{"id":"https://openalex.org/W2150878418","doi":"https://doi.org/10.1109/dsnw.2013.6615519","title":"BARLEY: Modelling program behavior with resource usage","display_name":"BARLEY: Modelling program behavior with resource usage","publication_year":2013,"publication_date":"2013-06-01","ids":{"openalex":"https://openalex.org/W2150878418","doi":"https://doi.org/10.1109/dsnw.2013.6615519","mag":"2150878418"},"language":"en","primary_location":{"id":"doi:10.1109/dsnw.2013.6615519","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsnw.2013.6615519","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 43rd Annual IEEE/IFIP Conference on Dependable Systems and Networks Workshop (DSN-W)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030030910","display_name":"Kevin Leach","orcid":"https://orcid.org/0000-0002-4001-3442"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Kevin Leach","raw_affiliation_strings":["Center for Secure Information Systems George Mason University, Fairfax, VA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Secure Information Systems George Mason University, Fairfax, VA","institution_ids":["https://openalex.org/I162714631"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5030030910"],"corresponding_institution_ids":["https://openalex.org/I162714631"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8504098057746887},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.7274251580238342},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.6558637619018555},{"id":"https://openalex.org/keywords/resource-consumption","display_name":"Resource consumption","score":0.5668824911117554},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.5618636012077332},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.5526552200317383},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5202295184135437},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4420897960662842},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.4393380880355835},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.42786380648612976},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.28572216629981995},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.21749457716941833},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.13623669743537903},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10665324330329895}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8504098057746887},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.7274251580238342},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.6558637619018555},{"id":"https://openalex.org/C2777480716","wikidata":"https://www.wikidata.org/wiki/Q23582796","display_name":"Resource consumption","level":2,"score":0.5668824911117554},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.5618636012077332},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.5526552200317383},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5202295184135437},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4420897960662842},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4393380880355835},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.42786380648612976},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.28572216629981995},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.21749457716941833},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.13623669743537903},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10665324330329895},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/dsnw.2013.6615519","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsnw.2013.6615519","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 43rd Annual IEEE/IFIP Conference on Dependable Systems and Networks Workshop (DSN-W)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","display_name":"Decent work and economic growth","score":0.5600000023841858}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W34732858","https://openalex.org/W173413620","https://openalex.org/W1525545664","https://openalex.org/W1573286687","https://openalex.org/W1592090113","https://openalex.org/W1884606608","https://openalex.org/W1969501726","https://openalex.org/W1982205631","https://openalex.org/W1982829328","https://openalex.org/W2025356485","https://openalex.org/W2060276266","https://openalex.org/W2109219878","https://openalex.org/W2117030266","https://openalex.org/W2134633067","https://openalex.org/W2141389113","https://openalex.org/W2159059513","https://openalex.org/W4239813889","https://openalex.org/W6607078713","https://openalex.org/W6635409250"],"related_works":["https://openalex.org/W2138385884","https://openalex.org/W2166895275","https://openalex.org/W2998775986","https://openalex.org/W157564837","https://openalex.org/W2080313875","https://openalex.org/W2011536294","https://openalex.org/W4210453401","https://openalex.org/W1724049288","https://openalex.org/W2150418816","https://openalex.org/W2573637329"],"abstract_inverted_index":{"Control":[0],"flow":[1,59],"graphs":[2,60],"(CFG)":[3],"have":[4],"long":[5],"been":[6],"an":[7,106],"effective":[8],"and":[9,51],"elegant":[10],"way":[11],"to":[12,65,79,104,125],"represent":[13,105],"program":[14],"execution.":[15,73],"In":[16,53],"particular,":[17],"many":[18,102],"anomaly":[19],"detection":[20],"systems":[21,27],"employ":[22],"CFGs.":[23],"Unfortunately,":[24],"typical":[25],"CFG-based":[26,116],"rely":[28],"on":[29,132],"inaccurate":[30],"or":[31],"impractical":[32],"heuristics.":[33],"For":[34],"example,":[35],"the":[36,133],"state":[37],"space":[38],"may":[39],"be":[40,123],"restricted":[41],"by":[42],"considering":[43,92],"only":[44],"a":[45,69],"call":[46],"graph,":[47],"thus":[48],"reducing":[49],"accuracy":[50],"precision.":[52],"this":[54,75,120],"paper,":[55],"we":[56,97,109],"combine":[57],"control":[58],"with":[61],"resource":[62],"consumption":[63],"information":[64,81],"more":[66,80,88],"accurately":[67],"model":[68],"program's":[70],"behavior":[71],"during":[72],"Intuitively,":[74],"technique":[76,121],"allows":[77],"access":[78],"within":[82],"each":[83],"state,":[84],"providing":[85],"opportunities":[86],"for":[87],"accurate":[89],"decisions":[90],"when":[91],"anomalous":[93],"behavior.":[94],"Additionally,":[95],"because":[96],"do":[98],"not":[99],"need":[100],"as":[101],"states":[103],"application's":[107],"execution,":[108],"can":[110,122],"achieve":[111],"lower":[112],"overhead":[113],"than":[114],"existing":[115],"systems.":[117],"We":[118],"anticipate":[119],"used":[124],"detect":[126],"jump-based":[127],"return-oriented":[128],"programming":[129],"(ROP)":[130],"attacks":[131],"Linux":[134],"platform.":[135]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}