{"id":"https://openalex.org/W1980939416","doi":"https://doi.org/10.1109/icnss.2011.6059967","title":"CloudSec: A security monitoring appliance for Virtual Machines in the IaaS cloud model","display_name":"CloudSec: A security monitoring appliance for Virtual Machines in the IaaS cloud model","publication_year":2011,"publication_date":"2011-09-01","ids":{"openalex":"https://openalex.org/W1980939416","doi":"https://doi.org/10.1109/icnss.2011.6059967","mag":"1980939416"},"language":"en","primary_location":{"id":"doi:10.1109/icnss.2011.6059967","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icnss.2011.6059967","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 5th International Conference on Network and System Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://figshare.com/articles/conference_contribution/CloudSec_a_security_monitoring_appliance_for_virtual_machines_in_the_IaaS_cloud_model/20896639","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000097766","display_name":"Amani S. Ibrahim","orcid":"https://orcid.org/0000-0001-8747-1419"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Amani S. Ibrahim","raw_affiliation_strings":["Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Victoria, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Victoria, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090144417","display_name":"James Hamlyn-Harris","orcid":null},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"James Hamlyn-Harris","raw_affiliation_strings":["Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Victoria, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Victoria, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082913979","display_name":"John Grundy","orcid":"https://orcid.org/0000-0003-4928-7076"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"John Grundy","raw_affiliation_strings":["Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Victoria, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Victoria, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076382877","display_name":"Mohamed Almorsy","orcid":null},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mohamed Almorsy","raw_affiliation_strings":["Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Victoria, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Centre for Computing and Engineering Software Systems, Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Victoria, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I57093077"],"apc_list":null,"apc_paid":null,"fwci":13.3727,"has_fulltext":false,"cited_by_count":90,"citation_normalized_percentile":{"value":0.98801443,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"113","last_page":"120"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.84626305103302},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8107675909996033},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7846500873565674},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.7753527164459229},{"id":"https://openalex.org/keywords/rootkit","display_name":"Rootkit","score":0.7314356565475464},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.6240230202674866},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5852839946746826},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5077215433120728},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.44007444381713867},{"id":"https://openalex.org/keywords/hardware-virtualization","display_name":"Hardware virtualization","score":0.4380641281604767},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.38443291187286377},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3568490743637085},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.28636762499809265}],"concepts":[{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.84626305103302},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8107675909996033},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7846500873565674},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.7753527164459229},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.7314356565475464},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.6240230202674866},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5852839946746826},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5077215433120728},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.44007444381713867},{"id":"https://openalex.org/C68793194","wikidata":"https://www.wikidata.org/wiki/Q1616095","display_name":"Hardware virtualization","level":5,"score":0.4380641281604767},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.38443291187286377},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3568490743637085},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.28636762499809265}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1109/icnss.2011.6059967","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icnss.2011.6059967","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 5th International Conference on Network and System Security","raw_type":"proceedings-article"},{"id":"pmh:oai:researchbank.swinburne.edu.au:85e8efbc-7d31-45f6-814d-2e481a9c9029/1","is_oa":false,"landing_page_url":"http://hdl.handle.net/1959.3/201355","pdf_url":null,"source":{"id":"https://openalex.org/S4306401157","display_name":"Swinburne Research Bank (Swinburne University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I57093077","host_organization_name":"Swinburne University of Technology","host_organization_lineage":["https://openalex.org/I57093077"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"2011 5th International Conference on Network and System Security (NSS 2011), Milan, Italy, 06-08 September 2011 / Pierangela Samarati, Sara Foresti, Jiankun Hu, and Giovanni Livraga (eds.), pp. 113-120","raw_type":"acceptedVersion"},{"id":"pmh:oai:dro.deakin.edu.au:DU:30086546","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306402457","display_name":"Deakin Research Online (Deakin University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I149704539","host_organization_name":"Deakin University","host_organization_lineage":["https://openalex.org/I149704539"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference Paper"},{"id":"pmh:oai:figshare.com:article/20896639","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/CloudSec_a_security_monitoring_appliance_for_virtual_machines_in_the_IaaS_cloud_model/20896639","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference contribution"},{"id":"pmh:oai:figshare.com:article/26215088","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/CloudSec_A_security_monitoring_appliance_for_Virtual_Machines_in_the_IaaS_cloud_model/26215088","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},{"id":"doi:10.25916/sut.26215088.v1","is_oa":true,"landing_page_url":"https://doi.org/10.25916/sut.26215088.v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401157","display_name":"Swinburne Research Bank (Swinburne University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I57093077","host_organization_name":"Swinburne University of Technology","host_organization_lineage":["https://openalex.org/I57093077"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"pmh:oai:figshare.com:article/20896639","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/CloudSec_a_security_monitoring_appliance_for_virtual_machines_in_the_IaaS_cloud_model/20896639","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference contribution"},"sustainable_development_goals":[{"display_name":"Decent work and economic growth","id":"https://metadata.un.org/sdg/8","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W51022818","https://openalex.org/W86730287","https://openalex.org/W1641762327","https://openalex.org/W1985922060","https://openalex.org/W1989086707","https://openalex.org/W2006172326","https://openalex.org/W2048997531","https://openalex.org/W2097015782","https://openalex.org/W2102829166","https://openalex.org/W2115953591","https://openalex.org/W2121096285","https://openalex.org/W2132539529","https://openalex.org/W2140908857","https://openalex.org/W2144006591","https://openalex.org/W2162444489","https://openalex.org/W2168760272","https://openalex.org/W2224272967","https://openalex.org/W2953031532","https://openalex.org/W2963358330","https://openalex.org/W6681317963","https://openalex.org/W6688944104"],"related_works":["https://openalex.org/W2743348030","https://openalex.org/W2088620127","https://openalex.org/W2622620488","https://openalex.org/W2017036943","https://openalex.org/W3083135738","https://openalex.org/W2005435933","https://openalex.org/W2747005099","https://openalex.org/W2145292010","https://openalex.org/W1665205069","https://openalex.org/W2086039693"],"abstract_inverted_index":{"The":[0],"Infrastructure-as-a-Service":[1],"(IaaS)":[2],"cloud":[3,94],"computing":[4,10,95],"model":[5],"has":[6,24],"become":[7],"a":[8,13,25,38,100,155,169,176],"compelling":[9],"solution":[11,72],"with":[12],"proven":[14],"ability":[15],"to":[16,73,126,158],"reduce":[17],"costs":[18],"and":[19,97,109,145,187],"improve":[20],"resource":[21],"efficiency.":[22],"Virtualization":[23],"key":[26],"role":[27],"in":[28,116],"supporting":[29],"the":[30,45,51,75,79,88,92,117,140,147,183,188],"IaaS":[31,80,93,118],"model.":[32,81,119],"However,":[33],"virtualization":[34],"also":[35],"makes":[36,57],"it":[37],"target":[39],"for":[40,113,162],"potent":[41],"rootkits":[42],"because":[43],"of":[44,47,78,91,130,191],"loss":[46],"control":[48],"problem":[49,90],"over":[50],"hosted":[52,114],"Virtual":[53],"Machines":[54],"(VMs).":[55],"This":[56],"traditional":[58],"in-guest":[59],"security":[60,89,111],"solutions,":[61],"relying":[62],"on":[63,175],"operating":[64],"system":[65,184],"kernel":[66,150,163],"trustworthiness,":[67],"no":[68],"longer":[69],"an":[70],"effective":[71],"secure":[74],"virtual":[76,122],"infrastructure":[77],"In":[82],"this":[83],"paper,":[84],"we":[85],"explore":[86],"briefly":[87],"model,":[96],"present":[98],"CloudSec,":[99],"new":[101],"virtualization-aware":[102],"monitoring":[103,112,137,185],"appliance":[104],"that":[105],"provides":[106],"active,":[107],"transparent":[108],"real-time":[110],"VMs":[115],"CloudSec":[120],"utilizes":[121],"machine":[123],"introspection":[124],"techniques":[125],"provide":[127],"fine-grained":[128],"inspection":[129],"VM's":[131],"physical":[132],"memory":[133],"without":[134],"installing":[135],"any":[136],"code":[138],"inside":[139],"VM.":[141],"It":[142],"actively":[143],"reconstructs":[144],"monitors":[146],"dynamically":[148],"changing":[149],"data":[151,164],"structures":[152],"instances,":[153],"as":[154],"prior":[156],"step":[157],"enable":[159],"providing":[160],"protection":[161],"structures.":[165],"We":[166,180],"have":[167,181],"implemented":[168],"proof-of-concept":[170],"prototype":[171],"using":[172],"VMsafe":[173],"libraries":[174],"VMware":[177],"ESX":[178],"platform.":[179],"evaluated":[182],"accuracy":[186],"performance":[189],"overhead":[190],"CloudSec.":[192]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":10},{"year":2017,"cited_by_count":10},{"year":2016,"cited_by_count":14},{"year":2015,"cited_by_count":10},{"year":2014,"cited_by_count":8},{"year":2013,"cited_by_count":9},{"year":2012,"cited_by_count":14}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}