{"id":"https://openalex.org/W2809988613","doi":"https://doi.org/10.1109/access.2018.2851192","title":"Vanguard: A Cache-Level Sensitive File Integrity Monitoring System in Virtual Machine Environment","display_name":"Vanguard: A Cache-Level Sensitive File Integrity Monitoring System in Virtual Machine Environment","publication_year":2018,"publication_date":"2018-01-01","ids":{"openalex":"https://openalex.org/W2809988613","doi":"https://doi.org/10.1109/access.2018.2851192","mag":"2809988613"},"language":"en","primary_location":{"id":"doi:10.1109/access.2018.2851192","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2851192","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2018.2851192","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003001715","display_name":"Bin Shi","orcid":"https://orcid.org/0000-0001-8272-9361"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Shi","raw_affiliation_strings":["School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100688208","display_name":"Bo Li","orcid":"https://orcid.org/0000-0002-6297-712X"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Li","raw_affiliation_strings":["School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6297-712X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101581995","display_name":"Lei Cui","orcid":"https://orcid.org/0000-0002-8478-3297"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Cui","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101151857","display_name":"Liu Ouyang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu Ouyang","raw_affiliation_strings":["Marketing Department, State Grid Zhejiang Electric Power Co., Ltd, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Marketing Department, State Grid Zhejiang Electric Power Co., Ltd, Hangzhou, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.3516,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.85769783,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"6","issue":null,"first_page":"38567","last_page":"38577"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8656612038612366},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.7554113268852234},{"id":"https://openalex.org/keywords/vanguard","display_name":"Vanguard","score":0.7048788070678711},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.6616412997245789},{"id":"https://openalex.org/keywords/file-system","display_name":"File system","score":0.591528058052063},{"id":"https://openalex.org/keywords/page-cache","display_name":"Page cache","score":0.5195394158363342},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.437531054019928},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.43279603123664856},{"id":"https://openalex.org/keywords/cpu-cache","display_name":"CPU cache","score":0.31331104040145874},{"id":"https://openalex.org/keywords/cache-algorithms","display_name":"Cache algorithms","score":0.2661832571029663}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8656612038612366},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.7554113268852234},{"id":"https://openalex.org/C2779197502","wikidata":"https://www.wikidata.org/wiki/Q255546","display_name":"Vanguard","level":2,"score":0.7048788070678711},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.6616412997245789},{"id":"https://openalex.org/C2780940931","wikidata":"https://www.wikidata.org/wiki/Q174989","display_name":"File system","level":2,"score":0.591528058052063},{"id":"https://openalex.org/C36340418","wikidata":"https://www.wikidata.org/wiki/Q7124288","display_name":"Page cache","level":5,"score":0.5195394158363342},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.437531054019928},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.43279603123664856},{"id":"https://openalex.org/C189783530","wikidata":"https://www.wikidata.org/wiki/Q352090","display_name":"CPU cache","level":3,"score":0.31331104040145874},{"id":"https://openalex.org/C38556500","wikidata":"https://www.wikidata.org/wiki/Q13404475","display_name":"Cache algorithms","level":4,"score":0.2661832571029663},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2018.2851192","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2851192","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c1e0b50cbcfe47fdbbe87470a9dd0cb4","is_oa":true,"landing_page_url":"https://doaj.org/article/c1e0b50cbcfe47fdbbe87470a9dd0cb4","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 6, Pp 38567-38577 (2018)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2018.2851192","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2851192","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8299999833106995}],"awards":[{"id":"https://openalex.org/G8480117840","display_name":null,"funder_award_id":"61602465","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W604679858","https://openalex.org/W1976146154","https://openalex.org/W2004232665","https://openalex.org/W2014517322","https://openalex.org/W2015083179","https://openalex.org/W2017889480","https://openalex.org/W2036329595","https://openalex.org/W2040553287","https://openalex.org/W2048997531","https://openalex.org/W2056590904","https://openalex.org/W2066148641","https://openalex.org/W2112731379","https://openalex.org/W2115893096","https://openalex.org/W2122587458","https://openalex.org/W2128852824","https://openalex.org/W2130694829","https://openalex.org/W2135401114","https://openalex.org/W2139949621","https://openalex.org/W2150615820","https://openalex.org/W2150709728","https://openalex.org/W2154081981","https://openalex.org/W2156368296","https://openalex.org/W2159238794","https://openalex.org/W2164845301","https://openalex.org/W2168872572","https://openalex.org/W2316567509","https://openalex.org/W2461242001","https://openalex.org/W2531967557","https://openalex.org/W2536497394","https://openalex.org/W3005298591","https://openalex.org/W3137630642","https://openalex.org/W4210893616","https://openalex.org/W4244510028","https://openalex.org/W4248670172","https://openalex.org/W4255163382","https://openalex.org/W6664479855","https://openalex.org/W6728679191"],"related_works":["https://openalex.org/W1496086148","https://openalex.org/W2012518269","https://openalex.org/W2363672756","https://openalex.org/W2551263236","https://openalex.org/W2167303720","https://openalex.org/W2163134761","https://openalex.org/W4240679026","https://openalex.org/W4243772489","https://openalex.org/W2086718556","https://openalex.org/W2077899426"],"abstract_inverted_index":{"Sensitive":[0],"files":[1,69,147],"in":[2,20,70],"computer":[3],"systems":[4,187],"such":[5],"as":[6,35],"executable":[7],"programs,":[8],"configuration,":[9],"and":[10,25,125,151,180,183,194,203],"authorization":[11],"information":[12],"have":[13],"a":[14,78,102],"great":[15],"importance":[16],"of":[17,22,67,77,115,201],"their":[18],"own,":[19],"terms":[21],"both":[23,122,181],"confidentiality":[24],"functionality.":[26],"To":[27,134],"protect":[28],"sensitive":[29,52,104,146],"files,":[30],"an":[31,74],"effective":[32],"approach":[33],"named":[34,109],"file":[36,61,79,105,117,132],"integrity":[37,62,106],"monitoring":[38,63,68,107],"is":[39,161,169],"proposed":[40],"to":[41,56,94,111,143,171],"detect":[42,144],"aggressive":[43],"behaviors":[44],"by":[45,84],"verifying":[46],"all":[47],"the":[48,82,89,95,113,130,136,141,155,164,195,199],"actions":[49],"on":[50,177],"these":[51],"files.":[53],"However,":[54],"due":[55],"semantic":[57],"gap":[58],"problems,":[59],"current":[60],"tools":[64],"are":[65,148,188],"incapable":[66],"memory,":[71],"so":[72,167],"that":[73,205],"illegal":[75,131],"modification":[76],"may":[80],"bypass":[81],"detection":[83],"deliberately":[85],"hiding":[86],"itself":[87],"inside":[88],"cache":[90,126],"without":[91],"actually":[92],"committing":[93],"disk.":[96],"In":[97],"this":[98],"paper,":[99],"we":[100,139],"propose":[101],"runtime":[103],"system":[108,157,166],"Vanguard,":[110],"satisfy":[112],"requirement":[114],"cache-level":[116,137],"protection.":[118],"It":[119],"can":[120],"monitor":[121],"IO":[123],"operations":[124],"operations,":[127],"thereby":[128],"deterring":[129],"accesses.":[133],"achieve":[135],"monitoring,":[138],"explore":[140],"techniques":[142],"when":[145],"loaded":[149],"into":[150],"swapped":[152],"out":[153],"from":[154,163],"operating":[156,186],"page":[158],"cache.":[159],"Vanguard":[160,176,202],"isolated":[162],"monitored":[165],"it":[168],"hard":[170],"be":[172],"subverted.":[173],"We":[174,190],"implement":[175],"QEMU/KVM":[178],"platform,":[179],"Linux":[182],"Windows":[184],"guest":[185],"supported.":[189],"conduct":[191],"several":[192],"experiments,":[193],"experimental":[196],"results":[197],"show":[198],"effectiveness":[200],"imply":[204],"our":[206],"method":[207],"incurs":[208],"acceptable":[209],"overhead.":[210]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":4}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}