{"id":"https://openalex.org/W7130319589","doi":"https://doi.org/10.1109/tencon66050.2025.11375375","title":"Enhancing Virtualization Security Through System Call-Based Anomaly Detection in Containers","display_name":"Enhancing Virtualization Security Through System Call-Based Anomaly Detection in Containers","publication_year":2025,"publication_date":"2025-10-27","ids":{"openalex":"https://openalex.org/W7130319589","doi":"https://doi.org/10.1109/tencon66050.2025.11375375"},"language":null,"primary_location":{"id":"doi:10.1109/tencon66050.2025.11375375","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tencon66050.2025.11375375","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"TENCON 2025 - 2025 IEEE Region 10 Conference (TENCON)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126281873","display_name":"Jie Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I22265921","display_name":"National Central University","ror":"https://ror.org/00944ve71","country_code":"TW","type":"education","lineage":["https://openalex.org/I22265921"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Jie Zhang","raw_affiliation_strings":["National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan","institution_ids":["https://openalex.org/I22265921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126321784","display_name":"Kuan-Chieh Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I22265921","display_name":"National Central University","ror":"https://ror.org/00944ve71","country_code":"TW","type":"education","lineage":["https://openalex.org/I22265921"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Kuan-Chieh Wang","raw_affiliation_strings":["National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan","institution_ids":["https://openalex.org/I22265921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126287486","display_name":"Po-Kai Hsu","orcid":null},"institutions":[{"id":"https://openalex.org/I22265921","display_name":"National Central University","ror":"https://ror.org/00944ve71","country_code":"TW","type":"education","lineage":["https://openalex.org/I22265921"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Po-Kai Hsu","raw_affiliation_strings":["National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan","institution_ids":["https://openalex.org/I22265921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126302906","display_name":"Jhen-Jie Hsieh","orcid":null},"institutions":[{"id":"https://openalex.org/I22265921","display_name":"National Central University","ror":"https://ror.org/00944ve71","country_code":"TW","type":"education","lineage":["https://openalex.org/I22265921"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Jhen-Jie Hsieh","raw_affiliation_strings":["National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan","institution_ids":["https://openalex.org/I22265921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126289117","display_name":"Po-Shen Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I22265921","display_name":"National Central University","ror":"https://ror.org/00944ve71","country_code":"TW","type":"education","lineage":["https://openalex.org/I22265921"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Po-Shen Chen","raw_affiliation_strings":["National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan","institution_ids":["https://openalex.org/I22265921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126327314","display_name":"Tze-Rong Jian","orcid":null},"institutions":[{"id":"https://openalex.org/I22265921","display_name":"National Central University","ror":"https://ror.org/00944ve71","country_code":"TW","type":"education","lineage":["https://openalex.org/I22265921"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Tze-Rong Jian","raw_affiliation_strings":["National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan","institution_ids":["https://openalex.org/I22265921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126295437","display_name":"Kun-Hsiang Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I22265921","display_name":"National Central University","ror":"https://ror.org/00944ve71","country_code":"TW","type":"education","lineage":["https://openalex.org/I22265921"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Kun-Hsiang Huang","raw_affiliation_strings":["National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan","institution_ids":["https://openalex.org/I22265921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060250892","display_name":"Min-Te Sun","orcid":"https://orcid.org/0000-0002-8911-3831"},"institutions":[{"id":"https://openalex.org/I22265921","display_name":"National Central University","ror":"https://ror.org/00944ve71","country_code":"TW","type":"education","lineage":["https://openalex.org/I22265921"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Min-Te Sun","raw_affiliation_strings":["National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Central University,Department of Computer Science &#x0026; Information Engineering,Taoyuan,Taiwan","institution_ids":["https://openalex.org/I22265921"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041075096","display_name":"Chun\u2010Ying Huang","orcid":"https://orcid.org/0000-0002-7501-6803"},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chun-Ying Huang","raw_affiliation_strings":["National Yang Ming Chiao Tung University,Department of Computer Science &#x0026; Information Engineering,Hsinchu,Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Yang Ming Chiao Tung University,Department of Computer Science &#x0026; Information Engineering,Hsinchu,Taiwan","institution_ids":["https://openalex.org/I148366613"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.65582052,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"488","last_page":"492"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9460999965667725,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9460999965667725,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.02280000038444996,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.006599999964237213,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7784000039100647},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.6988999843597412},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.6039000153541565},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.4936999976634979},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.4925000071525574},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.44179999828338623},{"id":"https://openalex.org/keywords/unsupervised-learning","display_name":"Unsupervised learning","score":0.44130000472068787},{"id":"https://openalex.org/keywords/containerization","display_name":"Containerization","score":0.4090000092983246}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7784000039100647},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.6988999843597412},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6798999905586243},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.6039000153541565},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.4936999976634979},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.4925000071525574},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.44179999828338623},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.44130000472068787},{"id":"https://openalex.org/C2779821363","wikidata":"https://www.wikidata.org/wiki/Q428072","display_name":"Containerization","level":3,"score":0.4090000092983246},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.38029998540878296},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.38029998540878296},{"id":"https://openalex.org/C2779119184","wikidata":"https://www.wikidata.org/wiki/Q294350","display_name":"ALARM","level":2,"score":0.3788999915122986},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3695000112056732},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33009999990463257},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3287999927997589},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32820001244544983},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.3199999928474426},{"id":"https://openalex.org/C4641261","wikidata":"https://www.wikidata.org/wiki/Q11681085","display_name":"Face detection","level":4,"score":0.3084000051021576},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.302700012922287},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.2863999903202057},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2827000021934509},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.26989999413490295},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2630999982357025},{"id":"https://openalex.org/C200749887","wikidata":"https://www.wikidata.org/wiki/Q1165574","display_name":"System monitoring","level":2,"score":0.25699999928474426},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.2531999945640564},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tencon66050.2025.11375375","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tencon66050.2025.11375375","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"TENCON 2025 - 2025 IEEE Region 10 Conference (TENCON)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1981738628","https://openalex.org/W1982304603","https://openalex.org/W2023953679","https://openalex.org/W2099940443","https://openalex.org/W2169685348","https://openalex.org/W2291034565","https://openalex.org/W2598200822","https://openalex.org/W2793801973","https://openalex.org/W2901773810","https://openalex.org/W2936268283","https://openalex.org/W3034155019","https://openalex.org/W3157389449","https://openalex.org/W3208241628","https://openalex.org/W3214725335","https://openalex.org/W3215814291","https://openalex.org/W4210993374","https://openalex.org/W4214872661","https://openalex.org/W4301358380"],"related_works":[],"abstract_inverted_index":{"In":[0],"the":[1,81,107,117,130],"current":[2],"era":[3],"of":[4,84,111,120,133],"micro-services,":[5],"containerized":[6],"applications":[7],"face":[8],"unprecedented":[9],"security":[10,24,143],"challenges":[11],"due":[12,128],"to":[13,32,79,129],"shared":[14],"kernels":[15],"and":[16,56,68,92,100],"limited":[17],"isolation.":[18],"This":[19,135],"research":[20],"proposes":[21],"a":[22,40],"container":[23,47,142],"framework":[25,60],"based":[26],"on":[27],"monitoring":[28],"system":[29,49,63],"call":[30,50,64],"sequences":[31,51],"detect":[33],"anomalies":[34],"in":[35,53,144],"micro-service":[36],"containers.":[37],"We":[38],"introduce":[39],"custom":[41],"dataset":[42],"named":[43],"XXXX,":[44],"which":[45],"capture":[46],"captures":[48],"behavior":[52],"micro-services":[54],"containers":[55,113],"simulated":[57],"attacks.":[58],"The":[59],"includes":[61],"real-time":[62],"monitors,":[65],"parsers,":[66],"dashboards,":[67],"an":[69],"unsupervised":[70,75],"anomaly":[71],"detection":[72,82,102,109,118,126],"model":[73],"using":[74],"learning":[76],"with":[77],"autoencoders":[78],"enhance":[80],"capability":[83],"unknown":[85],"vulnerabilities.":[86,134],"It":[87],"leverages":[88],"containerization":[89],"benefits-simplicity,":[90],"scalability,":[91],"automation.":[93],"Our":[94],"evaluation":[95],"emphasizes":[96],"false":[97],"alarm":[98],"rate":[99],"average":[101],"time.":[103],"Results":[104],"show":[105],"that":[106],"attack":[108],"performance":[110],"most":[112],"meets":[114],"expectations,":[115],"though":[116],"time":[119,127],"one":[121],"subset":[122],"had":[123],"slightly":[124],"longer":[125],"intrinsic":[131],"complexity":[132],"work":[136],"offers":[137],"valuable":[138],"insights":[139],"for":[140],"improving":[141],"microservice":[145],"systems.":[146]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-02-19T00:00:00"}
