{"id":"https://openalex.org/W2147794177","doi":"https://doi.org/10.1145/1352592.1352622","title":"Eudaemon","display_name":"Eudaemon","publication_year":2008,"publication_date":"2008-04-01","ids":{"openalex":"https://openalex.org/W2147794177","doi":"https://doi.org/10.1145/1352592.1352622","mag":"2147794177"},"language":"en","primary_location":{"id":"doi:10.1145/1352592.1352622","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1352592.1352622","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems 2008","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045292308","display_name":"Georgios Portokalidis","orcid":"https://orcid.org/0000-0002-1665-803X"},"institutions":[{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Georgios Portokalidis","raw_affiliation_strings":["Vrije Universiteit Amsterdam, Amsterdam, Netherlands"],"affiliations":[{"raw_affiliation_string":"Vrije Universiteit Amsterdam, Amsterdam, Netherlands","institution_ids":["https://openalex.org/I865915315"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029566823","display_name":"Herbert Bos","orcid":"https://orcid.org/0000-0001-6179-1510"},"institutions":[{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Herbert Bos","raw_affiliation_strings":["Vrije Universiteit Amsterdam, Amsterdam, Netherlands"],"affiliations":[{"raw_affiliation_string":"Vrije Universiteit Amsterdam, Amsterdam, Netherlands","institution_ids":["https://openalex.org/I865915315"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5045292308"],"corresponding_institution_ids":["https://openalex.org/I865915315"],"apc_list":null,"apc_paid":null,"fwci":2.986,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.91633413,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"287","last_page":"299"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7855562567710876},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.7040802240371704},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6784749031066895},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.6199573874473572},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5757792592048645},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5483624339103699},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.541078507900238},{"id":"https://openalex.org/keywords/rootkit","display_name":"Rootkit","score":0.5409395098686218},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5306227207183838},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.5140236616134644},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.4650365710258484},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.46299442648887634},{"id":"https://openalex.org/keywords/instrumentation","display_name":"Instrumentation (computer programming)","score":0.4539113938808441},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.44364020228385925},{"id":"https://openalex.org/keywords/spare-part","display_name":"Spare part","score":0.43179547786712646},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39207834005355835},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.23260945081710815},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.14368882775306702},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.11279013752937317},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.09935835003852844},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09904497861862183}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7855562567710876},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.7040802240371704},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6784749031066895},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.6199573874473572},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5757792592048645},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5483624339103699},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.541078507900238},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.5409395098686218},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5306227207183838},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5140236616134644},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.4650365710258484},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.46299442648887634},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.4539113938808441},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.44364020228385925},{"id":"https://openalex.org/C194648553","wikidata":"https://www.wikidata.org/wiki/Q1364774","display_name":"Spare part","level":2,"score":0.43179547786712646},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39207834005355835},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.23260945081710815},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.14368882775306702},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.11279013752937317},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.09935835003852844},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09904497861862183},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1352592.1352622","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1352592.1352622","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems 2008","raw_type":"proceedings-article"},{"id":"pmh:vu:oai:research.vu.nl:publications/52d18bde-f746-42d6-a1c3-c90c3b07aaa1","is_oa":false,"landing_page_url":"https://research.vu.nl/en/publications/52d18bde-f746-42d6-a1c3-c90c3b07aaa1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"EuroSys'08 - Proceedings of the EuroSys 2008 Conference, 287 - 299","raw_type":"info:eu-repo/semantics/conferencepaper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W109802382","https://openalex.org/W146660932","https://openalex.org/W1485187417","https://openalex.org/W1489157620","https://openalex.org/W1502476232","https://openalex.org/W1510508184","https://openalex.org/W1522250664","https://openalex.org/W1545927878","https://openalex.org/W1655226010","https://openalex.org/W1678529581","https://openalex.org/W1921075642","https://openalex.org/W1978063312","https://openalex.org/W2006419855","https://openalex.org/W2034822440","https://openalex.org/W2047448042","https://openalex.org/W2090181646","https://openalex.org/W2094873755","https://openalex.org/W2097742961","https://openalex.org/W2098010707","https://openalex.org/W2100583963","https://openalex.org/W2101699859","https://openalex.org/W2102970979","https://openalex.org/W2103919170","https://openalex.org/W2111165162","https://openalex.org/W2113167642","https://openalex.org/W2114339651","https://openalex.org/W2117520528","https://openalex.org/W2131875129","https://openalex.org/W2133217855","https://openalex.org/W2146280225","https://openalex.org/W2157823989","https://openalex.org/W2165100126","https://openalex.org/W2171770082","https://openalex.org/W4254762831","https://openalex.org/W4285719527","https://openalex.org/W6631155369","https://openalex.org/W6685837280"],"related_works":["https://openalex.org/W2393767428","https://openalex.org/W1979469929","https://openalex.org/W2550565492","https://openalex.org/W2150403335","https://openalex.org/W2354398839","https://openalex.org/W1546317334","https://openalex.org/W2065751263","https://openalex.org/W2765965862","https://openalex.org/W1578553365","https://openalex.org/W4385750663"],"abstract_inverted_index":{"Eudaemon":[0,26,71,121,201],"is":[1,27,108,148,153],"a":[2,39,93,103,140,203,208,230],"technique":[3],"that":[4,42,200],"aims":[5],"to":[6,29,31,38,55,60,75,82,95,101,114,165,184,206,223],"blur":[7],"the":[8,46,76,83,115,119,224,242],"borders":[9],"between":[10,126],"protected":[11,127],"and":[12,15,20,24,35,67,79,128,156,192],"unprotected":[13],"applications,":[14],"brings":[16],"together":[17],"honeypot":[18],"technology":[19],"end-user":[21,213],"intrusion":[22],"detection":[23],"prevention.":[25],"able":[28],"attach":[30],"any":[32],"running":[33,225],"process,":[34,78],"redirect":[36],"execution":[37,81],"user-space":[40],"emulator":[41],"will":[43,64],"dynamically":[44],"instrument":[45],"binary":[47],"by":[48,110],"means":[49],"of":[50,118,210,229,241],"taint":[51,237],"analysis.":[52],"Any":[53],"attempts":[54],"subvert":[56],"control":[57],"flow,":[58],"or":[59,100,145,187],"inject":[61],"malicious":[62],"code":[63,186],"be":[65],"detected":[66],"averted.":[68],"When":[69],"desired":[70],"can":[72,122],"reattach":[73],"itself":[74],"emulated":[77],"return":[80],"native":[84,129],"binary.":[85],"Selective":[86],"emulation":[87],"has":[88],"been":[89,179],"investigated":[90],"before":[91],"as":[92],"mean":[94],"heal":[96],"an":[97,106,124,166,233],"attacked":[98],"program":[99],"generate":[102],"vaccine":[104],"after":[105],"attack":[107],"detected,":[109],"applying":[111],"intensive":[112],"instrumentation":[113],"vulnerable":[116],"region":[117],"program.":[120],"move":[123],"application":[125],"mode":[130],"at":[131],"will,":[132],"e.g.,":[133],"when":[134,139,146],"spare":[135],"cycles":[136],"are":[137],"available,":[138],"system":[141,169,190,226],"policy":[142],"ordains":[143],"it,":[144],"it":[147],"explicitly":[149],"requested.":[150],"The":[151],"transition":[152],"performed":[154],"transparently":[155],"in":[157,212],"very":[158],"little":[159],"time,":[160],"thus":[161],"incurring":[162],"minimal":[163],"disturbance":[164],"actively":[167],"used":[168],"Systems":[170],"offering":[171],"constant":[172],"protection":[173],"against":[174],"similar":[175],"attacks":[176,211],"have":[177],"also":[178],"proposed,":[180],"but":[181],"require":[182,220],"access":[183],"source":[185],"explicit":[188],"operating":[189],"support,":[191],"often":[193],"induce":[194],"significant":[195],"performance":[196],"penalties":[197],"We":[198],"believe":[199],"offers":[202],"flexible":[204],"mechanism":[205],"detect":[207],"series":[209],"systems":[214],"with":[215,232],"acceptable":[216],"overhead.":[217],"Moreover,":[218],"we":[219],"no":[221],"modification":[222],"and/or":[227],"installation":[228],"hypervisor,":[231],"eye":[234],"on":[235],"putting":[236],"analysis":[238],"within":[239],"reach":[240],"average":[243],"user.":[244]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2016-06-24T00:00:00"}