4531160\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008,5]]},"references-count":57,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1109\/sp.2008.8","relation":{},"ISSN":["1081-6011"],"issn-type":[{"value":"1081-6011","type":"print"}],"subject":[],"published":{"date-parts":[[2008,5]]}}}