{"id":"https://openalex.org/W14338099","doi":null,"title":"Anomaly detection in dynamic execution environments","display_name":"Anomaly detection in dynamic execution environments","publication_year":2005,"publication_date":"2005-01-01","ids":{"openalex":"https://openalex.org/W14338099","mag":"14338099"},"language":"en","primary_location":{"id":"mag:14338099","doi":null,"is_oa":false,"landing_page_url":"https://www.cs.unm.edu/~forrest/dissertations/inoue-dissertation.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114376382","display_name":"Stephanie Forrest","orcid":"https://orcid.org/0000-0002-5904-1646","observed_orcids":["https://orcid.org/0000-0002-5904-1646"]},"institutions":[{"id":"https://openalex.org/I169521973","display_name":"University of New Mexico","ror":"https://ror.org/05fs6jp91","country_code":"US","type":"education","lineage":["https://openalex.org/I169521973"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stephanie Forrest","raw_affiliation_strings":["THE UNIVERSITY OF NEW MEXICO"],"raw_orcid":"https://orcid.org/0000-0002-5904-1646","affiliations":[{"raw_affiliation_string":"THE UNIVERSITY OF NEW MEXICO","institution_ids":["https://openalex.org/I169521973"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5105420644","display_name":"Hajime Inoue","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I169521973","display_name":"University of New Mexico","ror":"https://ror.org/05fs6jp91","country_code":"US","type":"education","lineage":["https://openalex.org/I169521973"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hajime Inoue","raw_affiliation_strings":["THE UNIVERSITY OF NEW MEXICO"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"THE UNIVERSITY OF NEW MEXICO","institution_ids":["https://openalex.org/I169521973"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I169521973"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7143999934196472,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7143999934196472,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.11760000139474869,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.07540000230073929,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.9940000176429749},{"id":"https://openalex.org/keywords/virtual-machines","display_name":"virtual machines","score":0.9139999747276306},{"id":"https://openalex.org/keywords/permission-analysis","display_name":"permission analysis","score":0.6779999732971191},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.9739999771118164},{"id":"https://openalex.org/keywords/fault-detection","display_name":"fault detection","score":0.7490000128746033},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.6660000085830688},{"id":"https://openalex.org/keywords/c","display_name":"C++","score":0.9850000143051147}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8359291553497314},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.756549596786499},{"id":"https://openalex.org/C105122174","wikidata":"https://www.wikidata.org/wiki/Q322202","display_name":"Garbage collection","level":3,"score":0.5579897165298462},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.5241485238075256},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.5014820098876953},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4972286522388458},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.49424007534980774},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.48815757036209106},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.471316397190094},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.38717159628868103},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.35845261812210083},{"id":"https://openalex.org/C75403996","wikidata":"https://www.wikidata.org/wiki/Q5521979","display_name":"Garbage","level":2,"score":0.3327528238296509},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2184322476387024},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:14338099","doi":null,"is_oa":false,"landing_page_url":"https://www.cs.unm.edu/~forrest/dissertations/inoue-dissertation.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":69,"referenced_works":["https://openalex.org/W64298776","https://openalex.org/W116515026","https://openalex.org/W127506714","https://openalex.org/W130640788","https://openalex.org/W178367231","https://openalex.org/W197466659","https://openalex.org/W207617678","https://openalex.org/W1491178396","https://openalex.org/W1504054062","https://openalex.org/W1514258760","https://openalex.org/W1531339993","https://openalex.org/W1583464938","https://openalex.org/W1741154578","https://openalex.org/W1967923988","https://openalex.org/W1972544179","https://openalex.org/W1994208120","https://openalex.org/W2001890294","https://openalex.org/W2002250868","https://openalex.org/W2003211791","https://openalex.org/W2014530617","https://openalex.org/W2019448108","https://openalex.org/W2019810896","https://openalex.org/W2024713391","https://openalex.org/W2027773381","https://openalex.org/W2043811931","https://openalex.org/W2053986424","https://openalex.org/W2054687093","https://openalex.org/W2060525997","https://openalex.org/W2064238114","https://openalex.org/W2064700219","https://openalex.org/W2070535792","https://openalex.org/W2071136304","https://openalex.org/W2072737419","https://openalex.org/W2079029390","https://openalex.org/W2085325584","https://openalex.org/W2089821795","https://openalex.org/W2092492242","https://openalex.org/W2095881341","https://openalex.org/W2100885195","https://openalex.org/W2103042216","https://openalex.org/W2104898295","https://openalex.org/W2105557138","https://openalex.org/W2108112890","https://openalex.org/W2110270048","https://openalex.org/W2113095216","https://openalex.org/W2116409384","https://openalex.org/W2117115928","https://openalex.org/W2122950818","https://openalex.org/W2123886726","https://openalex.org/W2124526071","https://openalex.org/W2126107976","https://openalex.org/W2128217000","https://openalex.org/W2128284389","https://openalex.org/W2129860818","https://openalex.org/W2135143063","https://openalex.org/W2139165932","https://openalex.org/W2145677770","https://openalex.org/W2146509778","https://openalex.org/W2150847526","https://openalex.org/W2154554979","https://openalex.org/W2161641280","https://openalex.org/W2168396813","https://openalex.org/W2168884369","https://openalex.org/W2175079109","https://openalex.org/W2507342039","https://openalex.org/W2574891112","https://openalex.org/W2616927224","https://openalex.org/W2799061466","https://openalex.org/W3005566493"],"related_works":["https://openalex.org/W4232733686","https://openalex.org/W4416985145","https://openalex.org/W2471829614","https://openalex.org/W2922495980","https://openalex.org/W7095597400","https://openalex.org/W6964225535","https://openalex.org/W3126688474","https://openalex.org/W7167792233","https://openalex.org/W3192794757","https://openalex.org/W2743037220"],"abstract_inverted_index":{"In":[0],"the":[1],"past":[2],"few":[3],"years,":[4],"languages":[5],"which":[6,82],"run":[7],"on":[8],"virtual":[9],"machines,":[10],"like":[11],"Java":[12],"and":[13,25,32,35,42,95,97,122,131],"C#,":[14],"have":[15],"become":[16],"popular.":[17],"These":[18,108],"are":[19,27,110,133,135],"platforms":[20,47],"as":[21,23],"well":[22],"languages,":[24],"they":[26,132,134],"characterized":[28],"by":[29],"being":[30],"verifiable":[31],"garbage":[33,161],"collected,":[34],"include":[36],"Just-In-Time":[37],"compilers,":[38],"large":[39],"standard":[40],"libraries,":[41],"runtime":[43,56],"profilers.":[44],"I":[45,83,126,143],"call":[46,127],"with":[48],"these":[49],"features":[50,63],"dynamic":[51,129],"execution":[52,65],"environments":[53],"(DEEs).":[54],"\r\nThe":[55],"infrastructure":[57],"of":[58,64,75,78,89],"DEEs":[59],"allows":[60],"access":[61],"to":[62,70,86,137,153],"that":[66,100,146],"were":[67],"previously":[68],"difficult":[69],"observe.":[71],"My":[72],"research":[73],"consists":[74],"a":[76,90],"series":[77],"case":[79],"studies":[80],"in":[81,158],"build":[84,114],"systems":[85,109,117],"classify":[87],"behavior":[88],"particular":[91],"feature":[92],"into":[93],"normal":[94],"abnormal":[96],"then":[98],"use":[99],"classification":[101],"for":[102,118],"either":[103],"security":[104],"or":[105,140],"optimization":[106],"purposes.":[107],"anomaly":[111,115,148],"detectors.":[112],"\r\nI":[113],"detection":[116],"method":[119,123],"invocations,":[120],"permissions,":[121],"invocation":[124],"sequences.":[125],"them":[128],"sandboxes,":[130],"used":[136,152],"detect":[138],"intrusions":[139],"system":[141],"faults.":[142],"also":[144],"show":[145],"an":[147,159],"detector":[149],"can":[150],"be":[151],"predict":[154],"object":[155],"lifetimes":[156],"resulting":[157],"improved":[160],"collector.":[162]},"counts_by_year":[{"year":2014,"cited_by_count":2}],"updated_date":"2026-08-08T07:41:36.138363","created_date":"2016-06-24T00:00:00"}