{"id":"https://openalex.org/W3213449269","doi":"https://doi.org/10.1145/3485730.3494114","title":"Container Escape Detection for Edge Devices","display_name":"Container Escape Detection for Edge Devices","publication_year":2021,"publication_date":"2021-11-11","ids":{"openalex":"https://openalex.org/W3213449269","doi":"https://doi.org/10.1145/3485730.3494114","mag":"3213449269"},"language":"en","primary_location":{"id":"doi:10.1145/3485730.3494114","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3485730.3494114","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Conference on Embedded Networked Sensor Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://research-information.bris.ac.uk/en/publications/7aee4bb3-3877-42e0-b7f8-59c7e35c7c02","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002563560","display_name":"James Pope","orcid":"https://orcid.org/0000-0003-2656-363X"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"James Pope","raw_affiliation_strings":["University of Bristol, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"University of Bristol, Bristol, UK","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102922244","display_name":"Francesco Raimondo","orcid":"https://orcid.org/0000-0003-2086-7210"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Francesco Raimondo","raw_affiliation_strings":["University of Bristol, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"University of Bristol, Bristol, UK","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104108253","display_name":"Vijay Kumar","orcid":null},"institutions":[{"id":"https://openalex.org/I4210143477","display_name":"Toshiba (United Kingdom)","ror":"https://ror.org/054hmd463","country_code":"GB","type":"company","lineage":["https://openalex.org/I1292669757","https://openalex.org/I4210143477"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Vijay Kumar","raw_affiliation_strings":["Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK","institution_ids":["https://openalex.org/I4210143477"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077095301","display_name":"Ryan McConville","orcid":"https://orcid.org/0000-0002-7708-3110"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ryan McConville","raw_affiliation_strings":["University of Bristol, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"University of Bristol, Bristol, UK","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071769747","display_name":"Robert J. Piechocki","orcid":"https://orcid.org/0000-0002-4879-1206"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Rob Piechocki","raw_affiliation_strings":["University of Bristol, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"University of Bristol, Bristol, UK","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072981915","display_name":"George Oikonomou","orcid":"https://orcid.org/0000-0002-1684-6989"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"George Oikonomou","raw_affiliation_strings":["University of Bristol, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"University of Bristol, Bristol, UK","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005580571","display_name":"Thomas Pasquier","orcid":"https://orcid.org/0000-0001-6876-1306"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thomas Pasquier","raw_affiliation_strings":["University of British Columbia, Vancouver, CA"],"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, CA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052233895","display_name":"Bo Luo","orcid":"https://orcid.org/0000-0001-8196-2436"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bo Luo","raw_affiliation_strings":["Smartia Ltd, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"Smartia Ltd, Bristol, UK","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040750986","display_name":"Dan Howarth","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dan Howarth","raw_affiliation_strings":["Smartia Ltd, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"Smartia Ltd, Bristol, UK","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059260326","display_name":"Ioannis Mavromatis","orcid":"https://orcid.org/0000-0002-3309-132X"},"institutions":[{"id":"https://openalex.org/I4210143477","display_name":"Toshiba (United Kingdom)","ror":"https://ror.org/054hmd463","country_code":"GB","type":"company","lineage":["https://openalex.org/I1292669757","https://openalex.org/I4210143477"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ioannis Mavromatis","raw_affiliation_strings":["Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK","institution_ids":["https://openalex.org/I4210143477"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077621956","display_name":"Pietro Carnelli","orcid":"https://orcid.org/0000-0002-4993-5873"},"institutions":[{"id":"https://openalex.org/I4210143477","display_name":"Toshiba (United Kingdom)","ror":"https://ror.org/054hmd463","country_code":"GB","type":"company","lineage":["https://openalex.org/I1292669757","https://openalex.org/I4210143477"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Pietro Carnelli","raw_affiliation_strings":["Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK","institution_ids":["https://openalex.org/I4210143477"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047644703","display_name":"Adri\u00e1n S\u00e1nchez-Momp\u00f3","orcid":"https://orcid.org/0000-0003-0821-4057"},"institutions":[{"id":"https://openalex.org/I4210143477","display_name":"Toshiba (United Kingdom)","ror":"https://ror.org/054hmd463","country_code":"GB","type":"company","lineage":["https://openalex.org/I1292669757","https://openalex.org/I4210143477"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Adrian Sanchez-Mompo","raw_affiliation_strings":["Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK","institution_ids":["https://openalex.org/I4210143477"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025514379","display_name":"Theodoros Spyridopoulos","orcid":"https://orcid.org/0000-0001-7575-9909"},"institutions":[{"id":"https://openalex.org/I4210143477","display_name":"Toshiba (United Kingdom)","ror":"https://ror.org/054hmd463","country_code":"GB","type":"company","lineage":["https://openalex.org/I1292669757","https://openalex.org/I4210143477"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Theodoros Spyridopoulos","raw_affiliation_strings":["Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK","institution_ids":["https://openalex.org/I4210143477"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009611028","display_name":"Aftab Khan","orcid":"https://orcid.org/0000-0002-3573-6240"},"institutions":[{"id":"https://openalex.org/I4210143477","display_name":"Toshiba (United Kingdom)","ror":"https://ror.org/054hmd463","country_code":"GB","type":"company","lineage":["https://openalex.org/I1292669757","https://openalex.org/I4210143477"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Aftab Khan","raw_affiliation_strings":["Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK"],"affiliations":[{"raw_affiliation_string":"Toshiba Europe Limited, Bristol Research and Innovation Laboratory, Bristol, UK","institution_ids":["https://openalex.org/I4210143477"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":14,"corresponding_author_ids":["https://openalex.org/A5002563560"],"corresponding_institution_ids":["https://openalex.org/I36234482"],"apc_list":null,"apc_paid":null,"fwci":1.6,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.84595853,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"532","last_page":"536"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8426029682159424},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.7941906452178955},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7302239537239075},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7211371660232544},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6765958666801453},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.6347976326942444},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.6210533380508423},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5131738781929016},{"id":"https://openalex.org/keywords/edge-computing","display_name":"Edge computing","score":0.5091366171836853},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.508995532989502},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.45206767320632935},{"id":"https://openalex.org/keywords/edge-device","display_name":"Edge device","score":0.4226510226726532},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4156641960144043},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.38004574179649353},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3704502582550049},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.14225026965141296}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8426029682159424},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.7941906452178955},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7302239537239075},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7211371660232544},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6765958666801453},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.6347976326942444},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.6210533380508423},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5131738781929016},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.5091366171836853},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.508995532989502},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.45206767320632935},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.4226510226726532},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4156641960144043},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.38004574179649353},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3704502582550049},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.14225026965141296},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3485730.3494114","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3485730.3494114","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Conference on Embedded Networked Sensor Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:research-information.bris.ac.uk:openaire_cris_publications/7aee4bb3-3877-42e0-b7f8-59c7e35c7c02","is_oa":true,"landing_page_url":"https://research-information.bris.ac.uk/en/publications/7aee4bb3-3877-42e0-b7f8-59c7e35c7c02","pdf_url":null,"source":{"id":"https://openalex.org/S4306400895","display_name":"Bristol Research (University of Bristol)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I36234482","host_organization_name":"University of Bristol","host_organization_lineage":["https://openalex.org/I36234482"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Pope , J , Raimondo , F , Kumar , V , McConville , R , Piechocki , R J , Oikonomou , G , Paquier , T , Luo , B , Howarth , D , Mavromatis , I , Carnelli , P E , Sanchez-Mompo , A , Spyridopoulos , T & Khan , A 2021 , Container Escape Detection for Edge Devices . in SenSys '21 : Proceedings of the 19th ACM Conference on Embedded Networked Sensor Systems . Association for Computing Machinery (ACM) , New York , pp. 532-536 , 19th ACM Conference on Embedded Networked Sensor Systems , Coimbra , Portugal , 15/11/21 . https://doi.org/10.1145/3485730.3494114","raw_type":"contributionToPeriodical"}],"best_oa_location":{"id":"pmh:oai:research-information.bris.ac.uk:openaire_cris_publications/7aee4bb3-3877-42e0-b7f8-59c7e35c7c02","is_oa":true,"landing_page_url":"https://research-information.bris.ac.uk/en/publications/7aee4bb3-3877-42e0-b7f8-59c7e35c7c02","pdf_url":null,"source":{"id":"https://openalex.org/S4306400895","display_name":"Bristol Research (University of Bristol)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I36234482","host_organization_name":"University of Bristol","host_organization_lineage":["https://openalex.org/I36234482"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Pope , J , Raimondo , F , Kumar , V , McConville , R , Piechocki , R J , Oikonomou , G , Paquier , T , Luo , B , Howarth , D , Mavromatis , I , Carnelli , P E , Sanchez-Mompo , A , Spyridopoulos , T & Khan , A 2021 , Container Escape Detection for Edge Devices . in SenSys '21 : Proceedings of the 19th ACM Conference on Embedded Networked Sensor Systems . Association for Computing Machinery (ACM) , New York , pp. 532-536 , 19th ACM Conference on Embedded Networked Sensor Systems , Coimbra , Portugal , 15/11/21 . https://doi.org/10.1145/3485730.3494114","raw_type":"contributionToPeriodical"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5635610506","display_name":null,"funder_award_id":"53707","funder_id":"https://openalex.org/F4320335087","funder_display_name":"Innovate UK"}],"funders":[{"id":"https://openalex.org/F4320314731","display_name":"UK Research and Innovation","ror":"https://ror.org/001aqnf71"},{"id":"https://openalex.org/F4320335087","display_name":"Innovate UK","ror":"https://ror.org/05ar5fy68"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2058401212","https://openalex.org/W2565678956","https://openalex.org/W2962756421","https://openalex.org/W2996042910","https://openalex.org/W3099203541","https://openalex.org/W3136217562","https://openalex.org/W3157309268","https://openalex.org/W4321993631"],"related_works":["https://openalex.org/W4322761281","https://openalex.org/W4238233472","https://openalex.org/W3111395152","https://openalex.org/W4313526662","https://openalex.org/W4313463218","https://openalex.org/W4312996489","https://openalex.org/W3106131444","https://openalex.org/W3216099748","https://openalex.org/W4205963435","https://openalex.org/W3214037210"],"abstract_inverted_index":{"Edge":[0],"computing":[1],"is":[2,132],"rapidly":[3],"changing":[4],"the":[5,39,51,84,98,107,122,130,150],"IoT-Cloud":[6],"landscape.":[7],"Various":[8],"testbeds":[9],"are":[10,162],"now":[11],"able":[12],"to":[13,33,82,93,153],"run":[14,94],"multiple":[15],"Docker-like":[16],"containers":[17,92],"developed":[18,63],"and":[19,41,58,71,124,159,164],"deployed":[20,89],"by":[21],"end-users":[22],"on":[23,38,50],"edge":[24,85],"devices.":[25],"However,":[26],"this":[27],"capability":[28],"may":[29],"allow":[30],"an":[31,77],"attacker":[32],"deploy":[34],"a":[35,47,67,72,80,136,143],"malicious":[36,57,65,99,125],"container":[37,60,81],"host":[40,108],"compromise":[42,83],"it.":[43],"This":[44],"paper":[45],"presents":[46],"dataset":[48,117,131,158],"based":[49],"Linux":[52],"Auditing":[53],"System,":[54],"which":[55],"contains":[56,118],"benign":[59,90,123],"activity.":[61],"We":[62,140],"two":[64],"scenarios,":[66],"denial":[68],"of":[69],"service":[70],"privilege":[73],"escalation":[74],"attack,":[75],"where":[76],"adversary":[78],"uses":[79],"device.":[86],"Furthermore,":[87],"we":[88],"user":[91],"in":[95],"parallel":[96],"with":[97,149],"containers.":[100],"Container":[101],"activity":[102],"can":[103],"be":[104],"captured":[105],"through":[106],"system":[109,111,127],"via":[110],"calls.":[112,128],"Our":[113],"time":[114],"series":[115],"auditd":[116],"partial":[119],"labels":[120],"for":[121],"related":[126],"Generating":[129],"largely":[133],"automated":[134],"using":[135],"provided":[137],"AutoCES":[138],"framework.":[139],"also":[141],"present":[142],"semi-supervised":[144],"machine":[145],"learning":[146],"use":[147],"case":[148],"collected":[151],"data":[152],"demonstrate":[154],"its":[155],"utility.":[156],"The":[157],"framework":[160],"code":[161],"open-source":[163],"publicly":[165],"available.":[166]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}