{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,21]],"date-time":"2025-05-21T04:38:18Z","timestamp":1747802298275,"version":"3.41.0"},"publisher-location":"New York, NY","reference-count":74,"publisher":"Springer New York","isbn-type":[{"type":"print","value":"9781493920914"},{"type":"electronic","value":"9781493920921"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-1-4939-2092-1_32","type":"book-chapter","created":{"date-parts":[[2015,3,16]],"date-time":"2015-03-16T09:30:47Z","timestamp":1426498247000},"page":"961-996","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["C2Hunter: Detection and Mitigation of Covert Channels in Data Centers"],"prefix":"10.1007","author":[{"given":"Jingzheng","family":"Wu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yanjun","family":"Wu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bei","family":"Guan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuqi","family":"Lin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Samee U.","family":"Khan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nasro","family":"Min-Allah","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yongji","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2015,3,17]]},"reference":[{"key":"32_CR1","doi-asserted-by":"crossref","unstructured":"M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. H. Katz, A. Konwinski, G. Lee, D. A. Patterson, A. Rabkin, I. Stoica, and M. Zaharia, \u201cA view of cloud computing,\u201d Commun. ACM, vol.\u00a053, no.\u00a04, pp.\u00a050\u201358, 2010.","DOI":"10.1145\/1721654.1721672"},{"key":"32_CR2","doi-asserted-by":"crossref","unstructured":"A. Greenberg, J. Hamilton, D. A. Maltz, and P. Patel, \u201cThe cost of a cloud: research problems in data center networks,\u201d SIGCOMM Comput. Commun. Rev., vol.\u00a039, no.\u00a01, pp.\u00a068\u201373, Dec. 2008.","DOI":"10.1145\/1496091.1496103"},{"key":"32_CR3","doi-asserted-by":"crossref","unstructured":"G. L. Valentini, W. Lassonde, S. U. Khan, N. Min-Allah, S. A. Madani, J. Li, L. Zhang, L. Wang, N. Ghani, J. Kolodziej, H. Li, A. Y. Zomaya, C.-Z. Xu, P. Balaji, A. Vishnu, F. Pinel, J. E. Pecero, D. Kliazovich, and P. Bouvry, \u201cAn overview of energy efficiency techniques in cluster computing systems,\u201d Cluster Computing, vol.\u00a016, no.\u00a01, pp.\u00a03\u201315, 2013.","DOI":"10.1007\/s10586-011-0171-x"},{"key":"32_CR4","doi-asserted-by":"crossref","unstructured":"L. M. Vaquero, L. Rodero-Merino, J. Caceres, and M. Lindner, \u201cA break in the clouds: towards a cloud definition,\u201d SIGCOMM Comput. Commun. Rev., vol.\u00a039, pp.\u00a050\u201355, December 2008.","DOI":"10.1145\/1496091.1496100"},{"key":"32_CR5","doi-asserted-by":"crossref","unstructured":"R. Buyya, C. S. Yeo, S. Venugopal, J. Broberg, and I. Brandic, \u201cCloud computing and emerging it platforms: Vision, hype, and reality for delivering computing as the 5th utility,\u201d Future Gener. Comput. Syst., vol.\u00a025, pp.\u00a0599\u2013616, June 2009.","DOI":"10.1016\/j.future.2008.12.001"},{"key":"32_CR6","doi-asserted-by":"crossref","unstructured":"P. Barham, B. Dragovic, K. Fraser, S. Hand, T. L. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield, \u201cXen and the art of virtualization,\u201d in SOSP, 2003, pp.\u00a0164\u2013177.","DOI":"10.1145\/1165389.945462"},{"key":"32_CR7","doi-asserted-by":"crossref","unstructured":"H. Takabi, J. B. D. Joshi, and G.-J. Ahn, \u201cSecurity and privacy challenges in cloud computing environments,\u201d IEEE Security & Privacy, vol.\u00a08, no.\u00a06, pp.\u00a024\u201331, 2010.","DOI":"10.1109\/MSP.2010.186"},{"key":"32_CR8","unstructured":"Y. Chen, V. Paxson, and R. H. Katz, \u201cWhat\u2019 s new about cloud computing security?\u201d EECS Department, University of California, Berkeley, Tech. Rep. UCB\/EECS-2010-5, Jan 2010."},{"key":"32_CR9","doi-asserted-by":"crossref","unstructured":"T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, \u201cHey, you, get off of my cloud: exploring information leakage in third-party compute clouds,\u201d in ACM Conference on Computer and Communications Security, 2009, pp.\u00a0199\u2013212.","DOI":"10.1145\/1653662.1653687"},{"key":"32_CR10","unstructured":"J. Wu, L. Ding, and Y. Wang, \u201cResearch on key problems of covert channel in cloud computing,\u201d Journal of Communications, vol.\u00a032, no.\u00a09A, pp.\u00a0184\u2013203, 2011."},{"key":"32_CR11","doi-asserted-by":"crossref","unstructured":"Z. Wang and X. Jiang, \u201cHypersafe: A lightweight approach to provide lifetime hypervisor control-flow integrity,\u201d in IEEE Symposium on Security and Privacy, 2010, pp.\u00a0380\u2013395.","DOI":"10.1109\/SP.2010.30"},{"key":"32_CR12","doi-asserted-by":"crossref","unstructured":"B. D. Payne, R. Sailer, R.\u00a0C\u00e1ceres, R. Perez, and W. Lee, \u201cA layered approach to simplified access control in virtualized systems,\u201d Operating Systems Review, vol.\u00a041, no.\u00a04, pp.\u00a012\u201319, 2007.","DOI":"10.1145\/1278901.1278905"},{"key":"32_CR13","doi-asserted-by":"crossref","unstructured":"R. Sailer, T. Jaeger, E. Valdez, R.\u00a0C\u00e1ceres, R. Perez, S. Berger, J. L. Griffin, and L. van Doorn, \u201cBuilding a mac-based security architecture for the XenXen open-source hypervisor,\u201d in ACSAC, 2005, pp.\u00a0276\u2013285.","DOI":"10.1109\/CSAC.2005.13"},{"key":"32_CR14","doi-asserted-by":"crossref","unstructured":"B. D. Payne, M. Carbone, M. I. Sharif, and W. Lee, \u201cLares: An architecture for secure active monitoring using virtualization,\u201d in IEEE Symposium on Security and Privacy, 2008, pp.\u00a0233\u2013247.","DOI":"10.1109\/SP.2008.24"},{"key":"32_CR15","doi-asserted-by":"crossref","unstructured":"A. M. Azab, P. Ning, Z. Wang, X. Jiang, X. Zhang, and N. C. Skalsky, \u201cHypersentry: enabling stealthy in-context measurement of hypervisor integrity,\u201d in ACM Conference on Computer and Communications Security, 2010, pp.\u00a038\u201349.","DOI":"10.1145\/1866307.1866313"},{"key":"32_CR16","doi-asserted-by":"crossref","unstructured":"S. T. Jones, A. C. Arpaci-Dusseau, and R. H. Arpaci-Dusseau, \u201cAntfarm: Tracking processes in a virtual machine environment,\u201d in USENIX Annual Technical Conference, General Track, 2006, pp.\u00a01\u201314.","DOI":"10.1145\/1168918.1168861"},{"key":"32_CR17","doi-asserted-by":"crossref","unstructured":"A. M. Azab, P. Ning, E. C. Sezer, and X. Zhang, \u201cHima: A hypervisor-based integrity measurement agent,\u201d in ACSAC, 2009, pp.\u00a0461\u2013470.","DOI":"10.1109\/ACSAC.2009.50"},{"key":"32_CR18","doi-asserted-by":"crossref","unstructured":"J. Wu, Y. Wu, Z. Wu, M. Yang, and Y. Wang, \u201cVulcloud: Scalable and hybrid vulnerability detection in cloud computing,\u201d in Software Security and Reliability-Companion (SERE-C), 2013 IEEE 7th International Conference on, 2013, pp.\u00a0225\u2013226.","DOI":"10.1109\/SERE-C.2013.17"},{"key":"32_CR19","doi-asserted-by":"crossref","unstructured":"J. Wu, Y. Wu, M. Yang, Z. Wu, and Y. Wang, \u201cVulnerability detection of android system in fuzzing cloud,\u201d in Proceedings of the 2013 IEEE Sixth International Conference on Cloud Computing, ser. CLOUD '13. Washington, DC, USA: IEEE Computer Society, 2013, pp.\u00a0954\u2013955.","DOI":"10.1109\/CLOUD.2013.143"},{"key":"32_CR20","doi-asserted-by":"crossref","unstructured":"A. Aviram, S. Hu, B. Ford, and R. Gummadi, \u201cDeterminating timing channels in compute clouds,\u201d in CCSW \u201910: Proceedings of the 2010 ACM workshop on Cloud computing security workshop. New York, NY, USA: ACM, 2010, pp.\u00a0103\u2013108.","DOI":"10.1145\/1866835.1866854"},{"key":"32_CR21","unstructured":"NCSC, \u201cTrusted computer system evaluation criteria (orange book),\u201d 1985."},{"key":"32_CR22","doi-asserted-by":"crossref","unstructured":"B. W. Lampson, \u201cA note on the confinement problem,\u201d Commun. ACM, vol.\u00a016, no.\u00a010, pp.\u00a0613\u2013615, 1973.","DOI":"10.1145\/362375.362389"},{"key":"32_CR23","doi-asserted-by":"crossref","unstructured":"J. Wu, L. Ding, Y. Wang, and W. Han, \u201cA practical covert channel identification approach in source code based on directed information flow graph,\u201d in IEEE SSIRI, Jeju Island, Korea, 2011, pp.\u00a098\u2013107.","DOI":"10.1109\/SSIRI.2011.17"},{"key":"32_CR24","doi-asserted-by":"crossref","unstructured":"C.-R. Tsai, V. D. Gligor, and C. S. Chandersekaran, \u201cA formal method for the identification of covert storage channels in source code,\u201d in IEEE Symposium on Security and Privacy, 1987, pp.\u00a074\u201387.","DOI":"10.1109\/SP.1987.10014"},{"key":"32_CR25","doi-asserted-by":"crossref","unstructured":"T. F. Keefe, W.-T. Tsai, and J. Srivastava, \u201cDatabase concurrency control in multilevel secure database management systems,\u201d IEEE Trans. Knowl. Data Eng., vol.\u00a05, no.\u00a06, pp.\u00a01039\u20131055, 1993.","DOI":"10.1109\/69.250090"},{"key":"32_CR26","doi-asserted-by":"crossref","unstructured":"S. Zander, G. J. Armitage, and P. Branch, \u201cA survey of covert channels and countermeasures in computer network protocols,\u201d IEEE Communications Surveys and Tutorials, vol.\u00a09, no.\u00a01\u20134, pp.\u00a044\u201357, 2007.","DOI":"10.1109\/COMST.2007.4317620"},{"key":"32_CR27","doi-asserted-by":"crossref","unstructured":"J. Wu, Y. Wang, L. Ding, and X. Liao, \u201cImproving performance of network covert timing channel through huffman coding,\u201d Mathematical and Computer Modelling, vol.\u00a055, no.\u00a01\u20132, pp.\u00a069\u201379, 2012.","DOI":"10.1016\/j.mcm.2011.01.051"},{"key":"32_CR28","unstructured":"ISO\/IEC, \u201cCommon criteria for information technology security evaluation,\u201d 2005."},{"key":"32_CR29","unstructured":"Y. Wang, J. Wu, H. Zeng, L. Ding, and X. Liao, \u201cCovert channel research,\u201d Journal of Software, vol.\u00a021, no.\u00a09, pp.\u00a02262\u20132288, 2010."},{"key":"32_CR30","unstructured":"J. Wu, Y. Wang, L. Ding, and Y. Zhang, \u201cConstructing scenario of event-flag covert channel in secure operating system,\u201d in ICIMT, Hongkong, 2010, pp.\u00a0371\u2013375."},{"key":"32_CR31","doi-asserted-by":"crossref","unstructured":"C.-R. Tsai and V. D. Gligor, \u201cA bandwidth computation model for covert storage channels and its applications,\u201d in IEEE conference on Security and privacy, Oakland, California, 1988, pp.\u00a0108\u2013121.","DOI":"10.1109\/SECPRI.1988.8103"},{"key":"32_CR32","doi-asserted-by":"crossref","unstructured":"S. Cabuk, C. E. Brodley, and C. Shields, \u201cIP covert timing channels: design and detection,\u201d in ACM Conference on Computer and Communications Security, 2004, pp.\u00a0178\u2013187.","DOI":"10.1145\/1030083.1030108"},{"key":"32_CR33","doi-asserted-by":"crossref","unstructured":"\u2014\u2014, \u201cIP covert channel detection,\u201d ACM Trans. Inf. Syst. Secur., vol.\u00a012, no.\u00a04, pp.\u00a01\u201329, 2009.","DOI":"10.1145\/1513601.1513604"},{"key":"32_CR34","unstructured":"V. Berk, A. Giani, G. Cybenko, and N. Hanover, \u201cDetection of covert channel encoding in network packet delays,\u201d Rapport technique TR536, de lUniversit\u00e9 de Dartmouth. Novembre, 2005."},{"key":"32_CR35","doi-asserted-by":"crossref","unstructured":"N. Nagatou and T. Watanabe, \u201cRun-time detection of covert channels,\u201d in ARES, 2006, pp.\u00a0577\u2013584.","DOI":"10.1109\/ARES.2006.114"},{"key":"32_CR36","doi-asserted-by":"crossref","unstructured":"L.\u00a0H\u00e9lou\u00ebt and A. Roumy, \u201cCovert channel detection using information theory,\u201d in SecCo, 2010, pp.\u00a034\u201351.","DOI":"10.4204\/EPTCS.51.3"},{"key":"32_CR37","doi-asserted-by":"crossref","unstructured":"J. K. Millen, \u201c20 years of covert channel modeling and analysis,\u201d in IEEE Symposium on Security and Privacy, 1999, pp.\u00a0113\u2013114.","DOI":"10.1109\/SECPRI.1999.766906"},{"key":"32_CR38","doi-asserted-by":"crossref","unstructured":"C. G. Girling, \u201cCovert channels in LAN\u2019s,\u201d IEEE Trans. Software Eng., vol.\u00a013, no.\u00a02, pp.\u00a0292\u2013296, 1987.","DOI":"10.1109\/TSE.1987.233153"},{"key":"32_CR39","doi-asserted-by":"crossref","unstructured":"L. Yao, X. Zi, L. Pan, and J. Li, \u201cA study of on\/off timing channel based on packet delay distribution,\u201d Computers & Security, vol.\u00a028, no.\u00a08, pp.\u00a0785\u2013794, 2009.","DOI":"10.1016\/j.cose.2009.05.006"},{"key":"32_CR40","doi-asserted-by":"crossref","unstructured":"T. G. Handel and M. T. S. II, \u201cHiding data in the osi network model,\u201d in Information Hiding, 1996, pp.\u00a023\u201338.","DOI":"10.1007\/3-540-61996-8_29"},{"key":"32_CR41","unstructured":"K. Ahsan and D. Kundur, \u201cPractical data hiding in TCP\/IP,\u201d in Proc. Workshop on Multimedia Security at ACM Multimedia. Citeseer, 2002."},{"key":"32_CR42","doi-asserted-by":"crossref","unstructured":"C. Rowland, \u201cCovert channels in the TCP\/IP protocol suite,\u201d First Monday, vol.\u00a02, no.\u00a05\u20135, 1997.","DOI":"10.5210\/fm.v2i5.528"},{"key":"32_CR43","doi-asserted-by":"crossref","unstructured":"S. Gianvecchio and H. Wang, \u201cDetecting covert timing channels: an entropy-based approach,\u201d in CCS '07: Proceedings of the 14th ACM conference on Computer and communications security. New York, NY, USA: ACM, 2007, pp.\u00a0307\u2013316.","DOI":"10.1145\/1315245.1315284"},{"key":"32_CR44","doi-asserted-by":"crossref","unstructured":"A. O. Yinqian Zhang, Ari Juels and M. K. Reiter, \u201cHomealone: Co-residency detection in the cloud via side-channel analysis,\u201d in IEEE Symposium on Security and Privacy, Oakland, California, 2011, pp.\u00a0313\u2013328.","DOI":"10.1109\/SP.2011.31"},{"key":"32_CR45","doi-asserted-by":"crossref","unstructured":"K. Okamura and Y. Oyama, \u201cLoad-based covert channels between Xen virtual machines,\u201d in SAC, 2010, pp.\u00a0173\u2013180.","DOI":"10.1145\/1774088.1774125"},{"key":"32_CR46","unstructured":"H. Zeng, Y. Wang, L. Ruan, W. Zu, and J. Cai, \u201cCovert channel mitigation method. for secure real-time database using capacity metric,\u201d Journal on Communications, vol.\u00a029, no.\u00a08, pp.\u00a046\u201356, 2008."},{"key":"32_CR47","unstructured":"Y. Wang, J. Wu, L. Ding, and H. Zeng, \u201cDetecion approach for covert channel based concurrency conflict interval time,\u201d Journal of Computer Research and Development, vol.\u00a048, no.\u00a08, pp.\u00a01542\u20131553, 2011."},{"key":"32_CR48","doi-asserted-by":"crossref","unstructured":"J. Wu, L. Ding, Y. Wang, and W. Han, \u201cIdentification and evaluation of sharing memory covert timing channel in Xen virtual machines,\u201d in IEEE CLOUD, Washington DC, USA, 2011, pp.\u00a0283\u2013291.","DOI":"10.1109\/CLOUD.2011.10"},{"key":"32_CR49","doi-asserted-by":"crossref","unstructured":"J. Wu, L. Ding, Y. Lin, N. Min-Allah, and Y. Wang, \u201cXenpump: A new method to mitigate timing channel in cloud computing,\u201d in IEEE CLOUD, Hawaii, USA, 2012, pp.\u00a0678\u2013685.","DOI":"10.1109\/CLOUD.2012.28"},{"key":"32_CR50","unstructured":"D. Chisnall, The definitive guide to the xen hypervisor. Prentice Hall Press, 2007."},{"key":"32_CR51","doi-asserted-by":"crossref","unstructured":"J. K. Millen, \u201cFinite-state noiseless covert channels,\u201d in CSFW, 1989, pp.\u00a081\u201386.","DOI":"10.1109\/CSFW.1989.40590"},{"key":"32_CR52","doi-asserted-by":"crossref","unstructured":"R. Lanotte, A. Maggiolo-Schettini, and A. Troina, \u201cTime and probability-based information flow analysis,\u201d Software Engineering, IEEE Transactions on, vol.\u00a036, no.\u00a05, pp.\u00a0719\u2013734, 2010.","DOI":"10.1109\/TSE.2010.4"},{"key":"32_CR53","doi-asserted-by":"crossref","unstructured":"J. Wu, L. Ding, Y. Wu, N. Min-Allah, S. U. Khan, and Y. Wang, \u201cC2detector: A covert channel detection framework in cloud computing,\u201d Security and Communication Networks, 2013.","DOI":"10.1002\/sec.754"},{"key":"32_CR54","doi-asserted-by":"crossref","unstructured":"L. R. Rabiner, \u201cA tutorial on hidden markov models and selected applications in speech recognition,\u201d Proceedings of the IEEE, vol.\u00a077, no.\u00a02, pp.\u00a0257\u2013286, feb 1989.","DOI":"10.1109\/5.18626"},{"key":"32_CR55","doi-asserted-by":"crossref","unstructured":"J. Hu, X. Yu, D. Qiu, and H.-H. Chen, \u201cA simple and efficient hidden Markov model scheme for host-based anomaly intrusion detection,\u201d IEEE Network, vol.\u00a023, no.\u00a01, pp.\u00a042\u201347, 2009.","DOI":"10.1109\/MNET.2009.4804323"},{"key":"32_CR56","unstructured":"T. M. Mitchell, Machine learning. McGraw-Hill, 1997."},{"key":"32_CR57","doi-asserted-by":"crossref","unstructured":"A. W. Moore and D. Zuev, \u201cInternet traffic classification using Bayesian analysis techniques,\u201d in SIGMETRICS, 2005, pp.\u00a050\u201360.","DOI":"10.1145\/1071690.1064220"},{"key":"32_CR58","doi-asserted-by":"crossref","unstructured":"T. Auld, A. W. Moore, and S. F. Gull, \u201cBayesian neural networks for internet traffic classification,\u201d IEEE Transactions on Neural Networks, vol.\u00a018, no.\u00a01, pp.\u00a0223\u2013239, 2007.","DOI":"10.1109\/TNN.2006.883010"},{"key":"32_CR59","doi-asserted-by":"crossref","unstructured":"E. S. Ristad and P. N. Yianilos, \u201cLearning string-edit distance,\u201d IEEE Trans. Pattern Anal. Mach. Intell., vol.\u00a020, no.\u00a05, pp.\u00a0522\u2013532, 1998.","DOI":"10.1109\/34.682181"},{"key":"32_CR60","doi-asserted-by":"crossref","unstructured":"M. H. Kang and I. S. Moskowitz, \u201cA pump for rapid, reliable, secure communication,\u201d in ACM Conference on Computer and Communications Security, 1993, pp.\u00a0119\u2013129.","DOI":"10.1145\/168588.168604"},{"key":"32_CR61","doi-asserted-by":"crossref","unstructured":"M. H. Kang, I. S. Moskowitz, and D. C. Lee, \u201cA network pump,\u201d IEEE Trans. Software Eng., vol.\u00a022, no.\u00a05, pp.\u00a0329\u2013338, 1996.","DOI":"10.1109\/32.502225"},{"key":"32_CR62","doi-asserted-by":"crossref","unstructured":"J. Son and J. Alves-Foss, \u201cA formal framework for real-time information flow analysis,\u201d Comput. Secur., vol.\u00a028, no.\u00a06, pp.\u00a0421\u2013432, 2009.","DOI":"10.1016\/j.cose.2009.01.005"},{"key":"32_CR63","doi-asserted-by":"crossref","unstructured":"D. A. Osvik, A. Shamir, and E. Tromer, \u201cCache attacks and countermeasures: The case of aes,\u201d in CT-RSA, 2006, pp.\u00a01\u201320.","DOI":"10.1007\/11605805_1"},{"key":"32_CR64","doi-asserted-by":"crossref","unstructured":"E. Tromer, D. A. Osvik, and A. Shamir, \u201cEfficient cache attacks on aes, and countermeasures,\u201d J. Cryptology, vol.\u00a023, no.\u00a01, pp.\u00a037\u201371, 2010.","DOI":"10.1007\/s00145-009-9049-y"},{"key":"32_CR65","doi-asserted-by":"crossref","unstructured":"S. Chen, R. Wang, X. Wang, and K. Zhang, \u201cSide-channel leaks in web applications: A reality today, a challenge tomorrow,\u201d in IEEE Symposium on Security and Privacy, 2010, pp.\u00a0191\u2013206.","DOI":"10.1109\/SP.2010.20"},{"key":"32_CR66","doi-asserted-by":"crossref","unstructured":"K. Kourai and S. Chiba, \u201cHyperspector: virtual distributed monitoring environments for secure intrusion detection,\u201d in VEE, 2005, pp.\u00a0197\u2013207.","DOI":"10.1145\/1064979.1065006"},{"key":"32_CR67","unstructured":"T. Garfinkel and M. Rosenblum, \u201cA virtual machine introspection based architecture for intrusion detection,\u201d in NDSS, 2003."},{"key":"32_CR68","doi-asserted-by":"crossref","unstructured":"X. Jiang and X. Wang, \u201c\"out-of-the-box\" monitoring of vm-based high-interaction honeypots,\u201d in RAID, 2007, pp.\u00a0198\u2013218.","DOI":"10.1007\/978-3-540-74320-0_11"},{"key":"32_CR69","doi-asserted-by":"crossref","unstructured":"J. Li, B. Li, T. Wo, C. Hu, J. Huai, L. Liu, and K. Lam, \u201cCyberguarder: A virtualization security assurance architecture for green cloud computing,\u201d Future Generation Computer Systems, vol.\u00a028, no.\u00a02, pp.\u00a0379\u2013390, 2012.","DOI":"10.1016\/j.future.2011.04.012"},{"key":"32_CR70","doi-asserted-by":"crossref","unstructured":"M. Kang, I. Moskowitz, and D. Lee, \u201cA network version of the pump,\u201d in Security and Privacy, 1995. Proceedings., 1995 IEEE Symposium on, 1995, pp.\u00a0144\u2013154.","DOI":"10.1109\/SECPRI.1995.398929"},{"key":"32_CR71","unstructured":"M. Kang, I. Moskowitz, and S. Chincheck, \u201cThe pump: a decade of covert fun,\u201d in Computer Security Applications Conference, 21st Annual, 2005, pp.\u00a0352\u2013360."},{"key":"32_CR72","unstructured":"W.-M. Hu, \u201cReducing timing channels with fuzzy time,\u201d in IEEE Symposium on Security and Privacy, 1991, pp.\u00a08\u201320."},{"key":"32_CR73","doi-asserted-by":"crossref","unstructured":"D. Zhang, A. Askarov, and A. C. Myers, \u201cPredictive mitigation of timing channels in interactive systems,\u201d in Proceedings of the 18th ACM conference on Computer and communications security, ser. CCS \u201911. New York, NY, USA: ACM, 2011, pp.\u00a0563\u2013574.","DOI":"10.1145\/2046707.2046772"},{"key":"32_CR74","doi-asserted-by":"crossref","unstructured":"A. Askarov, D. Zhang, and A. C. Myers, \u201cPredictive black-box mitigation of timing channels,\u201d in ACM Conference on Computer and Communications Security, 2010, pp.\u00a0297\u2013307.","DOI":"10.1145\/1866307.1866341"}],"container-title":["Handbook on Data Centers"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-1-4939-2092-1_32","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,21]],"date-time":"2025-05-21T00:24:59Z","timestamp":1747787099000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-1-4939-2092-1_32"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9781493920914","9781493920921"],"references-count":74,"URL":"https:\/\/doi.org\/10.1007\/978-1-4939-2092-1_32","relation":{},"subject":[],"published":{"date-parts":[[2015]]},"assertion":[{"value":"17 March 2015","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}