{"id":"https://openalex.org/W1532226963","doi":"https://doi.org/10.1007/978-3-540-31957-3_111","title":"Detecting the Deviations of Privileged Process Execution","display_name":"Detecting the Deviations of Privileged Process Execution","publication_year":2005,"publication_date":"2005-01-01","ids":{"openalex":"https://openalex.org/W1532226963","doi":"https://doi.org/10.1007/978-3-540-31957-3_111","mag":"1532226963"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-540-31957-3_111","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-540-31957-3_111","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010291758","display_name":"Purui Su","orcid":"https://orcid.org/0000-0001-6701-0383"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Purui Su","raw_affiliation_strings":["Graduate School of the Chinese Academy of Sciences, 100039, Beijing, P.R. China","State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, P.O.Box 8718, 100080, Beijing, P.R. China","Graduate School of the Chinese Academy of Sciences, Beijing, P.R. China","State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, Beijing, P.R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of the Chinese Academy of Sciences, 100039, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366"]},{"raw_affiliation_string":"State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, P.O.Box 8718, 100080, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"raw_affiliation_string":"Graduate School of the Chinese Academy of Sciences, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366"]},{"raw_affiliation_string":"State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101882730","display_name":"Dequan Li","orcid":"https://orcid.org/0000-0003-0229-5159"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dequan Li","raw_affiliation_strings":["Graduate School of the Chinese Academy of Sciences, 100039, Beijing, P.R. China","State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, P.O.Box 8718, 100080, Beijing, P.R. China","Graduate School of the Chinese Academy of Sciences, Beijing, P.R. China","State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, Beijing, P.R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of the Chinese Academy of Sciences, 100039, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366"]},{"raw_affiliation_string":"State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, P.O.Box 8718, 100080, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"raw_affiliation_string":"Graduate School of the Chinese Academy of Sciences, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366"]},{"raw_affiliation_string":"State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101745869","display_name":"Haipeng Qu","orcid":"https://orcid.org/0000-0002-1564-8980"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haipeng Qu","raw_affiliation_strings":["Graduate School of the Chinese Academy of Sciences, 100039, Beijing, P.R. China","State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, P.O.Box 8718, 100080, Beijing, P.R. China","State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, Beijing, P.R. China","Graduate School of the Chinese Academy of Sciences, Beijing, P.R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of the Chinese Academy of Sciences, 100039, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366"]},{"raw_affiliation_string":"State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, P.O.Box 8718, 100080, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"raw_affiliation_string":"State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"raw_affiliation_string":"Graduate School of the Chinese Academy of Sciences, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101790997","display_name":"Dengguo Feng","orcid":"https://orcid.org/0000-0002-8515-7124"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dengguo Feng","raw_affiliation_strings":["State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, P.O.Box 8718, 100080, Beijing, P.R. China","State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, Beijing, P.R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, P.O.Box 8718, 100080, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"raw_affiliation_string":"State Key Laboratory of Information Security Institute of Software, Chinese Academy of Sciences, Beijing, Beijing, P.R. China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"980","last_page":"988"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8909696340560913},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7787270545959473},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.6577915549278259},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6060932278633118},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.5037698149681091},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.47441643476486206},{"id":"https://openalex.org/keywords/pattern-matching","display_name":"Pattern matching","score":0.45718619227409363},{"id":"https://openalex.org/keywords/fuzzy-logic","display_name":"Fuzzy logic","score":0.4212307035923004},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4165043830871582},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.37348097562789917},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3563983142375946},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3496374785900116},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.13289257884025574}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8909696340560913},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7787270545959473},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.6577915549278259},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6060932278633118},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.5037698149681091},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.47441643476486206},{"id":"https://openalex.org/C68859911","wikidata":"https://www.wikidata.org/wiki/Q1503724","display_name":"Pattern matching","level":2,"score":0.45718619227409363},{"id":"https://openalex.org/C58166","wikidata":"https://www.wikidata.org/wiki/Q224821","display_name":"Fuzzy logic","level":2,"score":0.4212307035923004},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4165043830871582},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37348097562789917},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3563983142375946},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3496374785900116},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13289257884025574},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-3-540-31957-3_111","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-540-31957-3_111","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.699999988079071,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1539745582","https://openalex.org/W1941427975","https://openalex.org/W2099702841","https://openalex.org/W2100383182","https://openalex.org/W2101916222","https://openalex.org/W2106649514","https://openalex.org/W2123886726","https://openalex.org/W2129860818","https://openalex.org/W2143776233","https://openalex.org/W2186294736","https://openalex.org/W2186927350","https://openalex.org/W2914982603","https://openalex.org/W4249878828"],"related_works":["https://openalex.org/W2385758958","https://openalex.org/W2183313954","https://openalex.org/W1969635302","https://openalex.org/W2943461603","https://openalex.org/W3152476155","https://openalex.org/W2376046849","https://openalex.org/W2377397587","https://openalex.org/W3146948916","https://openalex.org/W1973375107","https://openalex.org/W2386564085"],"abstract_inverted_index":null,"counts_by_year":[],"updated_date":"2026-07-25T09:21:30.201066","created_date":"2025-10-10T00:00:00"}