{"id":"https://openalex.org/W2566467732","doi":"https://doi.org/10.1145/3011883.3011888","title":"Cross-layer personalization as a first-class citizen for situation awareness and computer infrastructure security","display_name":"Cross-layer personalization as a first-class citizen for situation awareness and computer infrastructure security","publication_year":2016,"publication_date":"2016-09-26","ids":{"openalex":"https://openalex.org/W2566467732","doi":"https://doi.org/10.1145/3011883.3011888","mag":"2566467732"},"language":"en","primary_location":{"id":"doi:10.1145/3011883.3011888","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3011883.3011888","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3011888&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 New Security Paradigms Workshop","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=3011888&type=pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004483523","display_name":"Aokun Chen","orcid":"https://orcid.org/0000-0002-5100-3821"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Aokun Chen","raw_affiliation_strings":["University of Florida"],"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016773101","display_name":"Pratik Prabhanjan Brahma","orcid":"https://orcid.org/0000-0003-3657-7904"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pratik Brahma","raw_affiliation_strings":["University of Florida"],"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001469325","display_name":"Dapeng Wu","orcid":"https://orcid.org/0000-0003-1755-0183"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dapeng Oliver Wu","raw_affiliation_strings":["University of Florida"],"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075446387","display_name":"Natalie C. Ebner","orcid":"https://orcid.org/0000-0002-2705-7520"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Natalie Ebner","raw_affiliation_strings":["University of Florida"],"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068485054","display_name":"Brandon Matthews","orcid":"https://orcid.org/0000-0002-8673-2434"},"institutions":[{"id":"https://openalex.org/I4210122954","display_name":"MIT Lincoln Laboratory","ror":"https://ror.org/022z6jk58","country_code":"US","type":"facility","lineage":["https://openalex.org/I4210122954","https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brandon Matthews","raw_affiliation_strings":["MIT Lincoln Laboratory"],"affiliations":[{"raw_affiliation_string":"MIT Lincoln Laboratory","institution_ids":["https://openalex.org/I4210122954"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043229300","display_name":"Jedidiah R. Crandall","orcid":"https://orcid.org/0000-0001-7864-2992"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jedidiah Crandall","raw_affiliation_strings":["University of New Mexico"],"affiliations":[{"raw_affiliation_string":"University of New Mexico","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003379167","display_name":"Xuetao Wei","orcid":"https://orcid.org/0000-0002-4450-2251"},"institutions":[{"id":"https://openalex.org/I63135867","display_name":"University of Cincinnati","ror":"https://ror.org/01e3m7079","country_code":"US","type":"education","lineage":["https://openalex.org/I63135867"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xuetao Wei","raw_affiliation_strings":["University of Cincinnati"],"affiliations":[{"raw_affiliation_string":"University of Cincinnati","institution_ids":["https://openalex.org/I63135867"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018876909","display_name":"Michalis Faloutsos","orcid":"https://orcid.org/0000-0002-3882-9987"},"institutions":[{"id":"https://openalex.org/I2803209242","display_name":"University of California System","ror":"https://ror.org/00pjdza24","country_code":"US","type":"education","lineage":["https://openalex.org/I2803209242"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michalis Faloutsos","raw_affiliation_strings":["University of California"],"affiliations":[{"raw_affiliation_string":"University of California","institution_ids":["https://openalex.org/I2803209242"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082282267","display_name":"Daniela S Oliveira","orcid":"https://orcid.org/0000-0003-3488-0053"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniela Oliveira","raw_affiliation_strings":["University of Florida"],"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5004483523"],"corresponding_institution_ids":["https://openalex.org/I33213144"],"apc_list":null,"apc_paid":null,"fwci":0.2953,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.67512387,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"23","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.813325047492981},{"id":"https://openalex.org/keywords/personalization","display_name":"Personalization","score":0.7481902837753296},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.52334064245224},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.4615184962749481},{"id":"https://openalex.org/keywords/situation-awareness","display_name":"Situation awareness","score":0.4356590807437897},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42985960841178894},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4256693422794342},{"id":"https://openalex.org/keywords/application-layer","display_name":"Application layer","score":0.4141635298728943},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3482876718044281},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14512068033218384},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.12070819735527039}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.813325047492981},{"id":"https://openalex.org/C183003079","wikidata":"https://www.wikidata.org/wiki/Q1000371","display_name":"Personalization","level":2,"score":0.7481902837753296},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.52334064245224},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.4615184962749481},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.4356590807437897},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42985960841178894},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4256693422794342},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.4141635298728943},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3482876718044281},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14512068033218384},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.12070819735527039},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3011883.3011888","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3011883.3011888","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3011888&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 New Security Paradigms Workshop","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3011883.3011888","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3011883.3011888","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3011888&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 New Security Paradigms Workshop","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.6299999952316284,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1686109301","display_name":null,"funder_award_id":"FA8702-15-D-0001","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G2692486967","display_name":null,"funder_award_id":"FA8650-15-C-7565","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G3081161579","display_name":null,"funder_award_id":"FA8721-05-C-0002","funder_id":"https://openalex.org/F4320309369","funder_display_name":"Massachusetts Institute of Technology"},{"id":"https://openalex.org/G4694536500","display_name":null,"funder_award_id":"FA8702-15-D-0001","funder_id":"https://openalex.org/F4320309369","funder_display_name":"Massachusetts Institute of Technology"},{"id":"https://openalex.org/G5051192394","display_name":null,"funder_award_id":"FA8650-15-C","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G6467374111","display_name":null,"funder_award_id":"8721-05-C-0002","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G7644323023","display_name":null,"funder_award_id":"FA8721-05-C-0002","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320309369","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2566467732.pdf","grobid_xml":"https://content.openalex.org/works/W2566467732.grobid-xml"},"referenced_works_count":69,"referenced_works":["https://openalex.org/W30287392","https://openalex.org/W43277997","https://openalex.org/W172040345","https://openalex.org/W190437827","https://openalex.org/W1552906779","https://openalex.org/W1832277845","https://openalex.org/W1908838165","https://openalex.org/W1941427975","https://openalex.org/W1956767865","https://openalex.org/W1956905783","https://openalex.org/W1962980066","https://openalex.org/W1974747079","https://openalex.org/W1978845641","https://openalex.org/W1985987493","https://openalex.org/W1995919426","https://openalex.org/W1997535430","https://openalex.org/W2007087405","https://openalex.org/W2015401767","https://openalex.org/W2017812265","https://openalex.org/W2021264330","https://openalex.org/W2037124948","https://openalex.org/W2058657545","https://openalex.org/W2061122559","https://openalex.org/W2087922528","https://openalex.org/W2096318715","https://openalex.org/W2107031757","https://openalex.org/W2107409339","https://openalex.org/W2111817346","https://openalex.org/W2116065364","https://openalex.org/W2118067797","https://openalex.org/W2121035740","https://openalex.org/W2125743503","https://openalex.org/W2126345423","https://openalex.org/W2127195968","https://openalex.org/W2128217000","https://openalex.org/W2129860818","https://openalex.org/W2137365926","https://openalex.org/W2139716931","https://openalex.org/W2140663467","https://openalex.org/W2140807364","https://openalex.org/W2145094598","https://openalex.org/W2151135920","https://openalex.org/W2156375130","https://openalex.org/W2159853140","https://openalex.org/W2167287136","https://openalex.org/W2168519318","https://openalex.org/W2170580798","https://openalex.org/W2171253691","https://openalex.org/W2304366700","https://openalex.org/W2338717024","https://openalex.org/W2396652156","https://openalex.org/W2469192041","https://openalex.org/W2469230760","https://openalex.org/W2734412659","https://openalex.org/W2997574889","https://openalex.org/W3099514962","https://openalex.org/W3119651796","https://openalex.org/W3132596676","https://openalex.org/W3145074154","https://openalex.org/W4211139099","https://openalex.org/W4234664880","https://openalex.org/W4300568380","https://openalex.org/W6633127768","https://openalex.org/W6638441982","https://openalex.org/W6676881949","https://openalex.org/W6678985388","https://openalex.org/W6680227968","https://openalex.org/W6698323862","https://openalex.org/W6759838005"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W2249809453","https://openalex.org/W3152891574","https://openalex.org/W2489977678"],"abstract_inverted_index":{"We":[0,201,284],"propose":[1],"a":[2,10,36,59,77,84,129,215,276],"new":[3],"security":[4,17,100],"paradigm":[5,26,268],"that":[6,32,40,56,234,272],"makes":[7],"cross-layer":[8,87,154,195],"personalization":[9],"premier":[11],"component":[12],"in":[13,114,128,214,239,259,282],"the":[14,30,43,51,64,71,81,96,139,153,159,163,176,184,189,236,254],"design":[15,82],"of":[16,54,83,98,123,149,165,168,253],"solutions":[18,118],"for":[19,198,269],"computer":[20,33,60,72,115],"infrastructure":[21,116],"and":[22,45,86,108,208,218,278,290],"situational":[23],"awareness.":[24],"This":[25],"is":[27,152,264],"based":[28],"on":[29,42,120],"observation":[31],"systems":[34],"have":[35],"personalized":[37,196],"usage":[38],"profile":[39],"depends":[41],"user":[44,65,177,240],"his":[46,67],"activities.":[47],"Further,":[48],"it":[49],"spans":[50],"various":[52,99],"layers":[53,167],"abstraction":[55],"make":[57],"up":[58],"system,":[61],"as":[62],"if":[63],"embedded":[66],"own":[68],"DNA":[69],"into":[70,137],"system.":[73],"To":[74],"realize":[75],"such":[76],"paradigm,":[78],"we":[79,157,171,193,222],"discuss":[80,286],"comprehensive":[85],"profiling":[88],"approach,":[89],"which":[90],"can":[91],"be":[92],"adopted":[93],"to":[94,206,226,246,265,274],"boost":[95],"effectiveness":[97],"solutions,":[101],"e.g.,":[102],"malware":[103],"detection,":[104],"insider":[105],"attacker":[106],"prevention":[107],"continuous":[109],"authentication.":[110],"The":[111,146],"current":[112],"state-of-the-art":[113],"defense":[117],"focuses":[119],"one":[121],"layer":[122,281],"operation":[124],"with":[125],"deployments":[126],"coming":[127],"\"one":[130],"size":[131],"fits":[132],"all\"":[133],"format,":[134],"without":[135],"taking":[136],"account":[138],"unique":[140],"way":[141],"people":[142],"use":[143],"their":[144,260],"computers.":[145,229],"key":[147],"novelty":[148],"our":[150,204,224,295],"proposal":[151],"personalization,":[155],"where":[156,210],"derive":[158],"distinguishable":[160],"behaviors":[161],"from":[162,249],"intelligence":[164,173],"three":[166],"abstraction.":[169],"First,":[170],"combine":[172],"from:":[174],"a)":[175],"layer,":[178],"(e.g.,":[179],"mouse":[180],"click":[181],"patterns);":[182],"b)":[183],"operating":[185],"system":[186,199],"layer;":[187],"c)":[188],"network":[190],"layer.":[191],"Second,":[192],"develop":[194],"profiles":[197],"usage.":[200],"will":[202],"limit":[203],"scope":[205],"companies":[207],"organizations,":[209],"computers":[211],"are":[212,243],"used":[213],"more":[216],"routine":[217],"one-on-one":[219],"style,":[220],"before":[221],"expand":[223],"research":[225],"personally":[227],"owned":[228],"Our":[230,262],"preliminary":[231],"results":[232],"show":[233],"just":[235],"time":[237],"accesses":[238],"web":[241],"logs":[242],"already":[244],"sufficient":[245],"distinguish":[247],"users":[248,252],"each":[250,280],"other,with":[251],"same":[255],"demographics":[256],"showing":[257],"similarities":[258],"profiles.":[261],"goal":[263],"challenge":[266],"today's":[267],"anomaly":[270],"detection":[271],"seems":[273],"follow":[275],"monoculture":[277],"treat":[279],"isolation.":[283],"also":[285],"deployment,":[287],"performance":[288],"overhead,":[289],"privacy":[291],"issues":[292],"raised":[293],"by":[294],"paradigm.":[296]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2019,"cited_by_count":1}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}