{"id":"https://openalex.org/W4401906150","doi":"https://doi.org/10.1109/access.2024.3450496","title":"ESX: A Self-Generated Control Policy for Remote Access With SSH Based on eBPF","display_name":"ESX: A Self-Generated Control Policy for Remote Access With SSH Based on eBPF","publication_year":2024,"publication_date":"2024-08-27","ids":{"openalex":"https://openalex.org/W4401906150","doi":"https://doi.org/10.1109/access.2024.3450496"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3450496","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3450496","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2024.3450496","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100310779","display_name":"Yuan Zhong","orcid":"https://orcid.org/0009-0009-5422-7407"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Zhong","raw_affiliation_strings":["School of Computer Science and Engineering, Sun Yat-sen University, Guangzhou, China","School of Computer Science and Engineering, Sun Yat-Sen University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0009-5422-7407","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Sun Yat-sen University, Guangzhou, China","institution_ids":["https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Sun Yat-Sen University, Guangzhou, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100335060","display_name":"Pengfei Chen","orcid":"https://orcid.org/0000-0003-0972-6900"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengfei Chen","raw_affiliation_strings":["School of Computer Science and Engineering, Sun Yat-sen University, Guangzhou, China","School of Computer Science and Engineering, Sun Yat-Sen University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-0972-6900","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Sun Yat-sen University, Guangzhou, China","institution_ids":["https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Sun Yat-Sen University, Guangzhou, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065561980","display_name":"Huxing Zhang","orcid":"https://orcid.org/0009-0007-1761-9044"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huxing Zhang","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0007-1761-9044","affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.2841,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.55351736,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"13","issue":null,"first_page":"6487","last_page":"6506"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9664999842643738,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9664999842643738,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10742","display_name":"Peer-to-Peer Network Technologies","score":0.9401000142097473,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9036999940872192,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5552920699119568},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.46710410714149475},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.07786089181900024}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5552920699119568},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.46710410714149475},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.07786089181900024}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2024.3450496","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3450496","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:e3355a0bcd514fde849fea16bba6f599","is_oa":true,"landing_page_url":"https://doaj.org/article/e3355a0bcd514fde849fea16bba6f599","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 6487-6506 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3450496","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3450496","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1530937461","display_name":null,"funder_award_id":"2019YFB1804002","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G2530523038","display_name":null,"funder_award_id":"2023B1515020054","funder_id":"https://openalex.org/F4320337111","funder_display_name":"Basic and Applied Basic Research Foundation of Guangdong Province"},{"id":"https://openalex.org/G4221380915","display_name":null,"funder_award_id":"No.62272495","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4545538124","display_name":null,"funder_award_id":"No.22qntd1004","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G7213717779","display_name":null,"funder_award_id":"62272495","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8096060267","display_name":null,"funder_award_id":"No.2023B1515020054","funder_id":"https://openalex.org/F4320337111","funder_display_name":"Basic and Applied Basic Research Foundation of Guangdong Province"},{"id":"https://openalex.org/G8113281434","display_name":null,"funder_award_id":"22qntd1004","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null},{"id":"https://openalex.org/F4320337111","display_name":"Basic and Applied Basic Research Foundation of Guangdong Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W841472321","https://openalex.org/W1594706025","https://openalex.org/W1966636435","https://openalex.org/W1975960070","https://openalex.org/W1991941172","https://openalex.org/W2016023958","https://openalex.org/W2018616316","https://openalex.org/W2023953679","https://openalex.org/W2080632942","https://openalex.org/W2093804985","https://openalex.org/W2095881341","https://openalex.org/W2099137371","https://openalex.org/W2111111494","https://openalex.org/W2115482638","https://openalex.org/W2138683527","https://openalex.org/W2163328802","https://openalex.org/W2166559705","https://openalex.org/W2529912552","https://openalex.org/W2768329601","https://openalex.org/W2790530433","https://openalex.org/W2793416899","https://openalex.org/W2817857516","https://openalex.org/W2922066151","https://openalex.org/W2937118960","https://openalex.org/W2962744771","https://openalex.org/W2991141347","https://openalex.org/W3008629209","https://openalex.org/W3009619892","https://openalex.org/W3013012709","https://openalex.org/W3094827892","https://openalex.org/W3209190856","https://openalex.org/W4214588958","https://openalex.org/W4229692581","https://openalex.org/W4283328089","https://openalex.org/W6601021366","https://openalex.org/W6604662166","https://openalex.org/W6630198464","https://openalex.org/W6630877225","https://openalex.org/W6630914723","https://openalex.org/W6630921074","https://openalex.org/W6631402485","https://openalex.org/W6635246518","https://openalex.org/W6636217443","https://openalex.org/W6680653849","https://openalex.org/W6681485941","https://openalex.org/W6791742644","https://openalex.org/W6855654941","https://openalex.org/W7039235811"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"Cloud":[0],"systems":[1],"that":[2,122,181],"provide":[3],"remote":[4,26,170],"data":[5],"and":[6,44,77,101,145,168],"computational":[7],"access":[8,191],"through":[9,138],"networks":[10],"face":[11],"significant":[12],"security":[13,37,50,60,212],"challenges.":[14],"Secure":[15],"Shell":[16],"(SSH)":[17],"is":[18,54,65],"one":[19],"of":[20,31,74,197],"the":[21,29,71,78,174,198,218],"most":[22],"popular":[23],"methods":[24],"for":[25,92,201],"access,":[27],"but":[28],"leakage":[30],"login":[32],"information":[33],"presents":[34,205],"a":[35,58,119,124,206],"substantial":[36],"threat,":[38],"enabling":[39],"attackers":[40],"to":[41,70,141,210],"exploit":[42],"identities":[43],"disrupt":[45],"systems.":[46],"Consequently,":[47],"ensuring":[48],"robust":[49],"in":[51,62,80,98,189],"cloud-system":[52],"operations":[53],"paramount.":[55],"Access":[56,83],"control,":[57],"crucial":[59],"mechanism":[61],"operating":[63,220],"systems,":[64],"becoming":[66],"increasingly":[67],"complex":[68,99],"due":[69],"intricate":[72],"nature":[73],"control":[75,149,192],"mechanisms":[76],"difficulty":[79],"developing":[81],"precise":[82],"Control":[84],"Lists":[85],"(ACLs).":[86],"Traditional":[87],"ACLs":[88],"require":[89],"extensive":[90],"resources":[91],"each":[93],"user":[94,143,171],"or":[95],"role,":[96],"struggle":[97],"scenarios,":[100],"risk":[102],"system":[103,126,129,147,154,175,221],"vulnerability":[104],"by":[105],"granting":[106],"excessive":[107],"privileges.":[108],"To":[109],"mitigate":[110],"these":[111],"issues,":[112],"we":[113],"introduce":[114],"Extend":[115],"Security":[116],"boX":[117],"(ESX),":[118],"novel":[120],"solution":[121],"combines":[123],"lightweight":[125],"call":[127,148,176],"restriction":[128],"with":[130],"machine":[131],"learning":[132,137],"method.":[133],"ESX":[134,165,204],"utilizes":[135],"rule":[136],"itemset":[139],"mining":[140],"analyze":[142],"behavior":[144,172],"generate":[146],"lists,":[150],"thereby":[151],"significantly":[152],"reducing":[153],"vulnerability.":[155],"By":[156],"employing":[157],"extended":[158],"Berkeley":[159],"Packet":[160],"Filter":[161],"(eBPF)":[162],"program":[163],"hooks,":[164],"effectively":[166],"audits":[167],"restricts":[169],"at":[173],"level.":[177],"Our":[178],"results":[179],"show":[180],"ESX\u2019s":[182],"rule-mining":[183],"algorithm":[184],"achieves":[185],"over":[186],"99%":[187],"accuracy":[188],"generating":[190],"policies,":[193],"using":[194],"only":[195],"40%":[196],"log":[199],"entries":[200],"mining.":[202],"Additionally,":[203],"lower":[207],"overhead":[208],"compared":[209],"established":[211],"solutions,":[213],"such":[214],"as":[215],"AppArmor,":[216],"enhancing":[217],"overall":[219],"security.":[222]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2025-12-19T19:40:27.379048","created_date":"2025-10-10T00:00:00"}