{"id":"https://openalex.org/W3084372349","doi":"https://doi.org/10.1145/3419103","title":"A Flow-based Multi-agent Data Exfiltration Detection Architecture for Ultra-low Latency Networks","display_name":"A Flow-based Multi-agent Data Exfiltration Detection Architecture for Ultra-low Latency Networks","publication_year":2021,"publication_date":"2021-07-16","ids":{"openalex":"https://openalex.org/W3084372349","doi":"https://doi.org/10.1145/3419103","mag":"3084372349"},"language":"en","primary_location":{"id":"doi:10.1145/3419103","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3419103","pdf_url":null,"source":{"id":"https://openalex.org/S97833917","display_name":"ACM Transactions on Internet Technology","issn_l":"1533-5399","issn":["1533-5399","1557-6051"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Internet Technology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://wrap.warwick.ac.uk/140722/7/WRAP-Flow-based-multi-agent-data-exfiltration-detection-architecture-Maple-2020.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065037141","display_name":"Rafael Salema Marques","orcid":"https://orcid.org/0000-0003-0954-8956"},"institutions":[{"id":"https://openalex.org/I119664326","display_name":"University of Wolverhampton","ror":"https://ror.org/01k2y1055","country_code":"GB","type":"education","lineage":["https://openalex.org/I119664326"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Rafael Salema Marques","raw_affiliation_strings":["University of Wolverhampton, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wolverhampton, UK","institution_ids":["https://openalex.org/I119664326"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043277300","display_name":"Gregory Epiphaniou","orcid":"https://orcid.org/0000-0003-1054-6368"},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Gregory Epiphaniou","raw_affiliation_strings":["Warwick Manufacturing Group (WMG), University of Warwick, Coventry, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Warwick Manufacturing Group (WMG), University of Warwick, Coventry, UK","institution_ids":["https://openalex.org/I39555362"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015951925","display_name":"Haider Al\u2010Khateeb","orcid":"https://orcid.org/0000-0001-8944-123X"},"institutions":[{"id":"https://openalex.org/I119664326","display_name":"University of Wolverhampton","ror":"https://ror.org/01k2y1055","country_code":"GB","type":"education","lineage":["https://openalex.org/I119664326"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Haider Al-Khateeb","raw_affiliation_strings":["University of Wolverhampton, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wolverhampton, UK","institution_ids":["https://openalex.org/I119664326"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080175512","display_name":"Carsten Maple","orcid":"https://orcid.org/0000-0002-4715-212X"},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Carsten Maple","raw_affiliation_strings":["Warwick Manufacturing Group (WMG), University of Warwick, Coventry, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Warwick Manufacturing Group (WMG), University of Warwick, Coventry, UK","institution_ids":["https://openalex.org/I39555362"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089637331","display_name":"Mohammad Hammoudeh","orcid":"https://orcid.org/0000-0003-1058-0996"},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mohammad Hammoudeh","raw_affiliation_strings":["Manchester Metropolitan University, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Manchester Metropolitan University, UK","institution_ids":["https://openalex.org/I11983389"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049580636","display_name":"Paulo Andr\u00e9 Lima de Castro","orcid":"https://orcid.org/0000-0001-5515-1672"},"institutions":[{"id":"https://openalex.org/I107428990","display_name":"Instituto Tecnol\u00f3gico de Aeron\u00e1utica","ror":"https://ror.org/05vh67662","country_code":"BR","type":"education","lineage":["https://openalex.org/I107428990"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Paulo Andr\u00e9 Lima De Castro","raw_affiliation_strings":["Aeronautics Institute of Technology (ITA), Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Aeronautics Institute of Technology (ITA), Brazil","institution_ids":["https://openalex.org/I107428990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038019914","display_name":"Ali Dehghantanha","orcid":"https://orcid.org/0000-0002-9294-7554"},"institutions":[{"id":"https://openalex.org/I79817857","display_name":"University of Guelph","ror":"https://ror.org/01r7awg59","country_code":"CA","type":"education","lineage":["https://openalex.org/I79817857"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ali Dehghantanha","raw_affiliation_strings":["University of Guelph, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Guelph, Canada","institution_ids":["https://openalex.org/I79817857"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001746807","display_name":"Kim\u2010Kwang Raymond Choo","orcid":"https://orcid.org/0000-0001-9208-5336"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kim Kwang Raymond Choo","raw_affiliation_strings":["University of Texas at San Antonio, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Texas at San Antonio, USA","institution_ids":["https://openalex.org/I45438204"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.5192,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.82616332,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"21","issue":"4","first_page":"1","last_page":"30"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12391","display_name":"Artificial Immune Systems Applications","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/2204","display_name":"Biomedical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8743354678153992},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6076711416244507},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.602025032043457},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.5053785443305969},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4872933626174927},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4731746017932892},{"id":"https://openalex.org/keywords/low-latency","display_name":"Low latency (capital markets)","score":0.4345545768737793},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.4191918671131134},{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.41045209765434265},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3672144412994385},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3117707371711731},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.23260706663131714}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8743354678153992},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6076711416244507},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.602025032043457},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.5053785443305969},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4872933626174927},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4731746017932892},{"id":"https://openalex.org/C46637626","wikidata":"https://www.wikidata.org/wiki/Q6693015","display_name":"Low latency (capital markets)","level":2,"score":0.4345545768737793},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.4191918671131134},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.41045209765434265},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3672144412994385},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3117707371711731},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.23260706663131714},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3419103","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3419103","pdf_url":null,"source":{"id":"https://openalex.org/S97833917","display_name":"ACM Transactions on Internet Technology","issn_l":"1533-5399","issn":["1533-5399","1557-6051"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Internet Technology","raw_type":"journal-article"},{"id":"pmh:oai:wrap.warwick.ac.uk:140722","is_oa":true,"landing_page_url":null,"pdf_url":"http://wrap.warwick.ac.uk/140722/7/WRAP-Flow-based-multi-agent-data-exfiltration-detection-architecture-Maple-2020.pdf","source":{"id":"https://openalex.org/S4306400665","display_name":"Warwick Research Archive Portal (University of Warwick)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I39555362","host_organization_name":"University of Warwick","host_organization_lineage":["https://openalex.org/I39555362"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Journal Article"},{"id":"pmh:oai:e-space.mmu.ac.uk:634403","is_oa":false,"landing_page_url":"https://e-space.mmu.ac.uk/view/authors/2d8e23d4511218f373fdb901df1fd553.html>","pdf_url":null,"source":{"id":"https://openalex.org/S4306401617","display_name":"e-space (Manchester Metropolitan University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I11983389","host_organization_name":"Manchester Metropolitan University","host_organization_lineage":["https://openalex.org/I11983389"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"pmh:oai:wlv.openrepository.com:2436/623600","is_oa":true,"landing_page_url":"http://hdl.handle.net/2436/623600","pdf_url":null,"source":{"id":"https://openalex.org/S4306401000","display_name":"Wolverhampton Intellectual Repository and E-Theses (University of Wolverhampton)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I119664326","host_organization_name":"University of Wolverhampton","host_organization_lineage":["https://openalex.org/I119664326"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"21","raw_type":"Journal article"}],"best_oa_location":{"id":"pmh:oai:wrap.warwick.ac.uk:140722","is_oa":true,"landing_page_url":null,"pdf_url":"http://wrap.warwick.ac.uk/140722/7/WRAP-Flow-based-multi-agent-data-exfiltration-detection-architecture-Maple-2020.pdf","source":{"id":"https://openalex.org/S4306400665","display_name":"Warwick Research Archive Portal (University of Warwick)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I39555362","host_organization_name":"University of Warwick","host_organization_lineage":["https://openalex.org/I39555362"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Journal Article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6399999856948853,"id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G7282611729","display_name":null,"funder_award_id":"EP/R007195/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8079345471","display_name":null,"funder_award_id":"EP/N02298X/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3084372349.pdf","grobid_xml":"https://content.openalex.org/works/W3084372349.grobid-xml"},"referenced_works_count":59,"referenced_works":["https://openalex.org/W1594480206","https://openalex.org/W1767780060","https://openalex.org/W1914835564","https://openalex.org/W1970936647","https://openalex.org/W1986600497","https://openalex.org/W1996381016","https://openalex.org/W2047474854","https://openalex.org/W2057855325","https://openalex.org/W2059001009","https://openalex.org/W2070375960","https://openalex.org/W2072580964","https://openalex.org/W2076526693","https://openalex.org/W2077841421","https://openalex.org/W2099023593","https://openalex.org/W2118599924","https://openalex.org/W2120118950","https://openalex.org/W2124344619","https://openalex.org/W2153495198","https://openalex.org/W2158500407","https://openalex.org/W2169613135","https://openalex.org/W2232992392","https://openalex.org/W2289471787","https://openalex.org/W2408444757","https://openalex.org/W2467971141","https://openalex.org/W2480802074","https://openalex.org/W2554207305","https://openalex.org/W2558987632","https://openalex.org/W2559818752","https://openalex.org/W2563352585","https://openalex.org/W2572784818","https://openalex.org/W2588507895","https://openalex.org/W2591102410","https://openalex.org/W2620580412","https://openalex.org/W2731183588","https://openalex.org/W2736633391","https://openalex.org/W2752233779","https://openalex.org/W2758242454","https://openalex.org/W2769405978","https://openalex.org/W2774021176","https://openalex.org/W2799784398","https://openalex.org/W2889108654","https://openalex.org/W2894366883","https://openalex.org/W2900764181","https://openalex.org/W2913287787","https://openalex.org/W2915893383","https://openalex.org/W2931603367","https://openalex.org/W2932468045","https://openalex.org/W2941162033","https://openalex.org/W2953684237","https://openalex.org/W2958328211","https://openalex.org/W2963265635","https://openalex.org/W2981340892","https://openalex.org/W3004022508","https://openalex.org/W3011561529","https://openalex.org/W3043665894","https://openalex.org/W3082269319","https://openalex.org/W3099870518","https://openalex.org/W4210320908","https://openalex.org/W4239437480"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W3205411230","https://openalex.org/W4286899009","https://openalex.org/W9168048","https://openalex.org/W4300849822","https://openalex.org/W4376480820","https://openalex.org/W3155891479","https://openalex.org/W3029351463","https://openalex.org/W2885352820","https://openalex.org/W4296591952"],"abstract_inverted_index":{"Modern":[0],"network":[1],"infrastructures":[2],"host":[3,118],"converged":[4],"applications":[5],"that":[6,111,196,226,280],"demand":[7],"rapid":[8],"elasticity":[9],"of":[10,26,33,38,148,153,169,173,183,207,220,244,269,284],"services,":[11],"increased":[12],"security,":[13],"and":[14,40,60,70,73,90,108,180,203],"ultra-fast":[15],"reaction":[16],"times.":[17],"The":[18],"Tactile":[19,50],"Internet":[20,51],"promises":[21],"to":[22,67,100,131,161,176,189,211,258],"facilitate":[23],"the":[24,49,65,88,94,149,154,167,181,242,267,274,278,282],"delivery":[25],"these":[27],"services":[28],"while":[29,251,297],"enabling":[30],"new":[31],"economies":[32],"scale":[34],"for":[35,57,241],"high":[36,53,58],"fidelity":[37],"machine-to-machine":[39],"human-to-machine":[41],"interactions.":[42],"Unavoidably,":[43],"critical":[44,263],"mission":[45,264],"systems":[46],"served":[47],"by":[48,87,106,129,137],"manifest":[52],"demands":[54],"not":[55,144],"only":[56],"speed":[59],"reliable":[61],"communications":[62],"but":[63],"equally,":[64],"ability":[66],"rapidly":[68],"identify":[69,101,133],"mitigate":[71],"threats":[72],"vulnerabilities.":[74],"This":[75],"article":[76,276],"proposes":[77],"a":[78,158,162,217,233],"novel":[79],"Multi-Agent":[80],"Data":[81],"Exfiltration":[82],"Detector":[83],"Architecture":[84],"(MADEX),":[85],"inspired":[86],"mechanisms":[89],"features":[91],"present":[92],"in":[93,119,171,236,248,262,277,287],"human":[95],"immune":[96,294],"system.":[97],"MADEX":[98,142,170,197,223,245,252],"seeks":[99],"data":[102,179,260],"exfiltration":[103,261],"activities":[104],"performed":[105],"evasive":[107],"stealthy":[109],"malware":[110],"hides":[112],"malicious":[113,155,190],"traffic":[114,126],"from":[115],"an":[116,138,204,288,292],"infected":[117],"low-latency":[120],"networks.":[121],"Our":[122],"approach":[123,296],"uses":[124],"cross-network":[125],"information":[127],"collected":[128],"agents":[130],"effectively":[132],"unknown":[134],"illicit":[135],"connections":[136],"operating":[139],"system":[140,295],"subverted.":[141],"does":[143],"require":[145],"prior":[146],"knowledge":[147,163],"characteristics":[150],"or":[151,157],"behavior":[152],"code":[156],"dedicated":[159],"access":[160],"repository.":[164],"We":[165,215,239],"tested":[166],"performance":[168,231],"terms":[172],"its":[174,212,229],"capacity":[175],"handle":[177],"real-time":[178,286],"sensitivity":[182],"our":[184,270],"algorithm\u2019s":[185],"classification":[186],"when":[187,209],"exposed":[188],"traffic.":[191],"Experimental":[192],"evaluation":[193],"results":[194],"show":[195],"achieved":[198],"99.97%":[199],"sensitivity,":[200],"98.78%":[201],"accuracy,":[202],"error":[205],"rate":[206],"1.21%":[208],"compared":[210],"best":[213,268],"rivals.":[214],"created":[216],"second":[218],"version":[219],"MADEX,":[221],"called":[222],"level":[224,246,253],"2,":[225],"further":[227],"improves":[228],"overall":[230],"with":[232],"slight":[234],"increase":[235],"computational":[237],"complexity.":[238],"argue":[240],"suitability":[243],"1":[247],"non-critical":[249],"environments,":[250],"2":[254],"can":[255],"be":[256],"used":[257],"avoid":[259],"systems.":[265],"To":[266],"knowledge,":[271],"this":[272],"is":[273],"first":[275],"literature":[279],"addresses":[281],"detection":[283],"rootkits":[285],"agnostic":[289],"way":[290],"using":[291],"artificial":[293],"it":[298],"satisfies":[299],"strict":[300],"latency":[301],"requirements.":[302]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}