{"id":"https://openalex.org/W3047831187","doi":"https://doi.org/10.1109/cns48642.2020.9162251","title":"Catching Falling Dominoes: Cloud Management-Level Provenance Analysis with Application to OpenStack","display_name":"Catching Falling Dominoes: Cloud Management-Level Provenance Analysis with Application to OpenStack","publication_year":2020,"publication_date":"2020-06-01","ids":{"openalex":"https://openalex.org/W3047831187","doi":"https://doi.org/10.1109/cns48642.2020.9162251","mag":"3047831187"},"language":"en","primary_location":{"id":"doi:10.1109/cns48642.2020.9162251","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns48642.2020.9162251","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088493251","display_name":"Azadeh Tabiban","orcid":"https://orcid.org/0000-0001-6235-2317"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Azadeh Tabiban","raw_affiliation_strings":["CIISE, Concordia University, Montreal, QC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CIISE, Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020688490","display_name":"Yosr Jarraya","orcid":"https://orcid.org/0009-0000-6194-5321"},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yosr Jarraya","raw_affiliation_strings":["Ericsson Security Research, Ericsson Canada, Montreal, QC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ericsson Security Research, Ericsson Canada, Montreal, QC, Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023224430","display_name":"Mengyuan Zhang","orcid":"https://orcid.org/0000-0001-7457-5198"},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mengyuan Zhang","raw_affiliation_strings":["Ericsson Security Research, Ericsson Canada, Montreal, QC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ericsson Security Research, Ericsson Canada, Montreal, QC, Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077892893","display_name":"Makan Pourzandi","orcid":"https://orcid.org/0000-0001-9775-6231"},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Makan Pourzandi","raw_affiliation_strings":["Ericsson Security Research, Ericsson Canada, Montreal, QC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ericsson Security Research, Ericsson Canada, Montreal, QC, Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100730397","display_name":"Lingyu Wang","orcid":"https://orcid.org/0000-0002-7441-7541"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Lingyu Wang","raw_affiliation_strings":["CIISE, Concordia University, Montreal, QC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CIISE, Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":["CIISE, Concordia University, Montreal, QC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CIISE, Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"22","issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.991599977016449,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.8489534854888916},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8015010356903076},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.7505050897598267},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5597410798072815},{"id":"https://openalex.org/keywords/middleware","display_name":"Middleware (distributed applications)","score":0.5292384624481201},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.5275344848632812},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.49196383357048035},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.4682527482509613},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.46040213108062744},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.440367728471756},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.40093994140625},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3988611698150635},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3798302710056305},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.21917083859443665}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.8489534854888916},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8015010356903076},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.7505050897598267},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5597410798072815},{"id":"https://openalex.org/C169468491","wikidata":"https://www.wikidata.org/wiki/Q146923","display_name":"Middleware (distributed applications)","level":2,"score":0.5292384624481201},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.5275344848632812},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.49196383357048035},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.4682527482509613},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.46040213108062744},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.440367728471756},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.40093994140625},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3988611698150635},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3798302710056305},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.21917083859443665},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cns48642.2020.9162251","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns48642.2020.9162251","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W205934778","https://openalex.org/W1444906800","https://openalex.org/W1559528097","https://openalex.org/W1575826986","https://openalex.org/W1985994373","https://openalex.org/W2019731328","https://openalex.org/W2033984447","https://openalex.org/W2099204735","https://openalex.org/W2104724066","https://openalex.org/W2150858564","https://openalex.org/W2293837963","https://openalex.org/W2295705535","https://openalex.org/W2559755452","https://openalex.org/W2574070836","https://openalex.org/W2604713509","https://openalex.org/W2613035487","https://openalex.org/W2614510834","https://openalex.org/W2744492707","https://openalex.org/W2747669027","https://openalex.org/W2790316935","https://openalex.org/W2792078641","https://openalex.org/W2883053505","https://openalex.org/W2885157095","https://openalex.org/W2886147190","https://openalex.org/W2891859757","https://openalex.org/W2892116995","https://openalex.org/W2896299572","https://openalex.org/W2903853604","https://openalex.org/W2907798278","https://openalex.org/W2947745012","https://openalex.org/W2962703433","https://openalex.org/W2963232610","https://openalex.org/W3026969610","https://openalex.org/W3101089035","https://openalex.org/W4205777466","https://openalex.org/W6628457668","https://openalex.org/W6634453735","https://openalex.org/W6735926645","https://openalex.org/W6737785282","https://openalex.org/W6777651164"],"related_works":["https://openalex.org/W2883256816","https://openalex.org/W2171408034","https://openalex.org/W3003320923","https://openalex.org/W2106140982","https://openalex.org/W2152313554","https://openalex.org/W2064303750","https://openalex.org/W1509300825","https://openalex.org/W3092582874","https://openalex.org/W2338718585","https://openalex.org/W2054620577"],"abstract_inverted_index":{"The":[0],"dynamicity":[1],"and":[2,109,124,127,141,162,171],"complexity":[3],"of":[4,9,82,87],"clouds":[5,32],"highlight":[6],"the":[7,47,59,79,101,155,163],"importance":[8],"automated":[10],"root":[11,60,80],"cause":[12,61,81],"analysis":[13],"solutions":[14],"for":[15,77,174],"explaining":[16,78],"what":[17],"might":[18],"have":[19],"caused":[20],"a":[21,50,55,63,73,117],"security":[22,83,146],"incident.":[23],"Most":[24],"existing":[25],"works":[26],"focus":[27],"on":[28,112,134,149,159],"either":[29],"locating":[30],"malfunctioning":[31],"components,":[33],"e.g.,":[34,43],"switches,":[35],"or":[36],"tracing":[37],"changes":[38],"at":[39],"lower":[40],"abstraction":[41],"levels,":[42],"system":[44],"calls.":[45],"On":[46],"other":[48],"hand,":[49],"management-level":[51],"solution":[52,76],"can":[53],"provide":[54],"big":[56],"picture":[57],"about":[58],"in":[62,85,90],"more":[64],"scalable":[65,173],"manner.":[66],"In":[67],"this":[68,113],"paper,":[69],"we":[70,93,115],"propose":[71],"DOMINOCATCHER,":[72],"novel":[74],"provenance-based":[75],"incidents":[84,147],"terms":[86],"management":[88,105,122],"operations":[89,123],"clouds.":[91,175],"Specifically,":[92],"first":[94],"define":[95],"our":[96,160],"provenance":[97,129],"model":[98],"to":[99,119,125],"capture":[100],"interdependencies":[102],"between":[103],"cloud":[104,121],"operations,":[106],"virtual":[107],"resources":[108],"inputs.":[110],"Based":[111],"model,":[114],"design":[116],"framework":[118],"intercept":[120],"extract":[126],"prune":[128],"metadata.":[130],"We":[131,152],"implement":[132],"DOMINOCATCHER":[133,167],"OpenStack":[135],"platform":[136],"as":[137],"an":[138],"attached":[139],"middleware":[140],"validate":[142],"its":[143],"effectiveness":[144],"using":[145],"based":[148],"real-world":[150],"attacks.":[151],"also":[153],"evaluate":[154],"performance":[156],"through":[157],"experiments":[158],"testbed,":[161],"results":[164],"demonstrate":[165],"that":[166],"incurs":[168],"insignificant":[169],"overhead":[170],"is":[172]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}