{"id":"https://openalex.org/W4383751777","doi":"https://doi.org/10.1109/access.2023.3293643","title":"Detecting Anomalies Through Sequential Performance Analysis in Virtualized Environments","display_name":"Detecting Anomalies Through Sequential Performance Analysis in Virtualized Environments","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4383751777","doi":"https://doi.org/10.1109/access.2023.3293643"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3293643","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3293643","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10177179.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10177179.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020454668","display_name":"Charles F. Gon\u00e7alves","orcid":"https://orcid.org/0000-0002-2870-8962"},"institutions":[{"id":"https://openalex.org/I4210136482","display_name":"Federal Center for Technological Education of Minas Gerais","ror":"https://ror.org/04ch49185","country_code":"BR","type":"education","lineage":["https://openalex.org/I4210136482"]},{"id":"https://openalex.org/I76903346","display_name":"University of Coimbra","ror":"https://ror.org/04z8k9a98","country_code":"PT","type":"education","lineage":["https://openalex.org/I76903346"]}],"countries":["BR","PT"],"is_corresponding":false,"raw_author_name":"Charles F. Gon\u00e7alves","raw_affiliation_strings":["Centre for Informatics and Systems of the University of Coimbra (CISUC), Department of Informatics Engineering, University of Coimbra, Coimbra, Portugal","CEFET-MG, Board of Information Technology, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-2870-8962","affiliations":[{"raw_affiliation_string":"Centre for Informatics and Systems of the University of Coimbra (CISUC), Department of Informatics Engineering, University of Coimbra, Coimbra, Portugal","institution_ids":["https://openalex.org/I76903346"]},{"raw_affiliation_string":"CEFET-MG, Board of Information Technology, Brazil","institution_ids":["https://openalex.org/I4210136482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034604991","display_name":"Daniel Sadoc Menasch\u00e9","orcid":"https://orcid.org/0000-0002-8953-4003"},"institutions":[{"id":"https://openalex.org/I122140584","display_name":"Universidade Federal do Rio de Janeiro","ror":"https://ror.org/03490as77","country_code":"BR","type":"education","lineage":["https://openalex.org/I122140584"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Daniel Sadoc Menasch\u00e9","raw_affiliation_strings":["Federal University of Rio de Janeiro, Rio de Janeiro, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-8953-4003","affiliations":[{"raw_affiliation_string":"Federal University of Rio de Janeiro, Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I122140584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018164102","display_name":"Alberto Avritzer","orcid":"https://orcid.org/0000-0002-9401-9663"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alberto Avritzer","raw_affiliation_strings":["EsulabSolutions Inc., Princeton, NJ, USA","EsulabSolutions, Inc, Princeton, NJ, USA"],"raw_orcid":"https://orcid.org/0000-0002-9401-9663","affiliations":[{"raw_affiliation_string":"EsulabSolutions Inc., Princeton, NJ, USA","institution_ids":[]},{"raw_affiliation_string":"EsulabSolutions, Inc, Princeton, NJ, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030619096","display_name":"Nuno Antunes","orcid":"https://orcid.org/0000-0002-6044-4012"},"institutions":[{"id":"https://openalex.org/I76903346","display_name":"University of Coimbra","ror":"https://ror.org/04z8k9a98","country_code":"PT","type":"education","lineage":["https://openalex.org/I76903346"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Nuno Antunes","raw_affiliation_strings":["Centre for Informatics and Systems of the University of Coimbra (CISUC), Department of Informatics Engineering, University of Coimbra, Coimbra, Portugal"],"raw_orcid":"https://orcid.org/0000-0002-6044-4012","affiliations":[{"raw_affiliation_string":"Centre for Informatics and Systems of the University of Coimbra (CISUC), Department of Informatics Engineering, University of Coimbra, Coimbra, Portugal","institution_ids":["https://openalex.org/I76903346"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016622594","display_name":"Marco Vieira","orcid":"https://orcid.org/0000-0001-5103-8541"},"institutions":[{"id":"https://openalex.org/I76903346","display_name":"University of Coimbra","ror":"https://ror.org/04z8k9a98","country_code":"PT","type":"education","lineage":["https://openalex.org/I76903346"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Marco Vieira","raw_affiliation_strings":["Centre for Informatics and Systems of the University of Coimbra (CISUC), Department of Informatics Engineering, University of Coimbra, Coimbra, Portugal"],"raw_orcid":"https://orcid.org/0000-0001-5103-8541","affiliations":[{"raw_affiliation_string":"Centre for Informatics and Systems of the University of Coimbra (CISUC), Department of Informatics Engineering, University of Coimbra, Coimbra, Portugal","institution_ids":["https://openalex.org/I76903346"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.569,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.67237384,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":"11","issue":null,"first_page":"70716","last_page":"70740"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8390377759933472},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.7342203855514526},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.6663655042648315},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.6563485860824585},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.6293417811393738},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.6143031716346741},{"id":"https://openalex.org/keywords/workload","display_name":"Workload","score":0.5468478202819824},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.4729803800582886},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.45483818650245667},{"id":"https://openalex.org/keywords/downtime","display_name":"Downtime","score":0.4541440010070801},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4486003518104553},{"id":"https://openalex.org/keywords/hardware-virtualization","display_name":"Hardware virtualization","score":0.4138842821121216},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.41243216395378113},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.14691120386123657},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.12283071875572205}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8390377759933472},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.7342203855514526},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.6663655042648315},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.6563485860824585},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.6293417811393738},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.6143031716346741},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.5468478202819824},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.4729803800582886},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.45483818650245667},{"id":"https://openalex.org/C180591934","wikidata":"https://www.wikidata.org/wiki/Q1253369","display_name":"Downtime","level":2,"score":0.4541440010070801},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4486003518104553},{"id":"https://openalex.org/C68793194","wikidata":"https://www.wikidata.org/wiki/Q1616095","display_name":"Hardware virtualization","level":5,"score":0.4138842821121216},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.41243216395378113},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.14691120386123657},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.12283071875572205}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2023.3293643","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3293643","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10177179.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:8af93e32e08a421d82d8e0e0d1427ea2","is_oa":true,"landing_page_url":"https://doaj.org/article/8af93e32e08a421d82d8e0e0d1427ea2","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 70716-70740 (2023)","raw_type":"article"},{"id":"pmh:oai:estudogeral.uc.pt:10316/114592","is_oa":true,"landing_page_url":"https://hdl.handle.net/10316/114592","pdf_url":null,"source":{"id":"https://openalex.org/S4306402070","display_name":"Estudo Geral (Universidad de Coimbra)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I76903346","host_organization_name":"University of Coimbra","host_organization_lineage":["https://openalex.org/I76903346"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3293643","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3293643","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10177179.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4083670215","display_name":null,"funder_award_id":"SFRH/BD/144839/2019","funder_id":"https://openalex.org/F4320334779","funder_display_name":"Funda\u00e7\u00e3o para a Ci\u00eancia e a Tecnologia"},{"id":"https://openalex.org/G7974842525","display_name":null,"funder_award_id":"UID/CEC/00326/2020","funder_id":"https://openalex.org/F4320334779","funder_display_name":"Funda\u00e7\u00e3o para a Ci\u00eancia e a Tecnologia"}],"funders":[{"id":"https://openalex.org/F4320334779","display_name":"Funda\u00e7\u00e3o para a Ci\u00eancia e a Tecnologia","ror":"https://ror.org/00snfqn58"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4383751777.pdf","grobid_xml":"https://content.openalex.org/works/W4383751777.grobid-xml"},"referenced_works_count":65,"referenced_works":["https://openalex.org/W1558012247","https://openalex.org/W1744212210","https://openalex.org/W1916709771","https://openalex.org/W1976009916","https://openalex.org/W1988150362","https://openalex.org/W2013704995","https://openalex.org/W2054506507","https://openalex.org/W2063519156","https://openalex.org/W2074701325","https://openalex.org/W2082085551","https://openalex.org/W2083048258","https://openalex.org/W2094666619","https://openalex.org/W2096596928","https://openalex.org/W2097962294","https://openalex.org/W2100142058","https://openalex.org/W2103366724","https://openalex.org/W2108873469","https://openalex.org/W2113004249","https://openalex.org/W2120860555","https://openalex.org/W2122646361","https://openalex.org/W2128038346","https://openalex.org/W2131080154","https://openalex.org/W2131726714","https://openalex.org/W2139418336","https://openalex.org/W2155469896","https://openalex.org/W2159443917","https://openalex.org/W2160841769","https://openalex.org/W2256307994","https://openalex.org/W2296328483","https://openalex.org/W2298032891","https://openalex.org/W2478353283","https://openalex.org/W2500228126","https://openalex.org/W2559295596","https://openalex.org/W2584276464","https://openalex.org/W2735629973","https://openalex.org/W2766624504","https://openalex.org/W2768993348","https://openalex.org/W2900072668","https://openalex.org/W2901911148","https://openalex.org/W2913966487","https://openalex.org/W2931122162","https://openalex.org/W2944308757","https://openalex.org/W2951895416","https://openalex.org/W2959716986","https://openalex.org/W3029387962","https://openalex.org/W3035242936","https://openalex.org/W3071416990","https://openalex.org/W3086798928","https://openalex.org/W3120598853","https://openalex.org/W3145004415","https://openalex.org/W3176721776","https://openalex.org/W3187461039","https://openalex.org/W3203893509","https://openalex.org/W3204874126","https://openalex.org/W3208972052","https://openalex.org/W4205519045","https://openalex.org/W4230704549","https://openalex.org/W4249116379","https://openalex.org/W4285125724","https://openalex.org/W4286751455","https://openalex.org/W4299434068","https://openalex.org/W4311011822","https://openalex.org/W6681162792","https://openalex.org/W6729130510","https://openalex.org/W6803551468"],"related_works":["https://openalex.org/W3083135738","https://openalex.org/W2005435933","https://openalex.org/W2413559826","https://openalex.org/W2179519055","https://openalex.org/W2747005099","https://openalex.org/W2145292010","https://openalex.org/W2549930939","https://openalex.org/W1973516247","https://openalex.org/W1775827617","https://openalex.org/W1991063492"],"abstract_inverted_index":{"Virtualization":[0],"enables":[1],"Cloud":[2],"Computing,":[3],"allowing":[4],"for":[5,65,88],"server":[6],"consolidation":[7],"with":[8,180],"cost":[9],"reduction.":[10],"It":[11],"also":[12],"introduces":[13],"new":[14],"challenges":[15],"in":[16,28,31,74],"terms":[17],"of":[18,25,68,106,149,160,165,184],"security":[19,72],"and":[20,41,101,120,187],"isolation,":[21],"which":[22,143],"are":[23,78,94,122],"one":[24],"the":[26,44,47,50,66,82,104,110,116,158,163,166,193],"deterrents":[27],"their":[29],"adoption":[30],"critical":[32],"systems.":[33],"Virtualized":[34],"systems":[35],"tend":[36],"to":[37,80,96,102,156,176],"be":[38],"very":[39],"complex,":[40],"multi-tenancy":[42],"is":[43,118,135,174],"norm,":[45],"as":[46],"hypervisor":[48],"manages":[49],"resources":[51],"shared":[52],"amongst":[53],"virtual":[54],"machines.":[55],"This":[56],"paper":[57],"proposes":[58],"a":[59,98,126,138,147,181],"methodology":[60,134],"that":[61,171],"uses":[62],"performance":[63,99,164],"modeling":[64],"detection":[67],"anomalies":[69,155],"caused":[70],"by":[71,124],"attacks":[73,161],"virtualized":[75],"environments.":[76],"Experiments":[77],"conducted":[79],"profile":[81],"system":[83,117],"operation":[84],"under":[85],"normal":[86],"conditions":[87],"its":[89,107],"business":[90],"transactions.":[91],"The":[92,133,168],"results":[93,169],"used":[95],"calibrate":[97],"model":[100],"understand":[103],"impact":[105],"parameters":[108],"on":[109,192],"false":[111,185],"positives":[112],"probability.":[113],"During":[114],"operation,":[115],"monitored,":[119],"deviations":[121],"detected":[123],"applying":[125],"sequential":[127],"analysis":[128],"algorithm":[129],"(the":[130],"bucket":[131],"algorithm).":[132],"evaluated":[136],"using":[137],"representative":[139],"cloud":[140],"workload":[141],"(TPCx-V),":[142],"was":[144],"profiled":[145],"during":[146],"set":[148],"executions.":[150],"We":[151],"consider":[152],"resource":[153],"exhaustion":[154],"emulate":[157],"effects":[159,191],"affecting":[162],"system.":[167,194],"show":[170],"our":[172],"approach":[173],"able":[175],"successfully":[177],"detect":[178],"anomalies,":[179],"low":[182],"number":[183],"positives,":[186],"spot":[188],"possible":[189],"residual":[190]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}