{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T18:12:25Z","timestamp":1778263945827,"version":"3.51.4"},"publisher-location":"Boston, MA","reference-count":11,"publisher":"Springer US","isbn-type":[{"value":"9781441959058","type":"print"},{"value":"9781441959065","type":"electronic"}],"license":[{"start":{"date-parts":[[2011,1,1]],"date-time":"2011-01-01T00:00:00Z","timestamp":1293840000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2011,1,1]],"date-time":"2011-01-01T00:00:00Z","timestamp":1293840000000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011]]},"DOI":"10.1007\/978-1-4419-5906-5_647","type":"book-chapter","created":{"date-parts":[[2011,10,27]],"date-time":"2011-10-27T09:50:43Z","timestamp":1319709043000},"page":"1360-1362","source":"Crossref","is-referenced-by-count":1,"title":["Virtual Machine Introspection"],"prefix":"10.1007","author":[{"given":"Bryan D.","family":"Payne","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"647_CR1_647","volume-title":"Proceedings of the network and distributed systems security symposium","author":"T Garfinkel","year":"2003","unstructured":"Garfinkel T, Rosenblum M (2003) A virtual machine introspection based architecture for intrusion detection. In: Proceedings of the network and distributed systems security symposium, February 2003"},{"key":"647_CR2_647","volume-title":"Proceedings of the annual computer security applications conference","author":"BD Payne","year":"2007","unstructured":"Payne BD, Carbone M, Lee W (2007) Secure and flexible monitoring of virtual machines. In: Proceedings of the annual computer security applications conference, December 2007"},{"key":"647_CR3_647","volume-title":"Proceedings of the IEEE symposium on security and privacy","author":"BD Payne","year":"2008","unstructured":"Payne BD, Carbone M, Sharif M, Lee W (2008) Lares: an architecture for secure active monitoring using virtualization. In: Proceedings of the IEEE symposium on security and privacy, May 2008"},{"key":"647_CR4_647","volume-title":"Proceedings of the USENIX annual technical conference","author":"ST Jones","year":"2006","unstructured":"Jones ST, Arpaci-Dusseau AC, Arpaci-Dusseau RH (2006) Antfarm: tracking processes in a virtual machine environment. In: Proceedings of the USENIX annual technical conference, June 2006"},{"key":"647_CR5_647","volume-title":"Proceedings of the USENIX security symposium","author":"L Litty","year":"2008","unstructured":"Litty L, Lagar-Cavilla HA, Lie D (2008) Hypervisor support for identifying covertly executing binaries. In: Proceedings of the USENIX security symposium, August 2008"},{"key":"647_CR6_647","volume-title":"Proceedings of the ACM conference on computer and communications security","author":"NL Petroni","year":"2007","unstructured":"Petroni NL, Hicks M (2007) Automated detection of persistent kernel control-flow attacks. In: Proceedings of the ACM conference on computer and communications security, October 2007"},{"key":"647_CR7_647","doi-asserted-by":"publisher","first-page":"51","DOI":"10.1145\/1047915.1047918","volume":"23","author":"ST King","year":"2005","unstructured":"King ST, Chen PM (2005) Backtracking intrusions. ACM Trans Comp Syst 23:51\u201376","journal-title":"ACM Trans Comp Syst"},{"key":"647_CR8_647","volume-title":"Proceedings of the USENIX symposium on operating systems design and implementation","author":"A Cozzie","year":"2008","unstructured":"Cozzie A, Stratton F, Xue H, King ST (2008) Digging for data structures. In: Proceedings of the USENIX symposium on operating systems design and implementation, December 2008"},{"key":"647_CR9_647","volume-title":"Proceedings of the ACM conference on computer and communications security","author":"B Dolan-Gavitt","year":"2009","unstructured":"Dolan-Gavitt B, Srivastava A, Traynor P, Giffin J (2009) Robust signatures for kernel data structures. In: Proceedings of the ACM conference on computer and communications security, November 2009"},{"key":"647_CR10_647","unstructured":"The XenAccess virtual machine introspection library for Xen. http:\/\/www.xenaccess.org"},{"key":"647_CR11_647","unstructured":"The VMsafe virtual machine introspection library for VMware. http:\/\/www.vmware.com\/go\/vmsafe"}],"container-title":["Encyclopedia of Cryptography and Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-1-4419-5906-5_647","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T18:05:46Z","timestamp":1778263546000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-1-4419-5906-5_647"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011]]},"ISBN":["9781441959058","9781441959065"],"references-count":11,"URL":"https:\/\/doi.org\/10.1007\/978-1-4419-5906-5_647","relation":{},"subject":[],"published":{"date-parts":[[2011]]}}}