{"id":"https://openalex.org/W4206408508","doi":"https://doi.org/10.1109/comsnets53615.2022.9668567","title":"Threat Detection and Response in Linux Endpoints","display_name":"Threat Detection and Response in Linux Endpoints","publication_year":2022,"publication_date":"2022-01-04","ids":{"openalex":"https://openalex.org/W4206408508","doi":"https://doi.org/10.1109/comsnets53615.2022.9668567"},"language":"en","primary_location":{"id":"doi:10.1109/comsnets53615.2022.9668567","is_oa":false,"landing_page_url":"https://doi.org/10.1109/comsnets53615.2022.9668567","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 14th International Conference on COMmunication Systems & NETworkS (COMSNETS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100613382","display_name":"Shubham Agarwal","orcid":"https://orcid.org/0000-0003-3290-6328"},"institutions":[{"id":"https://openalex.org/I33375025","display_name":"Airbus (India)","ror":"https://ror.org/05tw0wf88","country_code":"IN","type":"company","lineage":["https://openalex.org/I33375025","https://openalex.org/I4210121748"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Shubham Agarwal","raw_affiliation_strings":["Security Analyst, Airbus Group, Bangalore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security Analyst, Airbus Group, Bangalore","institution_ids":["https://openalex.org/I33375025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054565894","display_name":"Arjun Sable","orcid":null},"institutions":[{"id":"https://openalex.org/I162827531","display_name":"Indian Institute of Technology Bombay","ror":"https://ror.org/02qyf5152","country_code":"IN","type":"education","lineage":["https://openalex.org/I162827531"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Arjun Sable","raw_affiliation_strings":["MLiONS Lab, IEOR, IIT Bombay, Mumbai"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MLiONS Lab, IEOR, IIT Bombay, Mumbai","institution_ids":["https://openalex.org/I162827531"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085322386","display_name":"Devesh M. Sawant","orcid":"https://orcid.org/0000-0001-7266-1316"},"institutions":[{"id":"https://openalex.org/I162827531","display_name":"Indian Institute of Technology Bombay","ror":"https://ror.org/02qyf5152","country_code":"IN","type":"education","lineage":["https://openalex.org/I162827531"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Devesh Sawant","raw_affiliation_strings":["MLiONS Lab, IEOR, IIT Bombay, Mumbai"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MLiONS Lab, IEOR, IIT Bombay, Mumbai","institution_ids":["https://openalex.org/I162827531"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087016777","display_name":"Sunil Kahalekar","orcid":null},"institutions":[{"id":"https://openalex.org/I162827531","display_name":"Indian Institute of Technology Bombay","ror":"https://ror.org/02qyf5152","country_code":"IN","type":"education","lineage":["https://openalex.org/I162827531"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sunil Kahalekar","raw_affiliation_strings":["MLiONS Lab, IEOR, IIT Bombay, Mumbai"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MLiONS Lab, IEOR, IIT Bombay, Mumbai","institution_ids":["https://openalex.org/I162827531"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057858044","display_name":"Manjesh K. Hanawal","orcid":"https://orcid.org/0000-0002-1807-5487"},"institutions":[{"id":"https://openalex.org/I162827531","display_name":"Indian Institute of Technology Bombay","ror":"https://ror.org/02qyf5152","country_code":"IN","type":"education","lineage":["https://openalex.org/I162827531"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Manjesh K. Hanawal","raw_affiliation_strings":["MLiONS Lab, IEOR, IIT Bombay, Mumbai"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MLiONS Lab, IEOR, IIT Bombay, Mumbai","institution_ids":["https://openalex.org/I162827531"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"447","last_page":"449"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.7553611397743225},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7518342733383179},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.5069015622138977},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.4919881522655487},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3575361967086792},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.13943523168563843}],"concepts":[{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.7553611397743225},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7518342733383179},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.5069015622138977},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4919881522655487},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3575361967086792},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13943523168563843},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/comsnets53615.2022.9668567","is_oa":false,"landing_page_url":"https://doi.org/10.1109/comsnets53615.2022.9668567","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 14th International Conference on COMmunication Systems & NETworkS (COMSNETS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2388464034","https://openalex.org/W2533125852","https://openalex.org/W2140460949","https://openalex.org/W2105580438","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2057435755","https://openalex.org/W2949620858"],"abstract_inverted_index":{"We":[0,47,93],"demonstrate":[1],"an":[2,24],"in-house":[3,25],"built":[4],"Endpoint":[5],"Detection":[6],"and":[7,18,37,43,54,84,90],"Response":[8],"(EDR)":[9],"for":[10],"linux":[11],"systems":[12],"using":[13,29],"open-sourced":[14],"tools":[15,27,32,53],"like":[16,88],"Osquery":[17],"Elastic.":[19],"The":[20],"advantage":[21],"of":[22,51],"building":[23],"EDR":[26,31],"against":[28],"commercial":[30],"provides":[33],"both":[34],"the":[35,38,49,52,63],"knowledge":[36],"technical":[39],"capability":[40],"to":[41,75],"detect":[42,86],"investigate":[44],"security":[45],"incidents.":[46],"discuss":[48,94],"architecture":[50],"advantages":[55],"it":[56],"offers.":[57],"Specifically,":[58],"in":[59],"our":[60,102],"method":[61],"all":[62],"endpoint":[64],"logs":[65],"are":[66],"collected":[67],"at":[68],"a":[69],"common":[70],"server":[71],"which":[72],"we":[73],"leverage":[74],"perform":[76],"correlation":[77],"between":[78],"events":[79],"happening":[80],"on":[81],"different":[82],"endpoints":[83],"automatically":[85],"threats":[87],"pivoting":[89],"lateral":[91],"movements.":[92],"various":[95],"attacks":[96],"that":[97],"can":[98],"be":[99],"detected":[100],"by":[101],"tool.":[103]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}