{"id":"https://openalex.org/W2499755950","doi":"https://doi.org/10.1147/jrd.2016.2572462","title":"Security intelligence for cloud management infrastructures","display_name":"Security intelligence for cloud management infrastructures","publication_year":2016,"publication_date":"2016-07-01","ids":{"openalex":"https://openalex.org/W2499755950","doi":"https://doi.org/10.1147/jrd.2016.2572462","mag":"2499755950"},"language":"en","primary_location":{"id":"doi:10.1147/jrd.2016.2572462","is_oa":false,"landing_page_url":"https://doi.org/10.1147/jrd.2016.2572462","pdf_url":null,"source":{"id":"https://openalex.org/S4210219925","display_name":"IBM Journal of Research and Development","issn_l":"0018-8646","issn":["0018-8646","2151-8556"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320652","host_organization_name":"IBM","host_organization_lineage":["https://openalex.org/P4310320652"],"host_organization_lineage_names":["IBM"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IBM Journal of Research and Development","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073346023","display_name":"Stefan Berger","orcid":"https://orcid.org/0000-0002-0461-2640"},"institutions":[{"id":"https://openalex.org/I4210114115","display_name":"IBM Research - Thomas J. Watson Research Center","ror":"https://ror.org/0265w5591","country_code":"US","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"S. Berger","raw_affiliation_strings":["IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I4210114115"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028176674","display_name":"Shelly Garion","orcid":null},"institutions":[{"id":"https://openalex.org/I4210167297","display_name":"IBM Research - Haifa","ror":"https://ror.org/05rw9t746","country_code":"IL","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115","https://openalex.org/I4210167297"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"S. Garion","raw_affiliation_strings":["IBM Research Division, Haifa, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research Division, Haifa, Israel","institution_ids":["https://openalex.org/I4210167297"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041553664","display_name":"Yosef Moatti","orcid":null},"institutions":[{"id":"https://openalex.org/I4210167297","display_name":"IBM Research - Haifa","ror":"https://ror.org/05rw9t746","country_code":"IL","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115","https://openalex.org/I4210167297"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Y. Moatti","raw_affiliation_strings":["IBM Research Division, Haifa, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research Division, Haifa, Israel","institution_ids":["https://openalex.org/I4210167297"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026549255","display_name":"Dalit Naor","orcid":"https://orcid.org/0009-0007-9628-312X"},"institutions":[{"id":"https://openalex.org/I4210167297","display_name":"IBM Research - Haifa","ror":"https://ror.org/05rw9t746","country_code":"IL","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115","https://openalex.org/I4210167297"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"D. Naor","raw_affiliation_strings":["IBM Research Division, Haifa, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research Division, Haifa, Israel","institution_ids":["https://openalex.org/I4210167297"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006668000","display_name":"Dimitrios Pendarakis","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114115","display_name":"IBM Research - Thomas J. Watson Research Center","ror":"https://ror.org/0265w5591","country_code":"US","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"D. Pendarakis","raw_affiliation_strings":["IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I4210114115"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020789964","display_name":"Alexandra Shulman\u2010Peleg","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"A. Shulman-Peleg","raw_affiliation_strings":["Security Innovation Center of Citibank, Tel Aviv, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security Innovation Center of Citibank, Tel Aviv, Israel","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110258544","display_name":"J. R. Rao","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114115","display_name":"IBM Research - Thomas J. Watson Research Center","ror":"https://ror.org/0265w5591","country_code":"US","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"J. R. Rao","raw_affiliation_strings":["IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I4210114115"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019332399","display_name":"Enriquillo Valdez","orcid":"https://orcid.org/0009-0004-4674-3384"},"institutions":[{"id":"https://openalex.org/I4210114115","display_name":"IBM Research - Thomas J. Watson Research Center","ror":"https://ror.org/0265w5591","country_code":"US","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"E. Valdez","raw_affiliation_strings":["IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA","institution_ids":["https://openalex.org/I4210114115"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024101794","display_name":"Yaron Weinsberg","orcid":null},"institutions":[{"id":"https://openalex.org/I4210167297","display_name":"IBM Research - Haifa","ror":"https://ror.org/05rw9t746","country_code":"IL","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115","https://openalex.org/I4210167297"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Y. Weinsberg","raw_affiliation_strings":["IBM Research Division, Haifa, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Research Division, Haifa, Israel","institution_ids":["https://openalex.org/I4210167297"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.9831,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.88089729,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"60","issue":"4","first_page":"11:1","last_page":"11:13"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.8355401754379272},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6785335540771484},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.6058493852615356},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5470283627510071},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.4386889338493347},{"id":"https://openalex.org/keywords/audit-trail","display_name":"Audit trail","score":0.4172283709049225},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38623929023742676},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.34952300786972046},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12403377890586853}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.8355401754379272},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6785335540771484},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6058493852615356},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5470283627510071},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.4386889338493347},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.4172283709049225},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38623929023742676},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34952300786972046},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12403377890586853},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1147/jrd.2016.2572462","is_oa":false,"landing_page_url":"https://doi.org/10.1147/jrd.2016.2572462","pdf_url":null,"source":{"id":"https://openalex.org/S4210219925","display_name":"IBM Journal of Research and Development","issn_l":"0018-8646","issn":["0018-8646","2151-8556"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320652","host_organization_name":"IBM","host_organization_lineage":["https://openalex.org/P4310320652"],"host_organization_lineage_names":["IBM"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IBM Journal of Research and Development","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6200000047683716,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W127845963","https://openalex.org/W1516211918","https://openalex.org/W1974021852","https://openalex.org/W1978232743","https://openalex.org/W1995761541","https://openalex.org/W2036463939","https://openalex.org/W2056675594","https://openalex.org/W2114554028","https://openalex.org/W2145777421","https://openalex.org/W2147118406","https://openalex.org/W2156479376","https://openalex.org/W2169685348","https://openalex.org/W2184107019","https://openalex.org/W2482213519","https://openalex.org/W2483297248","https://openalex.org/W2948953202","https://openalex.org/W6630877225"],"related_works":["https://openalex.org/W4244478748","https://openalex.org/W4223488648","https://openalex.org/W2124184151","https://openalex.org/W2487194309","https://openalex.org/W2750461430","https://openalex.org/W2948428544","https://openalex.org/W2374959091","https://openalex.org/W2581634534","https://openalex.org/W2079105056","https://openalex.org/W3210325674"],"abstract_inverted_index":{"In":[0,161],"this":[1],"paper,":[2],"we":[3,171],"address":[4],"the":[5,49,109,114,121],"problem":[6],"of":[7,29,51,75],"protecting":[8],"cloud":[9,76,148,165,185,189,210],"infrastructures":[10,36],"and":[11,17,21,31,66,72,86,95,104,118,124,146,153,169,191,213],"customer":[12],"workloads":[13],"via":[14],"smart":[15],"auditing":[16,32],"logging,":[18],"satisfying":[19],"regulatory":[20],"compliance":[22],"requirements.":[23],"We":[24,47,126],"observe":[25],"that":[26,173,206],"traditional":[27],"approaches":[28,167],"logging":[30,110],"events":[33],"in":[34],"cloud-scale":[35],"will":[37],"not":[38],"be":[39],"effective":[40,168],"without":[41],"taking":[42],"into":[43],"account":[44],"other":[45],"controls.":[46],"introduce":[48],"concept":[50],"<italic":[52,141,149],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[53,134,142,150],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Cloud":[54],"Security":[55],"Intelligence</i>":[56],"(CSI),":[57],"a":[58,79,138,147,196,202],"new":[59],"systematic":[60],"approach":[61,83,181],"for":[62,93,157],"collecting,":[63],"aggregating,":[64],"correlating,":[65],"analyzing":[67],"data":[68,73,87,115,159],"from":[69,187],"management,":[70],"control,":[71],"planes":[74],"infrastructures,":[77],"using":[78,214],"closed-loop":[80],"architecture.":[81],"Our":[82],"cross-correlates":[84],"control":[85],"plane":[88],"events,":[89],"automatically":[90],"deriving":[91],"rules":[92,101],"monitoring":[94,158],"audits.":[96],"Specifically,":[97],"it":[98,174],"sets":[99],"dynamic":[100],"concerning":[102],"what":[103],"how":[105],"to":[106,163,177],"audit,":[107],"adapting":[108],"accordingly,":[111],"while":[112],"comparing":[113],"access":[116],"patterns":[117],"configurations":[119],"with":[120],"desired":[122],"privileges":[123],"specifications.":[125],"have":[127],"implemented":[128],"CSI":[129],"on":[130,216],"two":[131],"OpenStack":[132],"<sup":[133],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">\u00ae</sup>":[135],"-based":[136],"systems:":[137],"closed":[139],"loop":[140],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">network</i>":[143],"protection":[144],"scheme":[145,156],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">storage</i>":[151],"audit":[152],"risk":[154],"analysis":[155],"access.":[160],"order":[162],"make":[164],"security":[166],"scalable,":[170],"suggest":[172],"is":[175,207],"essential":[176],"use":[178],"an":[179],"intelligent":[180],"such":[182],"as":[183,195,201],"correlating":[184],"logic":[186],"multiple":[188],"layers":[190],"components-e.g.,":[192],"IaaS":[193],"(Infrastructure":[194],"Service)":[197],"or":[198],"PaaS":[199],"(Platform":[200],"Service)-providing":[203],"workload":[204],"context":[205],"maintained":[208],"by":[209],"management":[211],"systems,":[212],"analytics":[215],"historical":[217],"logs.":[218]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}