{"id":"https://openalex.org/W2587998744","doi":"https://doi.org/10.1109/ssci.2016.7850080","title":"Identification of program signatures from cloud computing system telemetry data","display_name":"Identification of program signatures from cloud computing system telemetry data","publication_year":2016,"publication_date":"2016-12-01","ids":{"openalex":"https://openalex.org/W2587998744","doi":"https://doi.org/10.1109/ssci.2016.7850080","mag":"2587998744"},"language":"en","primary_location":{"id":"doi:10.1109/ssci.2016.7850080","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ssci.2016.7850080","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE Symposium Series on Computational Intelligence (SSCI)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063669518","display_name":"Nicole Nichols","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Nicole Nichols","raw_affiliation_strings":["Pacific Northwest National Laboratory, Seattle, WA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory, Seattle, WA","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074939826","display_name":"Mark Greaves","orcid":"https://orcid.org/0000-0002-6239-9999"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mark Greaves","raw_affiliation_strings":["Pacific Northwest National Laboratory, Seattle, WA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory, Seattle, WA","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081042998","display_name":"William P. Smith","orcid":"https://orcid.org/0000-0003-0685-4544"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William Smith","raw_affiliation_strings":["Pacific Northwest National Laboratory, Seattle, WA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory, Seattle, WA","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069058408","display_name":"Ryan LaMothe","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ryan LaMothe","raw_affiliation_strings":["Pacific Northwest National Laboratory, Richland, WA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory, Richland, WA","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026445132","display_name":"Gianluca Longoni","orcid":"https://orcid.org/0000-0002-2216-0828"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gianluca Longoni","raw_affiliation_strings":["Pacific Northwest National Laboratory, Richland, WA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory, Richland, WA","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036454888","display_name":"Jeremy Teuton","orcid":"https://orcid.org/0000-0002-7703-8870"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jeremy Teuton","raw_affiliation_strings":["Pacific Northwest National Laboratory, Richland, WA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory, Richland, WA","institution_ids":["https://openalex.org/I142606810"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5063669518"],"corresponding_institution_ids":["https://openalex.org/I142606810"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.19185944,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"30","issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.8983232975006104},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8070007562637329},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.712804913520813},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.6128729581832886},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5719025135040283},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5461680293083191},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4555737376213074},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.36201098561286926}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.8983232975006104},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8070007562637329},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.712804913520813},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.6128729581832886},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5719025135040283},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5461680293083191},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4555737376213074},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.36201098561286926},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ssci.2016.7850080","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ssci.2016.7850080","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE Symposium Series on Computational Intelligence (SSCI)","raw_type":"proceedings-article"},{"id":"mag:2794009474","is_oa":false,"landing_page_url":"http://jglobal.jst.go.jp/en/public/201702240438484795","pdf_url":null,"source":{"id":"https://openalex.org/S4306512817","display_name":"IEEE Conference Proceedings","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":"IEEE Conference Proceedings","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320306250","display_name":"Battelle","ror":"https://ror.org/01h5tnr73"},{"id":"https://openalex.org/F4320337547","display_name":"Laboratory Directed Research and Development","ror":"https://ror.org/01e41cf67"},{"id":"https://openalex.org/F4320338354","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W3483648","https://openalex.org/W97539848","https://openalex.org/W128984794","https://openalex.org/W1489073918","https://openalex.org/W1521523431","https://openalex.org/W1564293076","https://openalex.org/W1594031697","https://openalex.org/W1641762327","https://openalex.org/W1970992617","https://openalex.org/W1987684126","https://openalex.org/W2005133256","https://openalex.org/W2018671131","https://openalex.org/W2056827092","https://openalex.org/W2069483305","https://openalex.org/W2100533862","https://openalex.org/W2109026747","https://openalex.org/W2125858711","https://openalex.org/W2139836766","https://openalex.org/W2145749149","https://openalex.org/W2167088175","https://openalex.org/W2167806953","https://openalex.org/W2209768828","https://openalex.org/W2293923001","https://openalex.org/W2330820318","https://openalex.org/W2336362980","https://openalex.org/W6637110787"],"related_works":["https://openalex.org/W2148749405","https://openalex.org/W2104105430","https://openalex.org/W1515917392","https://openalex.org/W1973516247","https://openalex.org/W2613320081","https://openalex.org/W2179519055","https://openalex.org/W2743348030","https://openalex.org/W2747005099","https://openalex.org/W2145292010","https://openalex.org/W2086039693"],"abstract_inverted_index":{"Malicious":[0],"cloud":[1,42,86,101,109,140],"computing":[2,87,102],"activity":[3],"can":[4],"take":[5],"many":[6],"forms,":[7],"including":[8,89],"running":[9,93,132,205],"unauthorized":[10],"programs":[11,131,164,181,203],"in":[12,63,83],"a":[13,47,64,118,177,190],"virtual":[14,91,135,209],"environment.":[15,69],"Detection":[16],"of":[17,25,40,52,77,158,173,180,199],"these":[18],"malicious":[19,53],"activities":[20],"while":[21],"preserving":[22],"the":[23,26,37,75,95,138,156,162,171,185,197,207],"privacy":[24],"user":[27,141],"is":[28,105,153],"an":[29,84],"important":[30],"research":[31],"challenge.":[32],"Prior":[33],"work":[34,168,194],"has":[35,60],"shown":[36],"potential":[38],"viability":[39],"using":[41],"service":[43],"billing":[44,78,119],"metrics":[45,79],"as":[46],"mechanism":[48],"for":[49,107,161,176],"proxy":[50],"identification":[51],"programs.":[54],"Previously":[55],"this":[56,71,174],"novel":[57],"detection":[58],"method":[59],"been":[61],"evaluated":[62],"synthetic":[65],"and":[66],"isolated":[67],"computational":[68],"In":[70],"paper":[72],"we":[73,165],"demonstrate":[74],"ability":[76],"to":[80,122,148,182,188],"identify":[81,128,189],"programs,":[82],"active":[85],"environment,":[88],"multiple":[90,202],"machines":[92,136],"on":[94,133,155,206],"same":[96,139,208],"hypervisor.":[97],"The":[98],"open":[99],"source":[100],"platform":[103],"OpenStack,":[104],"used":[106],"private":[108],"management":[110],"at":[111],"Pacific":[112],"Northwest":[113],"National":[114],"Laboratory.":[115],"OpenStack":[116],"provides":[117],"tool":[120],"(Ceilometer)":[121],"collect":[123],"system":[124],"telemetry":[125,159],"measurements.":[126],"We":[127],"four":[129,134],"different":[130],"under":[137],"account.":[142],"Programs":[143],"were":[144],"identified":[145],"with":[146],"up":[147],"95%":[149],"accuracy.":[150],"This":[151],"accuracy":[152],"dependent":[154],"distinctiveness":[157],"measurements":[160],"specific":[163],"tested.":[166],"Future":[167],"will":[169],"examine":[170],"scalability":[172],"approach":[175],"larger":[178],"selection":[179],"better":[183],"understand":[184],"uniqueness":[186],"needed":[187],"program.":[191],"Additionally,":[192],"future":[193],"should":[195],"address":[196],"separation":[198],"signatures":[200],"when":[201],"are":[204],"machine.":[210]},"counts_by_year":[{"year":2021,"cited_by_count":1}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}