{"id":"https://openalex.org/W7125800913","doi":"https://doi.org/10.1093/comjnl/bxag007","title":"RecObj: detection and recovery of hidden objects based on virtualization","display_name":"RecObj: detection and recovery of hidden objects based on virtualization","publication_year":2026,"publication_date":"2026-01-09","ids":{"openalex":"https://openalex.org/W7125800913","doi":"https://doi.org/10.1093/comjnl/bxag007"},"language":"en","primary_location":{"id":"doi:10.1093/comjnl/bxag007","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxag007","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123897382","display_name":"Yun Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I2802624667","display_name":"Hefei Institutes of Physical Science","ror":"https://ror.org/046n57345","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I2802624667"]},{"id":"https://openalex.org/I4210099079","display_name":"Institute of Intelligent Machines","ror":"https://ror.org/00w0qep84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I2802624667","https://openalex.org/I4210099079"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yun Wu","raw_affiliation_strings":["Institute of Intelligent Machines, Hefei Institutes of Physical Sciences, Chinese Academy of Sciences , 350 Shushanhu Road, Hefei 230031, Anhui ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Intelligent Machines, Hefei Institutes of Physical Sciences, Chinese Academy of Sciences , 350 Shushanhu Road, Hefei 230031, Anhui ,","institution_ids":["https://openalex.org/I2802624667","https://openalex.org/I4210099079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124012406","display_name":"Yang Bao","orcid":null},"institutions":[{"id":"https://openalex.org/I2802541053","display_name":"Academy of Military Medical Sciences","ror":"https://ror.org/02bv3c993","country_code":"CN","type":"facility","lineage":["https://openalex.org/I2802541053"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Bao","raw_affiliation_strings":["Institute of Systems Engineering, Academy of Military Sciences , No. 13 Dacheng Road, Fengtai District 100082, Beijing ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Systems Engineering, Academy of Military Sciences , No. 13 Dacheng Road, Fengtai District 100082, Beijing ,","institution_ids":["https://openalex.org/I2802541053"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123940766","display_name":"Yonggang Li","orcid":null},"institutions":[{"id":"https://openalex.org/I124841900","display_name":"Xuzhou University of Technology","ror":"https://ror.org/02315by94","country_code":"CN","type":"education","lineage":["https://openalex.org/I124841900"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yonggang Li","raw_affiliation_strings":["School of Computer Science and Technology in CUMT , No. 1, Daxue Road, 221116, Xuzhou, Jiangsu ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology in CUMT , No. 1, Daxue Road, 221116, Xuzhou, Jiangsu ,","institution_ids":["https://openalex.org/I124841900"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123924510","display_name":"Guang Jin","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guang Jin","raw_affiliation_strings":["College of Systems Engineering, National University of Defense Technology , No. 137 Yanwachi Street, Changsha 410073, Hunan ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Systems Engineering, National University of Defense Technology , No. 137 Yanwachi Street, Changsha 410073, Hunan ,","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045469613","display_name":"Chaoyuan Cui","orcid":"https://orcid.org/0000-0003-3304-5734"},"institutions":[{"id":"https://openalex.org/I2802624667","display_name":"Hefei Institutes of Physical Science","ror":"https://ror.org/046n57345","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I2802624667"]},{"id":"https://openalex.org/I4210099079","display_name":"Institute of Intelligent Machines","ror":"https://ror.org/00w0qep84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I2802624667","https://openalex.org/I4210099079"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Chaoyuan Cui","raw_affiliation_strings":["Institute of Intelligent Machines, Hefei Institutes of Physical Sciences, Chinese Academy of Sciences , 350 Shushanhu Road, Hefei 230031, Anhui ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Intelligent Machines, Hefei Institutes of Physical Sciences, Chinese Academy of Sciences , 350 Shushanhu Road, Hefei 230031, Anhui ,","institution_ids":["https://openalex.org/I2802624667","https://openalex.org/I4210099079"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5045469613"],"corresponding_institution_ids":["https://openalex.org/I2802624667","https://openalex.org/I4210099079"],"apc_list":{"value":2635,"currency":"GBP","value_usd":3232},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.09712288,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"69","issue":"6","first_page":"1015","last_page":"1026"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6686000227928162,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6686000227928162,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.05480000004172325,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.026100000366568565,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/rootkit","display_name":"Rootkit","score":0.7487999796867371},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.7084000110626221},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5435000061988831},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.5214999914169312},{"id":"https://openalex.org/keywords/temporal-isolation-among-virtual-machines","display_name":"Temporal isolation among virtual machines","score":0.4903999865055084},{"id":"https://openalex.org/keywords/object","display_name":"Object (grammar)","score":0.47609999775886536},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.42570000886917114}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8562999963760376},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.7487999796867371},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.7084000110626221},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5435000061988831},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.5214999914169312},{"id":"https://openalex.org/C142355369","wikidata":"https://www.wikidata.org/wiki/Q7698919","display_name":"Temporal isolation among virtual machines","level":4,"score":0.4903999865055084},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.47609999775886536},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.42570000886917114},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.3935000002384186},{"id":"https://openalex.org/C3073032","wikidata":"https://www.wikidata.org/wiki/Q15912075","display_name":"Information hiding","level":3,"score":0.36469998955726624},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.35100001096725464},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.34470000863075256},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.33820000290870667},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.3377000093460083},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3012000024318695},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2896000146865845},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2831999957561493},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2720000147819519},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2676999866962433},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.263700008392334},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.2535000145435333}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/comjnl/bxag007","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxag007","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W2005068448","https://openalex.org/W2019731328","https://openalex.org/W2022570654","https://openalex.org/W2054472680","https://openalex.org/W2074851655","https://openalex.org/W2091618476","https://openalex.org/W2098279938","https://openalex.org/W2098367901","https://openalex.org/W2107140174","https://openalex.org/W2110756602","https://openalex.org/W2139949621","https://openalex.org/W2172131317","https://openalex.org/W2290702548","https://openalex.org/W2296795551","https://openalex.org/W2344380211","https://openalex.org/W2524202097","https://openalex.org/W2544510561","https://openalex.org/W2602229646","https://openalex.org/W2620399380","https://openalex.org/W2750034649","https://openalex.org/W2752302411","https://openalex.org/W2910102854","https://openalex.org/W4247984266","https://openalex.org/W4362598384"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"The":[1,182],"security":[2,22,43,72],"of":[3,14,42,111,121,127,186],"operating":[4],"system":[5],"has":[6],"always":[7],"been":[8],"challenged":[9],"by":[10,138],"the":[11,27,40,46,55,101,109,119,124,158,164,173,177,191],"hidden":[12,56,82,102,137,151,165,178],"operation":[13,175],"rootkits.":[15],"Based":[16],"on":[17,50,90],"virtual":[18,29],"machine":[19,30],"introspection":[20],"technology,":[21,143],"tools":[23],"are":[24],"deployed":[25],"outside":[26],"target":[28],"(TVM)":[31],"that":[32,65],"provides":[33],"strict":[34],"isolation":[35],"between":[36,114],"them":[37,61],"and":[38,85,104,118,135,172,184,195],"enhances":[39],"anti-interference":[41],"tools.":[44,73],"However,":[45],"current":[47],"methods":[48],"based":[49,89],"virtualization":[51,91],"can":[52,130],"only":[53],"detect":[54],"objects":[57,152],"but":[58],"cannot":[59],"make":[60],"visible":[62,155],"to":[63,67,99,149,153,163,176],"TVM":[64,169],"leads":[66],"handling":[68],"failure":[69],"for":[70],"host-based":[71],"To":[74],"solve":[75],"this":[76,78],"problem,":[77],"paper":[79],"proposes":[80],"a":[81],"object":[83,141,166,179],"detection":[84,126],"recovery":[86],"method":[87],"RecObj":[88,93,144,187],"technology.":[92],"uses":[94,145],"multidimensional":[95],"semantic":[96],"views":[97],"cross-comparison":[98],"discover":[100],"processes":[103,134],"files.":[105],"By":[106],"dynamically":[107],"monitoring":[108],"change":[110,120],"logical":[112],"relationship":[113],"loadable":[115],"kernel":[116,140],"modules":[117,136],"their":[122],"states,":[123],"hiding":[125,192],"rootkit":[128],"itself":[129],"be":[131,154],"realized.":[132],"For":[133],"direct":[139],"manipulation":[142],"memory":[146],"writable":[147],"mapping":[148],"restore":[150],"objects.":[156],"Finally,":[157],"processing":[159,196],"signal":[160],"is":[161,180,188],"transmitted":[162],"manager":[167],"in":[168],"through":[170,190],"xenstore,":[171],"cleanup":[174],"completed.":[181],"feasibility":[183],"effectiveness":[185],"proved":[189],"detection,":[193],"recovery,":[194],"experiments.":[197]},"counts_by_year":[],"updated_date":"2026-06-21T06:12:48.119943","created_date":"2026-01-28T00:00:00"}