{"id":"https://openalex.org/W2471431439","doi":"https://doi.org/10.1186/s13635-016-0038-z","title":"An adaptive approach for Linux memory analysis based on kernel code reconstruction","display_name":"An adaptive approach for Linux memory analysis based on kernel code reconstruction","publication_year":2016,"publication_date":"2016-06-27","ids":{"openalex":"https://openalex.org/W2471431439","doi":"https://doi.org/10.1186/s13635-016-0038-z","mag":"2471431439"},"language":"en","primary_location":{"id":"doi:10.1186/s13635-016-0038-z","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-016-0038-z","pdf_url":"https://jis-eurasipjournals.springeropen.com/counter/pdf/10.1186/s13635-016-0038-z","source":{"id":"https://openalex.org/S5820498","display_name":"EURASIP Journal on Information Security","issn_l":"1687-4161","issn":["1687-4161","1687-417X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://jis-eurasipjournals.springeropen.com/counter/pdf/10.1186/s13635-016-0038-z","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101843962","display_name":"Shuhui Zhang","orcid":"https://orcid.org/0000-0001-5017-3207"},"institutions":[{"id":"https://openalex.org/I154099455","display_name":"Shandong University","ror":"https://ror.org/0207yh398","country_code":"CN","type":"education","lineage":["https://openalex.org/I154099455"]},{"id":"https://openalex.org/I4210158984","display_name":"National Supercomputing Center in Wuxi","ror":"https://ror.org/04ypjrs34","country_code":"CN","type":"other","lineage":["https://openalex.org/I4210158984"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Shuhui Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Shandong University, Shunhua Road, Jinan, China","Shandong Computer Science Center (National Supercomputer Center in Jinan), Shandong Provincial Key Laboratory of Computer Networks, Keyuan Road, 250014, Jinan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, Shunhua Road, Jinan, China","institution_ids":["https://openalex.org/I154099455"]},{"raw_affiliation_string":"Shandong Computer Science Center (National Supercomputer Center in Jinan), Shandong Provincial Key Laboratory of Computer Networks, Keyuan Road, 250014, Jinan, China","institution_ids":["https://openalex.org/I4210158984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101536417","display_name":"Xiangxu Meng","orcid":"https://orcid.org/0000-0001-7290-5659"},"institutions":[{"id":"https://openalex.org/I154099455","display_name":"Shandong University","ror":"https://ror.org/0207yh398","country_code":"CN","type":"education","lineage":["https://openalex.org/I154099455"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangxu Meng","raw_affiliation_strings":["School of Computer Science and Technology, Shandong University, Shunhua Road, Jinan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Shandong University, Shunhua Road, Jinan, China","institution_ids":["https://openalex.org/I154099455"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005738289","display_name":"Lianhai Wang","orcid":"https://orcid.org/0000-0002-5701-3465"},"institutions":[{"id":"https://openalex.org/I4210158984","display_name":"National Supercomputing Center in Wuxi","ror":"https://ror.org/04ypjrs34","country_code":"CN","type":"other","lineage":["https://openalex.org/I4210158984"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lianhai Wang","raw_affiliation_strings":["Shandong Computer Science Center (National Supercomputer Center in Jinan), Shandong Provincial Key Laboratory of Computer Networks, Keyuan Road, 250014, Jinan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shandong Computer Science Center (National Supercomputer Center in Jinan), Shandong Provincial Key Laboratory of Computer Networks, Keyuan Road, 250014, Jinan, China","institution_ids":["https://openalex.org/I4210158984"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5101843962"],"corresponding_institution_ids":["https://openalex.org/I154099455","https://openalex.org/I4210158984"],"apc_list":{"value":840,"currency":"EUR","value_usd":1040},"apc_paid":{"value":840,"currency":"EUR","value_usd":1040},"fwci":2.7065,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":{"value":0.9186766,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"2016","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9097582101821899},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.5251402854919434},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.4755277931690216},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.4570505917072296},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.41640955209732056},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.39687713980674744},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.15708240866661072}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9097582101821899},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.5251402854919434},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.4755277931690216},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.4570505917072296},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.41640955209732056},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.39687713980674744},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.15708240866661072},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1186/s13635-016-0038-z","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-016-0038-z","pdf_url":"https://jis-eurasipjournals.springeropen.com/counter/pdf/10.1186/s13635-016-0038-z","source":{"id":"https://openalex.org/S5820498","display_name":"EURASIP Journal on Information Security","issn_l":"1687-4161","issn":["1687-4161","1687-417X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1186/s13635-016-0038-z","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-016-0038-z","pdf_url":"https://jis-eurasipjournals.springeropen.com/counter/pdf/10.1186/s13635-016-0038-z","source":{"id":"https://openalex.org/S5820498","display_name":"EURASIP Journal on Information Security","issn_l":"1687-4161","issn":["1687-4161","1687-417X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6000000238418579,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G2063584172","display_name":null,"funder_award_id":"ZR2014FM003","funder_id":"https://openalex.org/F4320324174","funder_display_name":"Natural Science Foundation of Shandong Province"},{"id":"https://openalex.org/G3008389601","display_name":"\u57fa\u4e8e\u4f4d\u7f6e\u7684\u591a\u89c6\u89d2\u5b9e\u65f6\u6e32\u67d3\u548c\u5f02\u5f62\u5927\u5c4f\u5e55\u6295\u5f71\u663e\u793a\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"61472225","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3334104210","display_name":null,"funder_award_id":"ZR2014FM003","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8654075558","display_name":null,"funder_award_id":"BS2014DX007","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324174","display_name":"Natural Science Foundation of Shandong Province","ror":null},{"id":"https://openalex.org/F4320335581","display_name":"Young Scientists Fund","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2471431439.pdf","grobid_xml":"https://content.openalex.org/works/W2471431439.grobid-xml"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W62460209","https://openalex.org/W172558989","https://openalex.org/W1982531768","https://openalex.org/W1982623151","https://openalex.org/W1984233424","https://openalex.org/W2010376606","https://openalex.org/W2040527645","https://openalex.org/W2040774316","https://openalex.org/W2091452626","https://openalex.org/W2106270115","https://openalex.org/W2115107160","https://openalex.org/W2118534519","https://openalex.org/W2137725382","https://openalex.org/W2139746074","https://openalex.org/W2152282261","https://openalex.org/W2229662347","https://openalex.org/W4213030307"],"related_works":["https://openalex.org/W3167991936","https://openalex.org/W3094720421","https://openalex.org/W2354252607","https://openalex.org/W3044972519","https://openalex.org/W2521388331","https://openalex.org/W2418004379","https://openalex.org/W2355099047","https://openalex.org/W2274628782","https://openalex.org/W2912106162","https://openalex.org/W191604553"],"abstract_inverted_index":{"Memory":[0],"forensics":[1,31],"plays":[2],"an":[3,66,85],"important":[4],"role":[5],"in":[6],"security":[7],"and":[8,19,35,53,57,80,118],"forensic":[9,45],"investigations.":[10],"Hence,":[11],"numerous":[12],"studies":[13],"have":[14],"investigated":[15],"Windows":[16],"memory":[17,30,71,91,95],"forensics,":[18],"considerable":[20],"progress":[21],"has":[22],"been":[23],"made.":[24],"In":[25,87],"contrast,":[26],"research":[27],"on":[28],"Linux":[29,70],"is":[32],"relatively":[33],"sparse,":[34],"the":[36,42,77,101,107,111],"current":[37],"knowledge":[38],"does":[39],"not":[40,50],"meet":[41],"requirements":[43],"of":[44,135],"investigators.":[46],"Existing":[47],"solutions":[48],"are":[49,61],"especially":[51],"sophisticated,":[52],"their":[54],"complicated":[55],"operation":[56],"limited":[58],"treatment":[59],"range":[60,134],"unsatisfactory.":[62],"This":[63],"paper":[64],"describes":[65],"adaptive":[67],"approach":[68],"for":[69],"analysis":[72],"that":[73,126],"can":[74,104],"automatically":[75,105],"identify":[76,110],"kernel":[78,108,112],"version":[79],"recovery":[81],"symbol":[82,115],"information":[83],"from":[84],"image.":[86],"particular,":[88],"given":[89],"a":[90,94,132],"image":[92],"or":[93],"snapshot":[96],"without":[97],"any":[98],"additional":[99],"information,":[100],"proposed":[102],"technique":[103],"reconstruct":[106],"code,":[109],"version,":[113],"recover":[114],"table":[116],"files,":[117],"extract":[119],"live":[120],"system":[121,137],"information.":[122],"Experimental":[123],"results":[124],"indicate":[125],"our":[127],"method":[128],"runs":[129],"satisfactorily":[130],"across":[131],"wide":[133],"operating":[136],"versions.":[138]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1}],"updated_date":"2026-06-19T15:47:20.252518","created_date":"2025-10-10T00:00:00"}