{"id":"https://openalex.org/W2120077409","doi":"https://doi.org/10.1145/2590296.2590300","title":"After we knew it","display_name":"After we knew it","publication_year":2014,"publication_date":"2014-05-30","ids":{"openalex":"https://openalex.org/W2120077409","doi":"https://doi.org/10.1145/2590296.2590300","mag":"2120077409"},"language":"en","primary_location":{"id":"doi:10.1145/2590296.2590300","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2590296.2590300","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 9th ACM symposium on Information, computer and communications security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100716688","display_name":"Su Zhang","orcid":"https://orcid.org/0000-0003-2163-3053"},"institutions":[{"id":"https://openalex.org/I189590672","display_name":"Kansas State University","ror":"https://ror.org/05p1j8758","country_code":"US","type":"education","lineage":["https://openalex.org/I189590672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Su Zhang","raw_affiliation_strings":["Kansas State University, Manhattan, KS, USA","Kansas State University, Manhattan, KS, USA;"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kansas State University, Manhattan, KS, USA","institution_ids":["https://openalex.org/I189590672"]},{"raw_affiliation_string":"Kansas State University, Manhattan, KS, USA;","institution_ids":["https://openalex.org/I189590672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100711479","display_name":"Xinwen Zhang","orcid":"https://orcid.org/0000-0002-0030-638X"},"institutions":[{"id":"https://openalex.org/I4210101778","display_name":"Samsung (United States)","ror":"https://ror.org/01bfbvm65","country_code":"US","type":"company","lineage":["https://openalex.org/I2250650973","https://openalex.org/I4210101778"]},{"id":"https://openalex.org/I4210133173","display_name":"Research!America (United States)","ror":"https://ror.org/044pgyv50","country_code":"US","type":"company","lineage":["https://openalex.org/I4210133173"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinwen Zhang","raw_affiliation_strings":["Samsung Research America, Santa Clara, CA, USA","[Samsung Research America, Santa Clara, CA, USA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Samsung Research America, Santa Clara, CA, USA","institution_ids":["https://openalex.org/I4210101778","https://openalex.org/I4210133173"]},{"raw_affiliation_string":"[Samsung Research America, Santa Clara, CA, USA]","institution_ids":["https://openalex.org/I4210101778","https://openalex.org/I4210133173"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113810433","display_name":"Xinming Ou","orcid":"https://orcid.org/0009-0007-2501-7991"},"institutions":[{"id":"https://openalex.org/I189590672","display_name":"Kansas State University","ror":"https://ror.org/05p1j8758","country_code":"US","type":"education","lineage":["https://openalex.org/I189590672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinming Ou","raw_affiliation_strings":["Kansas State University, Manhattan, KS, USA","Kansas State University, Manhattan, KS, USA;"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kansas State University, Manhattan, KS, USA","institution_ids":["https://openalex.org/I189590672"]},{"raw_affiliation_string":"Kansas State University, Manhattan, KS, USA;","institution_ids":["https://openalex.org/I189590672"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":24.4725,"has_fulltext":false,"cited_by_count":84,"citation_normalized_percentile":{"value":0.99653683,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"317","last_page":"328"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.9318958520889282},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.782733678817749},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.7563961744308472},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6998509168624878},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.6636812686920166},{"id":"https://openalex.org/keywords/incentive","display_name":"Incentive","score":0.5388867855072021},{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.49558937549591064},{"id":"https://openalex.org/keywords/cloud-service-provider","display_name":"Cloud service provider","score":0.4873526990413666},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.37646105885505676},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.16367650032043457}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.9318958520889282},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.782733678817749},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.7563961744308472},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6998509168624878},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.6636812686920166},{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.5388867855072021},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.49558937549591064},{"id":"https://openalex.org/C2983819522","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud service provider","level":4,"score":0.4873526990413666},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.37646105885505676},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.16367650032043457},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2590296.2590300","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2590296.2590300","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 9th ACM symposium on Information, computer and communications security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6299999952316284,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1276109100","display_name":null,"funder_award_id":"FA9550-12-1-0106","funder_id":"https://openalex.org/F4320338279","funder_display_name":"Air Force Office of Scientific Research"},{"id":"https://openalex.org/G3055691008","display_name":null,"funder_award_id":"0954138 and 1018703","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320338279","display_name":"Air Force Office of Scientific Research","ror":"https://ror.org/011e9bt93"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W1946033","https://openalex.org/W110007310","https://openalex.org/W132717493","https://openalex.org/W648519619","https://openalex.org/W654785806","https://openalex.org/W1527341546","https://openalex.org/W1547152107","https://openalex.org/W1557163559","https://openalex.org/W1964439345","https://openalex.org/W1989892116","https://openalex.org/W1997322704","https://openalex.org/W2004584049","https://openalex.org/W2005121700","https://openalex.org/W2012575532","https://openalex.org/W2029143650","https://openalex.org/W2033301118","https://openalex.org/W2037027324","https://openalex.org/W2065890363","https://openalex.org/W2100751369","https://openalex.org/W2109921293","https://openalex.org/W2124939873","https://openalex.org/W2128045001","https://openalex.org/W2153575752","https://openalex.org/W2154107289","https://openalex.org/W2738559562","https://openalex.org/W2999961398","https://openalex.org/W4235702176"],"related_works":["https://openalex.org/W2992381278","https://openalex.org/W2501254609","https://openalex.org/W4210544776","https://openalex.org/W2788934790","https://openalex.org/W2189020750","https://openalex.org/W3091843707","https://openalex.org/W2591722534","https://openalex.org/W144593603","https://openalex.org/W2923033513","https://openalex.org/W2751189048"],"abstract_inverted_index":{"Infrastructure":[0],"as":[1,13,227],"a":[2,71,115,126,137,193,198],"Service":[3],"(IaaS)":[4],"cloud":[5,67,101,165,208,218],"has":[6],"been":[7],"attracting":[8],"more":[9,11,74,79,148,185,237],"and":[10,27,40,51,73,78,169,196,204,209,222,231,255,268],"customers":[12,37],"it":[14],"provides":[15],"the":[16,43,61,92,162,232,249,264,270],"highest":[17],"level":[18],"of":[19,94,118,130],"flexibility":[20],"by":[21],"offering":[22],"configurable":[23],"virtual":[24],"machines":[25],"(VMs)":[26],"computing":[28,153,211],"infrastructures.":[29],"Public":[30],"VM":[31,49],"images":[32,50],"are":[33,263],"usually":[34],"available":[35],"for":[36,187],"to":[38,45,201,247,266],"customize":[39],"launch.":[41],"However,":[42],"1":[44],"N":[46],"mapping":[47],"between":[48,251],"running":[52],"instances":[53],"in":[54,106,140,178,245,275],"IaaS":[55,66,100,141],"makes":[56],"vulnerabilities":[57,97,145],"propagate":[58],"rapidly":[59],"across":[60],"entire":[62],"public":[63,99,276],"cloud.":[64,277],"Besides,":[65],"naturally":[68],"comes":[69],"with":[70,102,120,272],"larger":[72],"stable":[75],"attack":[76,221],"surface":[77],"concentrated":[80],"target":[81],"resources":[82],"than":[83,150,177],"traditional":[84,151,179,210],"surroundings.":[85],"In":[86],"this":[87,131],"paper,":[88],"we":[89,262],"first":[90,265],"identify":[91],"threat":[93,244,271],"exploiting":[95,143,203],"prevalent":[96,144,273],"over":[98],"an":[103],"empirical":[104],"study":[105],"Amazon":[107],"EC2.":[108],"We":[109,123,190,239],"find":[110],"that":[111,216],"attackers":[112,156],"can":[113,183,235],"compromise":[114],"considerable":[116],"number":[117],"VMs":[119],"trivial":[121],"cost.":[122],"then":[124,191],"do":[125],"qualitative":[127],"cost-effectiveness":[128],"analysis":[129,200],"threat.":[132],"Our":[133,213],"main":[134],"result":[135],"is":[136,146],"two-fold":[138],"observation:":[139],"cloud,":[142],"much":[147,173],"cost-effective":[149,226],"in-house":[152],"environment,":[154,180,219],"therefore":[155,181],"have":[157,172],"stronger":[158],"incentive;":[159],"Fortunately,":[160],"on":[161],"other":[163],"hand,":[164],"defenders":[166],"(cloud":[167],"providers":[168],"customers)":[170],"also":[171],"lower":[174],"cost-loss":[175],"ratio":[176],"they":[182],"be":[184,236],"effective":[186],"defending":[188,256],"attacks.":[189],"build":[192],"game-theoretic":[194],"model":[195,269],"conduct":[197],"risk-gain":[199],"compare":[202],"patching":[205],"strategies":[206],"under":[207,217],"environments.":[212],"modeling":[214],"indicates":[215],"both":[220],"defense":[223],"become":[224],"less":[225],"time":[228],"goes":[229],"by,":[230],"earlier":[233],"actioner":[234],"rewarding.":[238],"propose":[240],"countermeasures":[241],"against":[242],"such":[243],"order":[246],"bridge":[248],"gap":[250],"current":[252],"security":[253],"situation":[254],"mechanisms.":[257],"To":[258],"our":[259],"best":[260],"knowledge,":[261],"analyze":[267],"known-vulnerabilities":[274]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":8},{"year":2016,"cited_by_count":36},{"year":2015,"cited_by_count":23},{"year":2014,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2016-06-24T00:00:00"}