{"id":"https://openalex.org/W2884599222","doi":"https://doi.org/10.1109/access.2018.2859767","title":"Checking Function-Level Kernel Control Flow Integrity for Cloud Computing","display_name":"Checking Function-Level Kernel Control Flow Integrity for Cloud Computing","publication_year":2018,"publication_date":"2018-01-01","ids":{"openalex":"https://openalex.org/W2884599222","doi":"https://doi.org/10.1109/access.2018.2859767","mag":"2884599222"},"language":"en","primary_location":{"id":"doi:10.1109/access.2018.2859767","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2859767","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2018.2859767","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100391268","display_name":"Lin Ye","orcid":"https://orcid.org/0000-0002-9647-0271"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lin Ye","raw_affiliation_strings":["Harbin Institute of Technology, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0002-9647-0271","affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072540013","display_name":"Xiangzhan Yu","orcid":"https://orcid.org/0000-0002-1183-2844"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangzhan Yu","raw_affiliation_strings":["Harbin Institute of Technology, Harbin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100743046","display_name":"Lei Yu","orcid":"https://orcid.org/0000-0001-5968-0344"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lei Yu","raw_affiliation_strings":["School of Computer Science, Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103258322","display_name":"Bin Guo","orcid":"https://orcid.org/0000-0003-0170-1725"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Guo","raw_affiliation_strings":["Harbin Institute of Technology, Harbin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038927310","display_name":"Dongyang Zhan","orcid":"https://orcid.org/0000-0003-1981-5878"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongyang Zhan","raw_affiliation_strings":["Harbin Institute of Technology, Harbin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060514022","display_name":"Xiaojiang Du","orcid":"https://orcid.org/0000-0003-4235-9671"},"institutions":[{"id":"https://openalex.org/I84392919","display_name":"Temple University","ror":"https://ror.org/00kx1jb78","country_code":"US","type":"education","lineage":["https://openalex.org/I84392919"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaojiang Du","raw_affiliation_strings":["Department of Computer and Information Sciences, Temple University, Philadelphia, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Information Sciences, Temple University, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I84392919"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057916222","display_name":"Mohsen Guizani","orcid":"https://orcid.org/0000-0002-8972-8094"},"institutions":[{"id":"https://openalex.org/I155093810","display_name":"University of Idaho","ror":"https://ror.org/03hbp5t65","country_code":"US","type":"education","lineage":["https://openalex.org/I155093810"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohsen Guizani","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Idaho, Moscow, ID, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Idaho, Moscow, ID, USA","institution_ids":["https://openalex.org/I155093810"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.1638,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.58440163,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"6","issue":null,"first_page":"41856","last_page":"41865"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8579659461975098},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.6874818801879883},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.6673483848571777},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.6455732583999634},{"id":"https://openalex.org/keywords/rootkit","display_name":"Rootkit","score":0.634658932685852},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.6338032484054565},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.6336637735366821},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.5776445269584656},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.5674905180931091},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.5567010641098022},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.5399103164672852},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4461207091808319},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4098612070083618},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3362427353858948},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.16319182515144348}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8579659461975098},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.6874818801879883},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.6673483848571777},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.6455732583999634},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.634658932685852},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.6338032484054565},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.6336637735366821},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.5776445269584656},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.5674905180931091},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5567010641098022},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.5399103164672852},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4461207091808319},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4098612070083618},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3362427353858948},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.16319182515144348},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2018.2859767","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2859767","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:19a8eadc66b14df9a10593edb7af427a","is_oa":true,"landing_page_url":"https://doaj.org/article/19a8eadc66b14df9a10593edb7af427a","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 6, Pp 41856-41865 (2018)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2018.2859767","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2859767","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7015120811","display_name":null,"funder_award_id":"[2015]3036","funder_id":"https://openalex.org/F4320322725","funder_display_name":"China Scholarship Council"}],"funders":[{"id":"https://openalex.org/F4320322725","display_name":"China Scholarship Council","ror":"https://ror.org/04atp4p48"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W975191401","https://openalex.org/W1549154409","https://openalex.org/W1641762327","https://openalex.org/W1752315353","https://openalex.org/W1941427975","https://openalex.org/W1999687070","https://openalex.org/W2015215458","https://openalex.org/W2022570654","https://openalex.org/W2056388267","https://openalex.org/W2069536078","https://openalex.org/W2071289869","https://openalex.org/W2080765376","https://openalex.org/W2088503757","https://openalex.org/W2101889913","https://openalex.org/W2114337635","https://openalex.org/W2122097147","https://openalex.org/W2144052131","https://openalex.org/W2146431583","https://openalex.org/W2155079825","https://openalex.org/W2170018742","https://openalex.org/W2172131317","https://openalex.org/W2426642858","https://openalex.org/W3150428227","https://openalex.org/W4238573013","https://openalex.org/W4246003516","https://openalex.org/W6637110787","https://openalex.org/W6717994348"],"related_works":["https://openalex.org/W2393767428","https://openalex.org/W1979469929","https://openalex.org/W2550565492","https://openalex.org/W2148749405","https://openalex.org/W2743348030","https://openalex.org/W2145292010","https://openalex.org/W2747005099","https://openalex.org/W2086039693","https://openalex.org/W1665205069","https://openalex.org/W3035751361"],"abstract_inverted_index":{"With":[0,159],"the":[1,6,21,41,52,57,76,80,84,89,103,120,125,134,140,147,160,175,180],"advancement":[2],"of":[3,11,23,51,108,162],"cloud":[4,24],"computing,":[5],"control":[7,136,142,154],"flow":[8,143],"integrity":[9],"(CFI)":[10],"virtual":[12,58,122,165],"machines'":[13],"kernel":[14,70,112,135],"becomes":[15],"more":[16,18],"and":[17,29,88,105,164],"important":[19],"for":[20],"security":[22],"services.":[25],"Many":[26],"CFI":[27,71],"checking":[28,72],"protecting":[30],"approaches":[31,39],"have":[32,40],"been":[33],"proposed.":[34],"Among":[35],"them,":[36],"dynamic":[37,90],"analysis":[38,87,104],"best":[42],"detection":[43,97,186],"capability,":[44],"but":[45],"they":[46],"are":[47,111],"rarely":[48],"used":[49],"because":[50],"high":[53,96,185],"overhead":[54,118],"introduced":[55],"to":[56,60,74,119,132],"machines":[59,123],"be":[61],"monitored.":[62],"In":[63],"this":[64],"paper,":[65],"we":[66,150,169],"propose":[67,129],"a":[68,171],"function-level":[69],"approach":[73],"meet":[75],"performance":[77],"requirements":[78],"in":[79,156,174],"cloud.":[81],"By":[82],"combining":[83],"static":[85],"memory":[86],"tracing,":[91],"our":[92,109,114,182],"system":[93,110,115,173,183],"can":[94,151],"achieve":[95],"capability":[98,187],"with":[99,188],"low":[100],"overhead.":[101,190],"Since":[102],"tracing":[106],"targets":[107],"functions,":[113],"incurs":[116],"lower":[117],"monitored":[121],"than":[124],"instruction-level":[126],"monitors.":[127],"We":[128],"two":[130],"models":[131],"describe":[133],"flows.":[137],"After":[138],"building":[139],"secure":[141],"database":[144],"by":[145],"learning":[146],"normal":[148],"behaviors,":[149],"detect":[152],"abnormal":[153],"flows":[155],"real":[157],"time.":[158],"help":[161],"virtualization":[163,177],"machine":[166],"introspection":[167],"techniques,":[168],"implement":[170],"prototype":[172],"hardware":[176],"environment.":[178],"From":[179],"evaluation,":[181],"has":[184],"reasonable":[189]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
