{"id":"https://openalex.org/W4254762831","doi":"https://doi.org/10.1145/1095810.1095824","title":"Vigilante","display_name":"Vigilante","publication_year":2005,"publication_date":"2005-10-20","ids":{"openalex":"https://openalex.org/W4254762831","doi":"https://doi.org/10.1145/1095810.1095824"},"language":"en","primary_location":{"id":"doi:10.1145/1095810.1095824","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1095810.1095824","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the twentieth ACM symposium on Operating systems principles","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110237883","display_name":"Manuel Costa","orcid":null},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]},{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Manuel Costa","raw_affiliation_strings":["University of Cambridge, Cambridge, UK and Microsoft Research Ltd., Cambridge, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cambridge, Cambridge, UK and Microsoft Research Ltd., Cambridge, UK","institution_ids":["https://openalex.org/I241749","https://openalex.org/I4210164937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062093738","display_name":"Jon Crowcroft","orcid":"https://orcid.org/0000-0002-7013-0121"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jon Crowcroft","raw_affiliation_strings":["University of Cambridge, Cambridge, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cambridge, Cambridge, UK","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103080503","display_name":"Miguel Castro","orcid":"https://orcid.org/0000-0001-9517-1408"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Miguel Castro","raw_affiliation_strings":["Microsoft Research Ltd., Cambridge, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research Ltd., Cambridge, UK","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033317994","display_name":"Antony Rowstron","orcid":"https://orcid.org/0009-0009-5936-6895"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Antony Rowstron","raw_affiliation_strings":["Microsoft Research Ltd., Cambridge, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research Ltd., Cambridge, UK","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037359171","display_name":"Lidong Zhou","orcid":"https://orcid.org/0000-0002-7258-3116"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lidong Zhou","raw_affiliation_strings":["Microsoft Research Silicon Valley, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research Silicon Valley, CA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101985940","display_name":"Lintao Zhang","orcid":"https://orcid.org/0009-0005-7527-8183"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lintao Zhang","raw_affiliation_strings":["Microsoft Research Silicon Valley, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research Silicon Valley, CA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110193634","display_name":"Paul Barham","orcid":null},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Paul Barham","raw_affiliation_strings":["Microsoft Research Ltd., Cambridge, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research Ltd., Cambridge, UK","institution_ids":["https://openalex.org/I4210164937"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":273,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"133","last_page":"147"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8539364337921143},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8041094541549683},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.6677128076553345},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5935211181640625},{"id":"https://openalex.org/keywords/blocking","display_name":"Blocking (statistics)","score":0.5601316690444946},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5410245060920715},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5402564406394958},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.5314527750015259},{"id":"https://openalex.org/keywords/containment","display_name":"Containment (computer programming)","score":0.4826355576515198},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2796980142593384},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1461726725101471},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.08049774169921875}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8539364337921143},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8041094541549683},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.6677128076553345},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5935211181640625},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.5601316690444946},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5410245060920715},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5402564406394958},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.5314527750015259},{"id":"https://openalex.org/C2777019822","wikidata":"https://www.wikidata.org/wiki/Q390066","display_name":"Containment (computer programming)","level":2,"score":0.4826355576515198},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2796980142593384},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1461726725101471},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.08049774169921875},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1095810.1095824","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1095810.1095824","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the twentieth ACM symposium on Operating systems principles","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W48317398","https://openalex.org/W1490025813","https://openalex.org/W1502476232","https://openalex.org/W1516506771","https://openalex.org/W1587981097","https://openalex.org/W1641762327","https://openalex.org/W1774418490","https://openalex.org/W1994340575","https://openalex.org/W2031006315","https://openalex.org/W2092043296","https://openalex.org/W2100666033","https://openalex.org/W2100970777","https://openalex.org/W2101699859","https://openalex.org/W2103919170","https://openalex.org/W2109219878","https://openalex.org/W2117002131","https://openalex.org/W2134006599","https://openalex.org/W2137786570","https://openalex.org/W2142840915","https://openalex.org/W2155659292","https://openalex.org/W2161728228","https://openalex.org/W2163762767","https://openalex.org/W2171264329","https://openalex.org/W2743634147","https://openalex.org/W4232895233","https://openalex.org/W4234020632","https://openalex.org/W4248388227","https://openalex.org/W4256483320","https://openalex.org/W6631540460","https://openalex.org/W6635716266","https://openalex.org/W6638056121","https://openalex.org/W6683345705","https://openalex.org/W7066491068"],"related_works":["https://openalex.org/W17155033","https://openalex.org/W3207760230","https://openalex.org/W1496222301","https://openalex.org/W1590307681","https://openalex.org/W2536018345","https://openalex.org/W4312814274","https://openalex.org/W2906845177","https://openalex.org/W4200107511","https://openalex.org/W2891427086","https://openalex.org/W1968625315"],"abstract_inverted_index":{"Worm":[0],"containment":[1],"must":[2],"be":[3,99],"automatic":[4],"because":[5,29],"worms":[6,39,53,83,134],"can":[7,98,130],"spread":[8],"too":[9],"fast":[10],"for":[11],"humans":[12],"to":[13,21,51,73,81],"respond.":[14],"Recent":[15],"work":[16],"has":[17],"proposed":[18],"network-level":[19],"techniques":[20,26],"automate":[22],"worm":[23,63,90],"containment;":[24],"these":[25,57],"have":[27],"limitations":[28],"there":[30],"is":[31],"no":[32],"information":[33],"about":[34],"the":[35,41,119,123],"vulnerabilities":[36,138],"exploited":[37],"by":[38,102,117],"at":[40,65],"network":[42],"level.":[43],"We":[44,126],"propose":[45],"Vigilante,":[46],"a":[47],"new":[48],"end-to-end":[49],"approach":[50],"contain":[52,132],"automatically":[54,131],"that":[55,97,114,128,135],"addresses":[56],"limitations.":[58],"Vigilante":[59,129],"relies":[60],"on":[61],"collaborative":[62],"detection":[64],"end":[66],"hosts,":[67],"but":[68],"does":[69],"not":[70],"require":[71],"hosts":[72,107],"trust":[74],"each":[75],"other.":[76],"Hosts":[77],"run":[78],"instrumented":[79],"software":[80],"detect":[82],"and":[84],"broadcast":[85],"self-certifying":[86],"alerts":[87],"(SCAs)":[88],"upon":[89],"detection.":[91],"SCAs":[92],"are":[93],"proofs":[94],"of":[95,122],"vulnerability":[96],"inexpensively":[100],"verified":[101],"any":[103],"vulnerable":[104,124],"host.":[105],"When":[106],"receive":[108],"an":[109],"SCA,":[110],"they":[111],"generate":[112],"filters":[113],"block":[115],"infection":[116],"analysing":[118],"SCA-guided":[120],"execution":[121],"software.":[125],"show":[127],"fast-spreading":[133],"exploit":[136],"unknown":[137],"without":[139],"blocking":[140],"innocuous":[141],"traffic.":[142]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":8},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":13},{"year":2013,"cited_by_count":12},{"year":2012,"cited_by_count":18}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2022-05-12T00:00:00"}