{"id":"https://openalex.org/W2184246722","doi":"https://doi.org/10.1109/trustcom-bigdatase-ispa.2015.401","title":"Transparent Page-Based Kernel and User Space Execution Tracing from a Custom Minimal ARM Hypervisor","display_name":"Transparent Page-Based Kernel and User Space Execution Tracing from a Custom Minimal ARM Hypervisor","publication_year":2015,"publication_date":"2015-08-20","ids":{"openalex":"https://openalex.org/W2184246722","doi":"https://doi.org/10.1109/trustcom-bigdatase-ispa.2015.401","mag":"2184246722"},"language":"en","primary_location":{"id":"mag:2184246722","doi":"https://doi.org/10.1109/trustcom-bigdatase-ispa.2015.401","is_oa":false,"landing_page_url":"http://dblp.uni-trier.de/db/conf/trustcom/trustcom2015-1.html#HorschW15","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Trust, Security And Privacy In Computing And Communications","raw_type":null},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080222919","display_name":"Julian Horsch","orcid":"https://orcid.org/0000-0001-9018-7048","observed_orcids":["https://orcid.org/0000-0001-9018-7048"]},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Julian Horsch","raw_affiliation_strings":["Fraunhofer AISEC, Garching near Munich, Germany"],"raw_orcid":"https://orcid.org/0000-0001-9018-7048","affiliations":[{"raw_affiliation_string":"Fraunhofer AISEC, Garching near Munich, Germany","institution_ids":["https://openalex.org/I4210136922"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025303851","display_name":"Sascha Wessel","orcid":"https://orcid.org/0000-0002-9063-8416","observed_orcids":["https://orcid.org/0000-0002-9063-8416"]},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sascha Wessel","raw_affiliation_strings":["Fraunhofer AISEC, Garching near Munich, Germany"],"raw_orcid":"https://orcid.org/0000-0002-9063-8416","affiliations":[{"raw_affiliation_string":"Fraunhofer AISEC, Garching near Munich, Germany","institution_ids":["https://openalex.org/I4210136922"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210136922"],"apc_list":null,"apc_paid":null,"fwci":1.5218,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.83137552,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":97},"biblio":{"volume":"1","issue":null,"first_page":"408","last_page":"417"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/program-tracing","display_name":"program tracing","score":0.9509999752044678},{"id":"https://openalex.org/keywords/hardware-virtualization","display_name":"hardware virtualization","score":0.8709999918937683},{"id":"https://openalex.org/keywords/page-faults","display_name":"page faults","score":0.6470000147819519},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"malware analysis","score":0.6970000267028809},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.9580000042915344},{"id":"https://openalex.org/keywords/return-oriented-programming","display_name":"return-oriented programming","score":0.8970000147819519},{"id":"https://openalex.org/keywords/control-flow-hijacking","display_name":"control flow hijacking","score":0.9390000104904175},{"id":"https://openalex.org/keywords/android","display_name":"Android","score":0.7979999780654907}],"concepts":[{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.8391276597976685},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8137996196746826},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.7372277975082397},{"id":"https://openalex.org/C2775877400","wikidata":"https://www.wikidata.org/wiki/Q1142183","display_name":"User space","level":2,"score":0.6970511674880981},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.6193554997444153},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5830442905426025},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5457094311714172},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.5296502113342285},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.5081164836883545},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.46933332085609436},{"id":"https://openalex.org/C68793194","wikidata":"https://www.wikidata.org/wiki/Q1616095","display_name":"Hardware virtualization","level":5,"score":0.4685180187225342},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4622599184513092},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.4513992369174957},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.4411199688911438},{"id":"https://openalex.org/C76518257","wikidata":"https://www.wikidata.org/wiki/Q271680","display_name":"Software framework","level":5,"score":0.41156303882598877},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.32045382261276245},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.20326435565948486},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.16793984174728394},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.16609272360801697},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.15444037318229675}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2184246722","doi":"https://doi.org/10.1109/trustcom-bigdatase-ispa.2015.401","is_oa":false,"landing_page_url":"http://dblp.uni-trier.de/db/conf/trustcom/trustcom2015-1.html#HorschW15","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Trust, Security And Privacy In Computing And Communications","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W17417926","https://openalex.org/W70478248","https://openalex.org/W1515653707","https://openalex.org/W1641762327","https://openalex.org/W1851403712","https://openalex.org/W1941427975","https://openalex.org/W1953670109","https://openalex.org/W1982829328","https://openalex.org/W1990360323","https://openalex.org/W2029224396","https://openalex.org/W2055184282","https://openalex.org/W2070041400","https://openalex.org/W2098431065","https://openalex.org/W2105904466","https://openalex.org/W2109219878","https://openalex.org/W2117115928","https://openalex.org/W2117798902","https://openalex.org/W2120900307","https://openalex.org/W2121468041","https://openalex.org/W2122366494","https://openalex.org/W2131234343","https://openalex.org/W2139949621","https://openalex.org/W2140807364","https://openalex.org/W2144006591","https://openalex.org/W2146431583","https://openalex.org/W2159170263","https://openalex.org/W2168760272","https://openalex.org/W2168872572","https://openalex.org/W2294049595","https://openalex.org/W2397854955","https://openalex.org/W2403154275","https://openalex.org/W2785216240"],"related_works":["https://openalex.org/W2766981463","https://openalex.org/W2393323598","https://openalex.org/W7098978506","https://openalex.org/W7097306073","https://openalex.org/W1700025863","https://openalex.org/W3086419562","https://openalex.org/W7096008144","https://openalex.org/W2901898592","https://openalex.org/W7048821410","https://openalex.org/W3129180556"],"abstract_inverted_index":{"In":[0],"this":[1],"paper,":[2],"we":[3],"present":[4,97],"a":[5,15,98,113,140],"framework":[6,20,50,58,85,104,149,163],"for":[7,83,102,169,180,194],"transparent":[8,60],"kernel":[9,64],"and":[10,61,65,91,150,175],"user":[11,66],"execution":[12],"tracing":[13],"from":[14],"minimal":[16],"ARM":[17,26,189],"hypervisor.":[18,204],"The":[19,44,57,80,130],"utilizes":[21],"hardware-supported":[22],"virtualization":[23,191],"on":[24,139,177,198],"modern":[25],"CPUs":[27],"to":[28,52,63,111,118],"restrict":[29],"the":[30,36,41,49,77,84,103,107,120,148,151,162,186,203],"number":[31],"of":[32,134],"executable":[33],"pages":[34],"in":[35,76,157],"system":[37],"without":[38],"interfering":[39],"with":[40,144,202],"traced":[42,78],"guest.":[43,79],"resulting":[45],"page":[46],"faults":[47],"give":[48],"access":[51],"page-granular":[53,115],"control":[54,116,123],"flow":[55,117,124],"information.":[56],"is":[59],"agnostic":[62],"space":[67],"software":[68],"not":[69,164],"requiring":[70],"any":[71],"changes":[72],"or":[73],"additional":[74],"components":[75],"application":[81,101,153],"scenarios":[82],"include":[86],"malware":[87,89],"analysis,":[88],"detection":[90],"runtime":[92],"integrity":[93],"protection.":[94],"We":[95],"furthermore":[96],"detailed":[99,131],"example":[100,152],"which":[105],"uses":[106],"provided":[108],"trace":[109],"data":[110],"enforce":[112],"particular":[114],"defend":[119],"guest":[121],"against":[122],"hijacking":[125],"attacks":[126],"like":[127],"return-oriented":[128],"programming.":[129],"performance":[132],"analysis":[133],"our":[135],"prototype":[136],"implementation":[137],"running":[138],"Cortex-A15":[141],"development":[142],"board":[143],"Android":[145],"shows":[146,184],"that":[147,185],"perform":[154],"well":[155],"even":[156],"adverse":[158],"benchmarking":[159],"scenarios.":[160],"Therefore,":[161],"only":[165],"can":[166],"be":[167],"useful":[168],"realizing":[170],"virtualization-based":[171],"security":[172],"mechanisms":[173,196],"known":[174],"researched":[176],"x86":[178],"platforms":[179],"ARM,":[181],"but":[182],"also":[183],"very":[187,199],"lightweight":[188],"hardware":[190],"support":[192],"allows":[193],"new":[195],"relying":[197],"frequent":[200],"interaction":[201]},"counts_by_year":[{"year":2020,"cited_by_count":1},{"year":2017,"cited_by_count":3}],"updated_date":"2026-10-26T11:51:55.731654","created_date":"2016-06-24T00:00:00"}