{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T04:10:21Z","timestamp":1759032621119},"reference-count":26,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2016,2,16]],"date-time":"2016-02-16T00:00:00Z","timestamp":1455580800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Software Qual J"],"published-print":{"date-parts":[[2017,3]]},"DOI":"10.1007\/s11219-016-9311-0","type":"journal-article","created":{"date-parts":[[2016,2,16]],"date-time":"2016-02-16T05:55:55Z","timestamp":1455602155000},"page":"201-229","update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["A declarative framework for stateful analysis of execution traces"],"prefix":"10.1007","volume":"25","author":[{"given":"Florian","family":"Wininger","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Naser","family":"Ezzati-Jivan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michel R.","family":"Dagenais","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2016,2,16]]},"reference":[{"key":"9311_CR1","unstructured":"Blunck, J., Desnoyers, M., & Fournier, P.-M. (2009). Userspace application tracing with markers and tracepoints. In Proceedings of the Linux Kongress."},{"key":"9311_CR2","unstructured":"Cantrill, B. M., Shapiro, M. W., & Leventhal, A. H. (2004). Dynamic instrumentation of production systems. In Proceedings of the annual conference on USENIX annual technical conference, ATEC 04, Berkeley, CA, USA (pp. 2\u20132). USENIX Association."},{"key":"9311_CR3","unstructured":"Cohen, I., Goldszmidt, M., Kelly, T., Symons, J., & Chase, J. S. (2004). Correlating instrumentation data to system states: a building block for automated diagnosis and control. In Proceedings of the 6th conference on symposium on operating systems design implementation\u2014Volume 6, Berkeley, CA, USA (pp. 16\u201316). USENIX Association."},{"key":"9311_CR4","doi-asserted-by":"crossref","first-page":"105","DOI":"10.1145\/1095809.1095821","volume":"39","author":"I Cohen","year":"2005","unstructured":"Cohen, I., Zhang, S., Goldszmidt, M., Symons, J., Kelly, T., & Fox, A. (2005). Capturing, indexing, clustering, and retrieving system history. SIGOPS Operating Systems Review, 39, 105\u2013118.","journal-title":"SIGOPS Operating Systems Review"},{"key":"9311_CR5","doi-asserted-by":"crossref","first-page":"40","DOI":"10.2174\/1874107X00802010040","volume":"2","author":"J-H Desch\u00eanes","year":"2008","unstructured":"Desch\u00eanes, J.-H., Desnoyers, M., & Dagenais, M. R. (2008). Tracing time operating system state determination. Open Software Engineering Journal, 2, 40\u201344.","journal-title":"Open Software Engineering Journal"},{"key":"9311_CR6","unstructured":"Desnoyers, M., & Dagenais, M. R. (2006). The LTTng tracer: A low impact performance and behavior monitor for GNU\/Linux. In OLS (Ottawa Linux symposium) (Vol. 2006, pp. 209\u2013224)."},{"key":"9311_CR7","unstructured":"Desnoyers, M., & Dagenais, M. (2008). Lttng: Tracing across execution layers, from the hypervisor to user-space. In Linux symposium (p. 101)."},{"issue":"1\/2","key":"9311_CR8","doi-asserted-by":"crossref","first-page":"71","DOI":"10.3233\/JCS-2002-101-204","volume":"10","author":"S Eckmann","year":"2002","unstructured":"Eckmann, S., Vigna, G., & Kemmerer, R. (2002). Statl: An attack language for state-based intrusion detection. Journal of Computer Security, 10(1\/2), 71\u2013104.","journal-title":"Journal of Computer Security"},{"key":"9311_CR9","unstructured":"Eigler, F. C., & Hat, R. (2006). Problem solving with systemtap. In Proceedings of the Ottawa Linux symposium (pp. 261\u2013268). Citeseer."},{"key":"9311_CR10","doi-asserted-by":"crossref","unstructured":"Ezzati-Jivan, N., & Dagenais, M. (2014). Multiscale navigation in large trace data. In 27th Annual IEEE Canadian conference on electrical and computer engineering (CCECE) 2014 (pp. 1\u20136).","DOI":"10.1109\/CCECE.2014.6901019"},{"key":"9311_CR11","doi-asserted-by":"publisher","unstructured":"Ezzati-Jivan, N., & Dagenais, M. R. (2012). A stateful approach to generate synthetic events from Kernel traces. Advances in Software Engineering, 2012. doi: 10.1155\/2012\/140368 .","DOI":"10.1155\/2012\/140368"},{"key":"9311_CR12","doi-asserted-by":"crossref","unstructured":"Ezzati-Jivan, N., Shameli-Sendi, A., & Dagenais, M. (2013) Multilevel label placement for execution trace events. In 26th Annual IEEE Canadian conference on electrical and computer engineering (CCECE), 2013 (pp. 1\u20136).","DOI":"10.1109\/CCECE.2013.6567826"},{"key":"9311_CR13","doi-asserted-by":"crossref","first-page":"43","DOI":"10.1145\/2433140.2433151","volume":"47","author":"N Ezzati-Jivan","year":"2013","unstructured":"Ezzati-Jivan, N., & Dagenais, M. R. (2013). A framework to compute statistics of system parameters from very large trace files. ACM SIGOPS Operating Systems Review, 47, 43\u201354.","journal-title":"ACM SIGOPS Operating Systems Review"},{"issue":"1","key":"9311_CR14","first-page":"41","volume":"3","author":"M Gebai","year":"2014","unstructured":"Gebai, M., Giraldeau, F., & Dagenais, M. R. (2014). Fine-grained preemption analysis for latency investigation across virtual machines. Journal of Cloud Computing: Advances, Systems and Applications, 3(1), 41.","journal-title":"Journal of Cloud Computing: Advances, Systems and Applications"},{"key":"9311_CR15","doi-asserted-by":"crossref","first-page":"385","DOI":"10.1145\/1103845.1094841","volume":"40","author":"SF Goldsmith","year":"2005","unstructured":"Goldsmith, S. F., O\u2019Callahan, R., & Aiken, A. (2005). Relational queries over program traces. SIGPLAN Notices, 40, 385\u2013402.","journal-title":"SIGPLAN Notices"},{"key":"9311_CR16","doi-asserted-by":"crossref","unstructured":"Habra, N., Le Charlier, B., Mounji, A., Mathieu, I. (1992). Asax: Software architecture and rule-based language for universal audit trail analysis. In Computer SecurityESORICS 92 (pp. 435\u2013450). Springer","DOI":"10.1007\/BFb0013912"},{"key":"9311_CR17","doi-asserted-by":"crossref","unstructured":"Hamou-Lhadj, A., Murtaza, S.S., Fadel, W., Mehrabian, A., Couture, M., & Khoury, R. (2013). Software behaviour correlation in a redundant and diverse environment using the concept of trace abstraction. In Proceedings of the 2013 research in adaptive and convergent systems, RACS \u201913, New York, NY, USA (pp. 328\u2013335). ACM.","DOI":"10.1145\/2513228.2513305"},{"key":"9311_CR18","doi-asserted-by":"crossref","unstructured":"Lee, K. H., Sumner, N., Zhang, X., & Eugster, P. (2011). Unified debugging of distributed systems with recon. In Proceedings of the 2011 IEEE\/IFIP 41st international conference on dependable systems & networks, DSN \u201911, Washington, DC, USA (pp. 85\u201396). IEEE Computer Society.","DOI":"10.1109\/DSN.2011.5958209"},{"key":"9311_CR19","doi-asserted-by":"crossref","first-page":"365","DOI":"10.1145\/1103845.1094840","volume":"40","author":"M Martin","year":"2005","unstructured":"Martin, M., Livshits, B., & Lam, M. S. (2005). Finding application errors and security flaws using PQL: A program query language. SIGPLAN Notices, 40, 365\u2013383.","journal-title":"SIGPLAN Notices"},{"key":"9311_CR20","doi-asserted-by":"crossref","unstructured":"Matni, G., & Dagenais, M. (May 2009). Automata-based approach for kernel trace analysis. In Canadian conference on electrical and computer engineering, 2009. CCECE 09 (pp. 970\u2013973).","DOI":"10.1109\/CCECE.2009.5090273"},{"key":"9311_CR21","doi-asserted-by":"crossref","unstructured":"Montplaisir, A., Ezzati-Jivan, N., Wininger, F., & Dagenais, M. (2013). State history tree: An incremental disk-based data structure for very large interval data. In 2013 ASE\/IEEE international conference on big data.","DOI":"10.1109\/SocialCom.2013.107"},{"key":"9311_CR22","first-page":"219","volume-title":"Runtime verification, vol. 8174 of lecture notes in computer science","author":"A Montplaisir","year":"2013","unstructured":"Montplaisir, A., Ezzati-Jivan, N., Wininger, F., & Dagenais, M. (2013). Efficient model to query and visualize the system states extracted from trace data. In A. Legay & S. Bensalem (Eds.), Runtime verification, vol. 8174 of lecture notes in computer science (pp. 219\u2013234). Berlin, Heidelberg: Springer."},{"key":"9311_CR23","first-page":"229","volume":"99","author":"M Roesch","year":"1999","unstructured":"Roesch, M., et al. (1999). Snort: Lightweight intrusion detection for networks. LISA, 99, 229\u2013238.","journal-title":"LISA"},{"key":"9311_CR24","doi-asserted-by":"crossref","unstructured":"Schnorr, L. M., Huard, G., & Navaux, P. O. A. (2009). Towards visualization scalability through time intervals and hierarchical organization of monitoring data. In Proceedings of the 2009 9th IEEE\/ACM international symposium on cluster computing and the grid, CCGRID 09, Washington, DC, USA (pp. 428\u2013435). IEEE Computer Society","DOI":"10.1109\/CCGRID.2009.19"},{"key":"9311_CR25","doi-asserted-by":"crossref","unstructured":"Waly, H. (2011). A complete framework for kernel trace analysis. Master\u2019s thesis, Laval University.","DOI":"10.1109\/CCECE.2011.6030698"},{"key":"9311_CR26","doi-asserted-by":"crossref","first-page":"277","DOI":"10.1177\/109434209901300310","volume":"13","author":"O Zaki","year":"1999","unstructured":"Zaki, O., Lusk, E., Gropp, W., & Swider, D. (1999). Toward scalable performance visualization with jumpshot. The International Journal of High Performance Computing Applications, 13, 277\u2013288.","journal-title":"The International Journal of High Performance Computing Applications"}],"container-title":["Software Quality Journal"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11219-016-9311-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11219-016-9311-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11219-016-9311-0","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11219-016-9311-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,4]],"date-time":"2019-09-04T12:59:40Z","timestamp":1567601980000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11219-016-9311-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,2,16]]},"references-count":26,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2017,3]]}},"alternative-id":["9311"],"URL":"https:\/\/doi.org\/10.1007\/s11219-016-9311-0","relation":{},"ISSN":["0963-9314","1573-1367"],"issn-type":[{"value":"0963-9314","type":"print"},{"value":"1573-1367","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,2,16]]}}}