{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:31:11Z","timestamp":1783438271138,"version":"3.54.6"},"publisher-location":"Cham","reference-count":36,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319405926","type":"print"},{"value":"9783319405933","type":"electronic"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-40593-3_1","type":"book-chapter","created":{"date-parts":[[2016,6,3]],"date-time":"2016-06-03T02:35:30Z","timestamp":1464921330000},"page":"3-15","source":"Crossref","is-referenced-by-count":8,"title":["RecProv: Towards Provenance-Aware User Space Record and Replay"],"prefix":"10.1007","author":[{"given":"Yang","family":"Ji","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sangho","family":"Lee","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenke","family":"Lee","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2016,6,4]]},"reference":[{"key":"1_CR1","unstructured":"Attariyan, M., Chow, M., Flinn, J.: X-ray: automating root-cause diagnosis of performance anomalies in production software. In: Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI), Hollywood, CA, October 2012"},{"key":"1_CR2","unstructured":"Balakrishnan, N., Bytheway, T., Carata, L., Chick, O.R.A., Snee, J., Akoush, S., Sohan, R., Seltzer, M., Hopper, A.: Recent advances in computer architecture: the opportunities and challenges for provenance. In: Proceedings of the 7th USENIX Workshop on the Theory and Practice of Provenance (TaPP) (2015)"},{"key":"1_CR3","unstructured":"Bates, A., Tian, D.J., Butler, K.R., Moyer, T.: Trustworthy whole-system provenance for the Linux kernel. In: Proceedings of the 24th USENIX Security Symposium (Security), Washington, DC, August 2015"},{"key":"1_CR4","unstructured":"Cantrill, B., Shapiro, M., Leventhal, A.: Dynamic instrumentation of production systems. In: Proceedings of the 2004 USENIX Annual Technical Conference (ATC), Boston, MA, June\u2013July 2004"},{"key":"1_CR5","doi-asserted-by":"crossref","unstructured":"Davidson, S., Freire, J.: Provenance and scientic workflows: challenges and opportunities. In: Proceedings of the 2008 ACM SIGMOD\/PODS Conference, Vancouver, Canada, June 2008","DOI":"10.1145\/1376616.1376772"},{"key":"1_CR6","unstructured":"Devecsery, D., Chow, M., Dou, X., Flinn, J., Chen, P.: Eidetic systems. In: Proceedings of the 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI), Broomfield, Colorado, October 2014"},{"key":"1_CR7","doi-asserted-by":"crossref","unstructured":"Dolan-Gavitt, B., Leek, T., Hodosh, J., Lee, W.: Tappan zee (north) bridge: mining memory accesses for introspection. In: Proceedings of the 20th ACM Conference on Computer and Communications Security (CCS), Berlin, Germany, October 2013","DOI":"10.1145\/2508859.2516697"},{"key":"1_CR8","doi-asserted-by":"crossref","unstructured":"Dolan-Gavitt, B., Leek, T., Zhivich, M., Giffin, J., Lee, W.: Virtuoso: narrowing the semantic gap in virtual machine introspection. In: Proceedings of the 32nd IEEE Symposium on Security and Privacy (Oakland), Oakland, CA, May 2011","DOI":"10.1109\/SP.2011.11"},{"key":"1_CR9","doi-asserted-by":"crossref","unstructured":"Gehani, A., Tariq, D.: SPADE: support for provenance auditing in distributed environments. In: Proceedings of the 13th USENIX Workshop on the Theory and Practice of Provenance (TaPP) (2012)","DOI":"10.1007\/978-3-642-35170-9_6"},{"key":"1_CR10","unstructured":"Guo, Z., Wang, X., Tang, J., Liu, X., Xu, Z., Wu, M., Kaashoek, M.F., Zhang, Z.: R2: an application-level kernel for record and replay. In: Proceedings of the 8th USENIX Symposium on Operating Systems Design and Implementation (OSDI), San Diego, CA, December 2008"},{"key":"1_CR11","unstructured":"Intel: Pin - a dynamic binary instrumentation tool. https:\/\/software.intel.com\/en-us\/articles\/pin-a-dynamic-binary-instrumentation-tool"},{"issue":"4","key":"1_CR12","first-page":"379","volume":"1","author":"C James","year":"2009","unstructured":"James, C., Laura, C., Wang-Chiew, T.: Provenance in databases: why, how, and where. Found. Trends Databases 1(4), 379\u2013474 (2009)","journal-title":"Found. Trends Databases"},{"key":"1_CR13","doi-asserted-by":"crossref","unstructured":"Kemerlis, V.P., Portokalidis, G., Jee, K., Keromytis, A.D.: libdft: practical dynamic data flow tracking for commodity systems. In: Proceedings of the 8th ACM SIGPLAN\/SIGOPS International Conference on Virtual Execution Environments (VEE) (2012)","DOI":"10.1145\/2151024.2151042"},{"key":"1_CR14","unstructured":"Kim, T., Wang, X., Zeldovich, N., Kaashoek, M.: Intrusion recovery using selective re-execution. In: Proceedings of the 9th USENIX Symposium on Operating Systems Design and Implementation (OSDI), Vancouver, Canada, October 2010"},{"key":"1_CR15","doi-asserted-by":"crossref","unstructured":"King, S.T., Chen, P.M.: Backtracking intrusions. In: Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP). Bolton Landing, NY, October 2003","DOI":"10.1145\/945445.945467"},{"key":"1_CR16","doi-asserted-by":"crossref","unstructured":"Luk, C.K., Cohn, R., Muth, R., Patil, H., Klauser, A., Lowney, G., Wallace, S., Reddi, V.J., Hazelwood, K.: Pin: building customized program analysis tools with dynamic instrumentation. In: Proceedings of the 2005 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Chicago, IL, June 2005","DOI":"10.1145\/1065010.1065034"},{"key":"1_CR17","doi-asserted-by":"crossref","unstructured":"Ma, S., Zhang, X., Xu, D.: ProTracer: towards practical provenance tracing by alternating between logging and tainting. In: Proceedings of the 2016 Annual Network and Distributed System Security Symposium (NDSS), San Diego, CA, February 2016","DOI":"10.14722\/ndss.2016.23350"},{"key":"1_CR18","unstructured":"McAfee: White paper: Combating advanced persistent threats, how to prevent, detect and remediate apts. http:\/\/www.mcafee.com\/us\/resources\/white-papers\/wp-combat-advanced-persist-threats.pdf"},{"issue":"2\u20133","key":"1_CR19","doi-asserted-by":"crossref","first-page":"99","DOI":"10.1561\/1800000010","volume":"2","author":"L Moreau","year":"2010","unstructured":"Moreau, L.: The foundations for provenance on the web. Found. Trends Web Sci. 2(2\u20133), 99\u2013241 (2010)","journal-title":"Found. Trends Web Sci."},{"key":"1_CR20","unstructured":"Mozilla: rr: lightweight recording & deterministic debugging. http:\/\/rr-project.org"},{"key":"1_CR21","unstructured":"Muniswamy-Reddy, K.K., Braun, U., Holland, D.A., Macko, P., MacLean, D.L., Margo, D.W., Seltzer, M.I., Smogor, R.: Layering in provenance systems. In: Proceedings of the 2009 USENIX Annual Technical Conference (ATC), San Diego, CA, June 2009"},{"key":"1_CR22","unstructured":"Muniswamy-Reddy, K.K., Holland, D.A., Braun, U., Seltzer, M.I.: Provenance-aware storage systems. In: Proceedings of the 2006 USENIX Annual Technical Conference (ATC), Boston, MA, May\u2013June 2006"},{"key":"1_CR23","unstructured":"Neo Technology: Neo4j: The world\u2019s leading graph database. http:\/\/www.neo4j.com"},{"key":"1_CR24","doi-asserted-by":"crossref","unstructured":"Nethercote, N., Seward, J.: Valgrind: a framework for heavyweight dynamic binary instrumentation. In: Proceedings of the 2007 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), San Diego, CA, June 2007","DOI":"10.1145\/1250734.1250746"},{"key":"1_CR25","unstructured":"Newsome, J., Song, D.: Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In: Proceedings of the 12th Annual Network and Distributed System Security Symposium (NDSS), San Diego, CA, February 2005"},{"key":"1_CR26","unstructured":"NTT Laboratories: NILFS - continuous snapshotting filesystem for Linux. http:\/\/www.nilfs.org"},{"key":"1_CR27","doi-asserted-by":"crossref","unstructured":"Pohly, D.J., McLaughlin, S., McDaniel, P., Butler, K.: Hi-Fi: collecting high-fidelity whole-system provenance. In: Proceedings of the Annual Computer Security Applications Conference (ACSAC) (2012)","DOI":"10.1145\/2420950.2420989"},{"key":"1_CR28","unstructured":"Reinders, J.: Processor Trace. https:\/\/software.intel.com\/en-us\/blogs\/2013\/09\/18\/processor-tracing"},{"key":"1_CR29","doi-asserted-by":"crossref","unstructured":"Saito, Y.: Jockey: a user-space library for record-replay debugging. In: Proceedings of the 6th International Symposium on Automated Analysis-driven Debugging (2005)","DOI":"10.1145\/1085130.1085139"},{"key":"1_CR30","unstructured":"Seward, J., Nethercote, N.: Using valgrind to detect undefined value errors with bit-precision. In: Proceedings of the 2005 USENIX Annual Technical Conference (ATC), Anaheim, CA, June\u2013July 2005"},{"key":"1_CR31","doi-asserted-by":"crossref","unstructured":"Simmhan, Y.L., Plale, B., Gannon, D.: Karma2: provenance management for data-driven workflows. In: Web Services Research for Emerging Applications: Discoveries and Trends: Discoveries and Trends, p. 317 (2010)","DOI":"10.4018\/978-1-61520-684-1.ch014"},{"key":"1_CR32","unstructured":"Srinivasan, S.M., Kandula, S., Andrews, C.R., Zhou, Y.: Flashback: a lightweight extension for rollback and deterministic replay for software debugging. In: Proceedings of the 2004 USENIX Annual Technical Conference (ATC), Boston, MA June\u2013July 2004"},{"key":"1_CR33","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"155","DOI":"10.1007\/978-3-319-16462-5_12","volume-title":"Provenance and Annotation of Data and Processes","author":"M Stamatogiannakis","year":"2015","unstructured":"Stamatogiannakis, M., Groth, P., Bos, H.: Looking inside the black-box: capturing data provenance using dynamic instrumentation. In: Ludaescher, B., Plale, B. (eds.) IPAW 2014. LNCS, vol. 8628, pp. 155\u2013167. Springer, Heidelberg (2015)"},{"key":"1_CR34","unstructured":"Stamatogiannakis, M., Groth, P., Bos, H.: Decoupling provenance capture and analysis from execution. In: Proceedings of the 7th USENIX Workshop on the Theory and Practice of Provenance (TaPP) (2015)"},{"key":"1_CR35","unstructured":"Tariq, D., Ali, M., Gehani, A.: Towards automated collection of application-level data provenance. In: Proceedings of the 4th USENIX Workshop on the Theory and Practice of Provenance (TaPP) (2015)"},{"key":"1_CR36","doi-asserted-by":"crossref","unstructured":"Yin, H., Song, D., Egele, M., Kruegel, C., Kirda, E.: Panorama: capturing system-wide information flow for malware detection and analysis. In: Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS), Alexandria, VA, October\u2013November 2007","DOI":"10.1145\/1315245.1315261"}],"container-title":["Lecture Notes in Computer Science","Provenance and Annotation of Data and Processes"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-40593-3_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,24]],"date-time":"2017-06-24T11:39:40Z","timestamp":1498304380000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-40593-3_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319405926","9783319405933"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-40593-3_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016]]}}}