{"id":"https://openalex.org/W2754693293","doi":"https://doi.org/10.1134/s0361768817050036","title":"A lightweight method for virtual machine introspection","display_name":"A lightweight method for virtual machine introspection","publication_year":2017,"publication_date":"2017-09-01","ids":{"openalex":"https://openalex.org/W2754693293","doi":"https://doi.org/10.1134/s0361768817050036","mag":"2754693293"},"language":"en","primary_location":{"id":"doi:10.1134/s0361768817050036","is_oa":false,"landing_page_url":"https://doi.org/10.1134/s0361768817050036","pdf_url":null,"source":{"id":"https://openalex.org/S150218641","display_name":"Programming and Computer Software","issn_l":"0361-7688","issn":["0361-7688","1608-3261"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320267","host_organization_name":"Pleiades Publishing","host_organization_lineage":["https://openalex.org/P4310320267","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Pleiades Publishing","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Programming and Computer Software","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083043160","display_name":"Natalia Fursova","orcid":null},"institutions":[{"id":"https://openalex.org/I99205534","display_name":"Yaroslav-the-Wise Novgorod State University","ror":"https://ror.org/04qzrw529","country_code":"RU","type":"education","lineage":["https://openalex.org/I99205534"]}],"countries":["RU"],"is_corresponding":true,"raw_author_name":"N. I. Fursova","raw_affiliation_strings":["Novgorod State University, Velikii Novgorod, Russia"],"affiliations":[{"raw_affiliation_string":"Novgorod State University, Velikii Novgorod, Russia","institution_ids":["https://openalex.org/I99205534"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063526024","display_name":"Pavel Dovgalyuk","orcid":"https://orcid.org/0000-0003-2483-5718"},"institutions":[{"id":"https://openalex.org/I99205534","display_name":"Yaroslav-the-Wise Novgorod State University","ror":"https://ror.org/04qzrw529","country_code":"RU","type":"education","lineage":["https://openalex.org/I99205534"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"P. M. Dovgalyuk","raw_affiliation_strings":["Novgorod State University, Velikii Novgorod, Russia"],"affiliations":[{"raw_affiliation_string":"Novgorod State University, Velikii Novgorod, Russia","institution_ids":["https://openalex.org/I99205534"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020208798","display_name":"I. A. Vasil\u2019ev","orcid":null},"institutions":[{"id":"https://openalex.org/I99205534","display_name":"Yaroslav-the-Wise Novgorod State University","ror":"https://ror.org/04qzrw529","country_code":"RU","type":"education","lineage":["https://openalex.org/I99205534"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"I. A. Vasil\u2019ev","raw_affiliation_strings":["Novgorod State University, Velikii Novgorod, Russia"],"affiliations":[{"raw_affiliation_string":"Novgorod State University, Velikii Novgorod, Russia","institution_ids":["https://openalex.org/I99205534"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103185960","display_name":"Vladimir Makarov","orcid":"https://orcid.org/0000-0002-8218-1145"},"institutions":[{"id":"https://openalex.org/I99205534","display_name":"Yaroslav-the-Wise Novgorod State University","ror":"https://ror.org/04qzrw529","country_code":"RU","type":"education","lineage":["https://openalex.org/I99205534"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"V. A. Makarov","raw_affiliation_strings":["Novgorod State University, Velikii Novgorod, Russia"],"affiliations":[{"raw_affiliation_string":"Novgorod State University, Velikii Novgorod, Russia","institution_ids":["https://openalex.org/I99205534"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5083043160"],"corresponding_institution_ids":["https://openalex.org/I99205534"],"apc_list":null,"apc_paid":null,"fwci":0.7801,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.7958693,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"43","issue":"5","first_page":"307","last_page":"313"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9837999939918518,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9769999980926514,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8504678010940552},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.806154191493988},{"id":"https://openalex.org/keywords/introspection","display_name":"Introspection","score":0.8005845546722412},{"id":"https://openalex.org/keywords/interface","display_name":"Interface (matter)","score":0.6086840033531189},{"id":"https://openalex.org/keywords/identifier","display_name":"Identifier","score":0.5579967498779297},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.5493773818016052},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.46100541949272156},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.45656853914260864},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.4473669230937958},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.22518306970596313}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8504678010940552},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.806154191493988},{"id":"https://openalex.org/C129671850","wikidata":"https://www.wikidata.org/wiki/Q210501","display_name":"Introspection","level":2,"score":0.8005845546722412},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.6086840033531189},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.5579967498779297},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.5493773818016052},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.46100541949272156},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.45656853914260864},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.4473669230937958},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.22518306970596313},{"id":"https://openalex.org/C129307140","wikidata":"https://www.wikidata.org/wiki/Q6795880","display_name":"Maximum bubble pressure method","level":3,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C157915830","wikidata":"https://www.wikidata.org/wiki/Q2928001","display_name":"Bubble","level":2,"score":0.0},{"id":"https://openalex.org/C78458016","wikidata":"https://www.wikidata.org/wiki/Q840400","display_name":"Evolutionary biology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1134/s0361768817050036","is_oa":false,"landing_page_url":"https://doi.org/10.1134/s0361768817050036","pdf_url":null,"source":{"id":"https://openalex.org/S150218641","display_name":"Programming and Computer Software","issn_l":"0361-7688","issn":["0361-7688","1608-3261"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320267","host_organization_name":"Pleiades Publishing","host_organization_lineage":["https://openalex.org/P4310320267","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Pleiades Publishing","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Programming and Computer Software","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320316785","display_name":"VMware","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W1966973702","https://openalex.org/W1992496112","https://openalex.org/W2026854251","https://openalex.org/W2101419798","https://openalex.org/W2133217855","https://openalex.org/W2215262239","https://openalex.org/W2262579654","https://openalex.org/W2562111637"],"related_works":["https://openalex.org/W4387404794","https://openalex.org/W2380479582","https://openalex.org/W4387405288","https://openalex.org/W4387404506","https://openalex.org/W2084234399","https://openalex.org/W4387405632","https://openalex.org/W162955351","https://openalex.org/W2356881557","https://openalex.org/W2054719909","https://openalex.org/W2580663612"],"abstract_inverted_index":{"A":[0],"method":[1,16,72,210],"for":[2,122,199,231],"the":[3,27,31,46,61,70,76,79,82,95,102,123,129,142,151,154,160,181,208,214,258,269,274,280,283,290,296,303,308,313],"introspection":[4,71,90,114,317],"of":[5,14,45,55,63,69,78,133,153,162,173,180,202,240,260,282,298,320,323],"virtual":[6],"machines":[7],"is":[8,17,73,92,136,192,211,271,305,325],"proposed.":[9],"The":[10,38,66,89,112,204,226,238,337],"main":[11,205],"distinctive":[12],"feature":[13],"this":[15],"that":[18,278,332],"it":[19,21,191],"makes":[20],"possible":[22,194],"to":[23,75,138,168,177,195,212,248,251,273,287],"obtain":[24],"information":[25],"about":[26,34,81],"system":[28,56,83,156,215,233,266,275],"operation":[29],"using":[30,125],"minimum":[32],"knowledge":[33,80],"its":[35,86,163],"internal":[36],"organization.":[37],"proposed":[39,209],"approach":[40],"uses":[41],"rarely":[42,188],"changing":[43],"parts":[44,179],"application":[47,182],"binary":[48,183],"interface,":[49],"such":[50],"as":[51],"identifiers":[52],"and":[53,60,84,106,118,144,190,216,220,223,234,256,285],"parameters":[54,161,222],"calls,":[57],"calling":[58,232],"conventions,":[59],"formats":[62],"executable":[64],"files.":[65],"lightweight":[67],"property":[68],"due":[74],"minimization":[77],"by":[85,244,341],"high":[87],"performance.":[88],"infrastructure":[91],"based":[93],"on":[94,150,159],"QEMU":[96,241],"emulator,":[97],"version":[98,152],"2.8.":[99],"Presently,":[100],"monitoring":[101],"file":[103],"operations,":[104],"processes,":[105],"API":[107,300,309],"function":[108,218,301,310,314],"calls":[109,219],"are":[110,187,242,329,333],"implemented.":[111],"available":[113],"tools":[115,166],"(RTKDSM,":[116],"Panda,":[117],"DECAF)":[119],"get":[120],"data":[121,130],"analysis":[124],"kernel":[126],"structures.":[127],"All":[128],"obtained":[131],"(addresses":[132],"structures,":[134],"etc.)":[135],"written":[137],"special":[139,229],"profiles.":[140,174],"Since":[141],"addresses":[143],"offsets":[145],"strongly":[146],"depend":[147],"not":[148],"only":[149],"operating":[155],"but":[157,307],"also":[158],"assembly,":[164],"these":[165],"have":[167],"store":[169],"a":[170,200,265,321],"large":[171],"number":[172,281],"We":[175],"propose":[176],"use":[178,196],"interface":[184],"because":[185],"they":[186],"modified":[189],"often":[193],"one":[197,250],"profile":[198],"family":[201],"OSs.":[203],"idea":[206],"underlying":[207],"intercept":[213],"library":[217],"read":[221],"returned":[224],"values.":[225],"processor":[227],"provides":[228],"instructions":[230,259],"user":[235],"defined":[236],"functions.":[237],"capabilities":[239],"extended":[243],"an":[245,299],"instrumentation":[246],"mechanism":[247],"enable":[249],"track":[252],"each":[253],"executed":[254],"instruction":[255],"find":[257],"interest":[261],"among":[262],"them.":[263],"When":[264],"call":[267,276,284],"occurs,":[268],"control":[270],"passed":[272],"detector":[277,311],"checks":[279,312],"decides":[286],"which":[288],"module":[289],"job":[291],"should":[292],"be":[293],"forwarded.":[294],"In":[295],"case":[297],"call,":[302],"situation":[304],"similar,":[306],"address.":[315],"An":[316],"tool":[318],"consisting":[319],"set":[322],"modules":[324,328,338],"developed.":[326],"These":[327],"dynamic":[330],"libraries":[331],"plugged":[334],"in":[335],"QEMU.":[336],"can":[339],"interact":[340],"exchanging":[342],"data.":[343]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}