{"id":"https://openalex.org/W3009808474","doi":"https://doi.org/10.1109/tkde.2020.2978469","title":"A Framework for Anomaly Detection in Time-Driven and Event-Driven Processes using Kernel Traces","display_name":"A Framework for Anomaly Detection in Time-Driven and Event-Driven Processes using Kernel Traces","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3009808474","doi":"https://doi.org/10.1109/tkde.2020.2978469","mag":"3009808474"},"language":"en","primary_location":{"id":"doi:10.1109/tkde.2020.2978469","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2020.2978469","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009214615","display_name":"Okwudili M. Ezeme","orcid":"https://orcid.org/0000-0002-0957-0566"},"institutions":[{"id":"https://openalex.org/I39470171","display_name":"Ontario Tech University","ror":"https://ror.org/016zre027","country_code":"CA","type":"education","lineage":["https://openalex.org/I39470171"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Okwudili M. Ezeme","raw_affiliation_strings":["Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa, ON, Canada","[Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa ON, L1G 0C5, Canada (e-mail: ezeme.okwudili@gmail.com)]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa, ON, Canada","institution_ids":["https://openalex.org/I39470171"]},{"raw_affiliation_string":"[Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa ON, L1G 0C5, Canada (e-mail: ezeme.okwudili@gmail.com)]","institution_ids":["https://openalex.org/I39470171"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011840659","display_name":"Qusay H. Mahmoud","orcid":"https://orcid.org/0000-0003-0472-5757"},"institutions":[{"id":"https://openalex.org/I39470171","display_name":"Ontario Tech University","ror":"https://ror.org/016zre027","country_code":"CA","type":"education","lineage":["https://openalex.org/I39470171"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Qusay Mahmoud","raw_affiliation_strings":["Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa, ON, Canada","[Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa ON, L1G 0C5, Canada (e-mail: qusay.mahmoud@uoit.ca)]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa, ON, Canada","institution_ids":["https://openalex.org/I39470171"]},{"raw_affiliation_string":"[Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa ON, L1G 0C5, Canada (e-mail: qusay.mahmoud@uoit.ca)]","institution_ids":["https://openalex.org/I39470171"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053938324","display_name":"Akramul Azim","orcid":"https://orcid.org/0000-0002-6292-6939"},"institutions":[{"id":"https://openalex.org/I39470171","display_name":"Ontario Tech University","ror":"https://ror.org/016zre027","country_code":"CA","type":"education","lineage":["https://openalex.org/I39470171"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Akramul Azim","raw_affiliation_strings":["Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa, ON, Canada","[Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa ON, L1G 0C5, Canada (e-mail: akramul.azim@uoit.ca)]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa, ON, Canada","institution_ids":["https://openalex.org/I39470171"]},{"raw_affiliation_string":"[Department of Electrical, Computer and Software Engineering, Ontario Tech University, Oshawa ON, L1G 0C5, Canada (e-mail: akramul.azim@uoit.ca)]","institution_ids":["https://openalex.org/I39470171"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I39470171"],"apc_list":{"value":2045,"currency":"USD","value_usd":2045},"apc_paid":null,"fwci":1.1317,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.79868807,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8778910636901855},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6786993145942688},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.5437835454940796},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.5195662975311279},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.5192946791648865},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.45952826738357544},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.43562716245651245},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4269563555717468},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4197615385055542},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3952050805091858},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.29705554246902466},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2955683767795563},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.24943062663078308}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8778910636901855},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6786993145942688},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.5437835454940796},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.5195662975311279},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.5192946791648865},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.45952826738357544},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.43562716245651245},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4269563555717468},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4197615385055542},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3952050805091858},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.29705554246902466},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2955683767795563},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.24943062663078308},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tkde.2020.2978469","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2020.2978469","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5400000214576721}],"awards":[],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1465777884","https://openalex.org/W1941427975","https://openalex.org/W1984350393","https://openalex.org/W2000470949","https://openalex.org/W2038819732","https://openalex.org/W2039148409","https://openalex.org/W2039157918","https://openalex.org/W2049058890","https://openalex.org/W2064675550","https://openalex.org/W2087671069","https://openalex.org/W2122646361","https://openalex.org/W2129860818","https://openalex.org/W2150355110","https://openalex.org/W2155915275","https://openalex.org/W2508613594","https://openalex.org/W2550602215","https://openalex.org/W2767094836","https://openalex.org/W2774424149","https://openalex.org/W2911153497","https://openalex.org/W2913028175","https://openalex.org/W2946798255","https://openalex.org/W2989468624","https://openalex.org/W4231640108","https://openalex.org/W4239856175","https://openalex.org/W6635969386","https://openalex.org/W6683235873","https://openalex.org/W6737155448","https://openalex.org/W6746827724","https://openalex.org/W6756753118","https://openalex.org/W6770116543"],"related_works":["https://openalex.org/W17155033","https://openalex.org/W3207760230","https://openalex.org/W1496222301","https://openalex.org/W1590307681","https://openalex.org/W2536018345","https://openalex.org/W4312814274","https://openalex.org/W4285370786","https://openalex.org/W278680301","https://openalex.org/W2144996318","https://openalex.org/W2130642229"],"abstract_inverted_index":{"Model-checking":[0],"and":[1,6,99,114,124,145],"verification":[2],"using":[3],"Kripke":[4],"structures":[5],"computational":[7],"tree":[8],"logic*":[9],"(CTL*)":[10],"use":[11],"abstractions":[12,55],"from":[13,138],"the":[14,18,23,30,37,40,45,59,83,86,90,95,97,100,119,146,161,175],"model/process/application":[15],"to":[16,57,61,88,117],"create":[17,62,166],"state-transition":[19],"graphs":[20],"that":[21,36,111,149,155,172],"verify":[22],"model":[24,78,154],"behavior.":[25],"This":[26],"scheme":[27],"of":[28,32,39,50,85,121,160],"profiling":[29],"performance":[31],"a":[33,75,133,152,167],"process":[34,41],"imports":[35],"depth":[38],"operation":[42],"correlates":[43],"with":[44,132],"level":[46],"abstraction.":[47],"However,":[48],"because":[49],"state":[51],"explosion":[52],"problems,":[53],"these":[54],"tend":[56],"restrict":[58],"scope":[60],"manageable":[63],"execution":[64,91],"states.":[65],"Therefore,":[66],"for":[67],"context":[68],"modeling,":[69],"this":[70,104,130],"procedure":[71],"does":[72],"not":[73],"generate":[74],"fine-grained":[76,153],"behavioral":[77],"as":[79,174],"generated":[80,137],"states":[81],"limit":[82],"ability":[84],"abstraction":[87],"capture":[89],"time":[92],"interactions":[93],"amongst":[94],"processes,":[96],"hardware,":[98],"kernel.":[101],"Hence,":[102],"in":[103],"paper,":[105],"we":[106,164],"present":[107],"an":[108,139],"end-to-end":[109],"framework":[110,131,171],"comprises":[112],"auto-encoders":[113],"probabilistic":[115],"models":[116],"understand":[118],"behavior":[120],"system":[122,162],"processes":[123],"detect":[125],"deviant":[126],"behaviors.":[127],"We":[128],"test":[129],"publicly":[134],"available":[135],"dataset":[136],"autonomous":[140],"aerial":[141],"vehicle":[142],"(UAV)":[143],"application":[144],"results":[147],"show":[148],"by":[150],"creating":[151],"exploits":[156],"previously":[157],"unharnessed":[158],"properties":[159],"calls,":[163],"can":[165],"dynamic":[168],"anomaly":[169],"detection":[170],"evolves":[173],"threats":[176],"change.":[177]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":6},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":1}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2025-10-10T00:00:00"}