{"id":"https://openalex.org/W3138376364","doi":"https://doi.org/10.1109/tcc.2021.3067829","title":"Blue-Pill Oxpecker: A VMI Platform for Transactional Modification","display_name":"Blue-Pill Oxpecker: A VMI Platform for Transactional Modification","publication_year":2021,"publication_date":"2021-03-22","ids":{"openalex":"https://openalex.org/W3138376364","doi":"https://doi.org/10.1109/tcc.2021.3067829","mag":"3138376364"},"language":"en","primary_location":{"id":"doi:10.1109/tcc.2021.3067829","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcc.2021.3067829","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074906575","display_name":"Seyed Mohammad Ali Aghamirmohammadali","orcid":"https://orcid.org/0000-0002-9898-6554"},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":true,"raw_author_name":"Seyed Mohammad AghamirMohammadAli","raw_affiliation_strings":["S4Lab, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"affiliations":[{"raw_affiliation_string":"S4Lab, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079044953","display_name":"Behnam Momeni","orcid":"https://orcid.org/0000-0003-4988-5949"},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Behnam Momeni","raw_affiliation_strings":["S4Lab, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"affiliations":[{"raw_affiliation_string":"S4Lab, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050120306","display_name":"Solmaz Salimi","orcid":"https://orcid.org/0009-0009-1275-8373"},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Solmaz Salimi","raw_affiliation_strings":["S4Lab, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"affiliations":[{"raw_affiliation_string":"S4Lab, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060444268","display_name":"Mehdi Kharrazi","orcid":"https://orcid.org/0000-0002-1773-8314"},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Mehdi Kharrazi","raw_affiliation_strings":["S4Lab, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"affiliations":[{"raw_affiliation_string":"S4Lab, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5074906575"],"corresponding_institution_ids":["https://openalex.org/I133529467"],"apc_list":null,"apc_paid":null,"fwci":0.8158,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.77294515,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":96},"biblio":{"volume":"11","issue":"1","first_page":"1","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8537400960922241},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6407996416091919},{"id":"https://openalex.org/keywords/transactional-memory","display_name":"Transactional memory","score":0.6343245506286621},{"id":"https://openalex.org/keywords/database-transaction","display_name":"Database transaction","score":0.5106845498085022},{"id":"https://openalex.org/keywords/transaction-processing","display_name":"Transaction processing","score":0.4777989983558655},{"id":"https://openalex.org/keywords/callback","display_name":"Callback","score":0.44959723949432373},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4430021643638611},{"id":"https://openalex.org/keywords/concurrency","display_name":"Concurrency","score":0.4316525161266327},{"id":"https://openalex.org/keywords/rootkit","display_name":"Rootkit","score":0.4280816316604614},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.4230673909187317},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.41514983773231506},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.3533543348312378},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.34023064374923706},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2196173369884491},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.20960628986358643}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8537400960922241},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6407996416091919},{"id":"https://openalex.org/C134277064","wikidata":"https://www.wikidata.org/wiki/Q878206","display_name":"Transactional memory","level":3,"score":0.6343245506286621},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.5106845498085022},{"id":"https://openalex.org/C72108876","wikidata":"https://www.wikidata.org/wiki/Q844565","display_name":"Transaction processing","level":3,"score":0.4777989983558655},{"id":"https://openalex.org/C204495577","wikidata":"https://www.wikidata.org/wiki/Q1205349","display_name":"Callback","level":2,"score":0.44959723949432373},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4430021643638611},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.4316525161266327},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.4280816316604614},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.4230673909187317},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.41514983773231506},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.3533543348312378},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.34023064374923706},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2196173369884491},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.20960628986358643}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tcc.2021.3067829","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcc.2021.3067829","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W17417926","https://openalex.org/W19788882","https://openalex.org/W57172993","https://openalex.org/W1813040609","https://openalex.org/W1963581527","https://openalex.org/W1969081960","https://openalex.org/W1975177131","https://openalex.org/W1992496112","https://openalex.org/W1993101454","https://openalex.org/W1997010178","https://openalex.org/W1998640342","https://openalex.org/W2002627919","https://openalex.org/W2005886648","https://openalex.org/W2006172326","https://openalex.org/W2010042648","https://openalex.org/W2011724792","https://openalex.org/W2020184885","https://openalex.org/W2077171549","https://openalex.org/W2087740020","https://openalex.org/W2088364396","https://openalex.org/W2110756602","https://openalex.org/W2112731379","https://openalex.org/W2135162105","https://openalex.org/W2138580357","https://openalex.org/W2144006591","https://openalex.org/W2159265516","https://openalex.org/W2161958410","https://openalex.org/W2168760272","https://openalex.org/W2322541430","https://openalex.org/W2460736843","https://openalex.org/W2481266035","https://openalex.org/W2547946241","https://openalex.org/W2562095577","https://openalex.org/W2597719305","https://openalex.org/W2762621598","https://openalex.org/W4234456196","https://openalex.org/W4244083566","https://openalex.org/W4246003516","https://openalex.org/W6680672307","https://openalex.org/W6711970155","https://openalex.org/W6768959830"],"related_works":["https://openalex.org/W2613684332","https://openalex.org/W2283761799","https://openalex.org/W2130223300","https://openalex.org/W2978286473","https://openalex.org/W2171499640","https://openalex.org/W2316531414","https://openalex.org/W2101555342","https://openalex.org/W2124593258","https://openalex.org/W2556234138","https://openalex.org/W3040971933"],"abstract_inverted_index":{"Although":[0],"multiple":[1],"techniques":[2],"have":[3],"been":[4],"proposed":[5],"with":[6,35,141,191],"the":[7,11,24,40,89,95,104,128,157],"goal":[8],"of":[9,23,33,39,124],"minimizing":[10],"semantic":[12],"gap":[13],"in":[14,88,127,143],"virtual":[15],"machine":[16],"introspection,":[17],"most":[18],"concentrate":[19],"on":[20,189],"passive":[21],"observation":[22],"internal":[25,42],"state,":[26],"while":[27,156],"there":[28,48],"are":[29,49,53,161],"also":[30],"a":[31,58,64,72,109,135,178,181],"number":[32],"proposals":[34],"which":[36,121,192],"active":[37],"modification":[38],"VM's":[41],"state":[43,61,114],"is":[44,122,153,167,183],"made":[45],"possible.":[46],"However":[47],"issues":[50],"when":[51],"modifications":[52],"applied,":[54],"such":[55],"as":[56,177],"keeping":[57],"consistent":[59],"kernel":[60,130],"and":[62,94,169,176,185],"avoiding":[63],"crash.":[65],"In":[66],"this":[67],"article":[68],"we":[69],"propose":[70],"Oxpecker,":[71],"VMI":[73,136],"platform":[74],"for":[75,117],"transactional":[76,96],"modification.":[77],"The":[78],"out-of-VM":[79],"read":[80],"access":[81,98],"allows":[82,99],"an":[83,118],"introspector":[84],"to":[85,101,139],"detect":[86],"malware":[87],"guest":[90,129,193],"OS":[91],"(e.g.,":[92],"rootkit)":[93],"write":[97],"Oxpecker":[100,111,166,190],"reliably":[102],"neutralize":[103],"detected":[105],"threats.":[106],"To":[107],"begin":[108],"transaction,":[110],"monitors":[112],"VM":[113,194],"changes":[115],"waiting":[116],"idle":[119],"moment":[120],"free":[123],"possible":[125,150],"race-conditions":[126],"memory.":[131,145],"Thereafter,":[132],"it":[133],"invokes":[134],"client's":[137],"callback":[138],"proceed":[140],"reading/writing":[142],"its":[144],"Upon":[146],"user":[147],"request":[148],"or":[149],"exceptions,":[151],"transaction":[152,158],"rolled":[154],"back":[155],"ACID":[159],"properties":[160],"maintained":[162],"at":[163],"all":[164],"times.":[165],"implemented":[168],"evaluated":[170],"under":[171],"different":[172],"real-world":[173],"workloads.":[174],"Additionally":[175],"practical":[179],"example,":[180],"tool":[182],"developed,":[184],"open":[186],"sourced,":[187],"based":[188],"processes":[195],"could":[196],"be":[197],"killed.":[198]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}