{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T12:50:45Z","timestamp":1783428645823,"version":"3.54.6"},"reference-count":33,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2018,1,30]],"date-time":"2018-01-30T00:00:00Z","timestamp":1517270400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Iran J Comput Sci"],"published-print":{"date-parts":[[2018,6]]},"DOI":"10.1007\/s42044-018-0006-5","type":"journal-article","created":{"date-parts":[[2018,1,30]],"date-time":"2018-01-30T07:14:51Z","timestamp":1517296491000},"page":"89-97","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Detection of repetitive and irregular hypercall attacks from guest virtual machines to Xen hypervisor"],"prefix":"10.1007","volume":"1","author":[{"given":"Mojtaba","family":"Mostafavi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5143-0498","authenticated-orcid":false,"given":"Peyman","family":"Kabiri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,1,30]]},"reference":[{"key":"6_CR1","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/1869-0238-4-1","volume":"4","author":"K Hashizume","year":"2013","unstructured":"Hashizume, K., Rosado, D., Fern\u00e1ndez-Medina, E., Fernandez, E.: An analysis of security issues for cloud computing. J. Intern. Serv. Appl. 4, 1\u201313 (2013)","journal-title":"J. Intern. Serv. Appl."},{"key":"6_CR2","unstructured":"Zheng, M.: Virtualization security in data centers and clouds. http:\/\/www.cse.wustl.edu\/~jain\/cse571-11\/ftp\/virtual\/index.html (2011)"},{"key":"6_CR3","volume-title":"Professional Xen Virtualization","author":"W Hagen von","year":"2008","unstructured":"von Hagen, W.: Professional Xen Virtualization. Wiley Publishing, Hoboken (2008)"},{"key":"6_CR4","unstructured":"Cully, B.: The virtual monkey monitor. Technical report (2006)"},{"key":"6_CR5","unstructured":"Ormandy, T.: An empirical study into the security exposure to hosts of hostile virtualized environments. Technical report (2007)"},{"key":"6_CR6","doi-asserted-by":"publisher","first-page":"1097","DOI":"10.1016\/j.jnca.2010.06.004","volume":"34","author":"A Chonka","year":"2011","unstructured":"Chonka, A., Xiang, Y., Zhou, W., Bonti, A.: Cloud security defence to protect cloud computing against HTTP-DoS and XML-DoS attacks. J. Netw. Comput. Appl. 34, 1097\u20131107 (2011)","journal-title":"J. Netw. Comput. Appl."},{"key":"6_CR7","doi-asserted-by":"publisher","first-page":"76","DOI":"10.1109\/TNSM.2013.122313.130423","volume":"11","author":"J Bacon","year":"2014","unstructured":"Bacon, J., Eyers, D., Pasquier, T.F.J.M., Singh, J., Papagiannis, I., Pietzuch, P.: Information flow control for secure cloud computing. IEEE Trans. Netw. Serv. Manag. 11, 76\u201389 (2014)","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"issue":"1","key":"6_CR8","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1016\/j.jnca.2012.08.007","volume":"36","author":"A Patel","year":"2013","unstructured":"Patel, A., Taghavi, M., Bakhtiyari, K., Celestino J\u00fanior, J.: An intrusion detection and prevention system in cloud computing: a systematic review. J. Netw. Comput. Appl. 36(1), 25\u201341 (2013)","journal-title":"J. Netw. Comput. Appl."},{"key":"6_CR9","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1145\/1353534.1346284","volume":"36","author":"X Chen","year":"2008","unstructured":"Chen, X., Garfinkel, T., Lewis, E.C., Subrahmanyam, P., Waldspurger, C.A., Boneh, D., et al.: Overshadow: a virtualization-based approach to retrofitting protection in commodity operating systems. ACM SIGARCH Comput. Archit. News 36, 2\u201313 (2008)","journal-title":"ACM SIGARCH Comput. Archit. News"},{"key":"6_CR10","doi-asserted-by":"crossref","unstructured":"Wang, Z., Jiang, X., Cui, W., Ning, P.: Countering kernel rootkits with lightweight hook protection. Presented at the Proceedings of the 16th ACM conference on Computer and communications security, Chicago, Illinois, USA (2009)","DOI":"10.1145\/1653662.1653728"},{"key":"6_CR11","doi-asserted-by":"crossref","unstructured":"Zhang, F., Chen, J., Chen, H., Zang, B.: CloudVisor: retrofitting protection of virtual machines in multi-tenant cloud with nested virtualization. Presented at the Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles, Cascais, Portugal (2011)","DOI":"10.1145\/2043556.2043576"},{"key":"6_CR12","doi-asserted-by":"crossref","unstructured":"Colp, P., Nanavati, M., Zhu, J., Aiello, W., Coker, G., Deegan, T., et al.: Breaking up is hard to do: security and functionality in a commodity hypervisor. Presented at the Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles, Cascais, Portugal (2011)","DOI":"10.1145\/2043556.2043575"},{"key":"6_CR13","unstructured":"Hoang, C.: Protecting Xen hypercalls: intrusion detection\/prevention in a virtualized environment. MSc, Computer Science, University of British Columbia (2009)"},{"key":"6_CR14","doi-asserted-by":"crossref","unstructured":"Jingzheng, W., Liping, D., Yuqi, L., Min-Allah, N., Wang, Y.: XenPump: a new method to mitigate timing channel in cloud computing. In: IEEE 5th International Conference on Cloud Computing (CLOUD) 2012, pp. 678\u2013685 (2012)","DOI":"10.1109\/CLOUD.2012.28"},{"key":"6_CR15","doi-asserted-by":"crossref","unstructured":"Bharadwaja, S., Weiqing, S., Niamat, M., Fangyang, S.: Collabra: a Xen hypervisor based collaborative intrusion detection system. In: Eighth International Conference on Information Technology: New Generations (ITNG) 2011, pp. 695\u2013700 (2011)","DOI":"10.1109\/ITNG.2011.123"},{"key":"6_CR16","doi-asserted-by":"publisher","first-page":"138","DOI":"10.1007\/978-3-642-30436-1_12","volume-title":"Information Security and Privacy Research","author":"F Wang","year":"2012","unstructured":"Wang, F., Chen, P., Mao, B., Xie, L.: RandHyp: preventing attacks via Xen hypercall interface. In: Gritzalis, D., Furnell, S., Theoharidou, M. (eds.) Information Security and Privacy Research, vol. 376, pp. 138\u2013149. Springer, Berlin (2012)"},{"key":"6_CR17","doi-asserted-by":"publisher","first-page":"2488","DOI":"10.4028\/www.scientific.net\/AMM.347-350.2488","volume":"347\u2013350","author":"C Yu","year":"2013","unstructured":"Yu, C., Li, L.X., Wang, K., Yu, W.T.: Protecting the security and privacy of the virtual machine through privilege separation. Appl. Mech. Mater. 347\u2013350, 2488\u20132494 (2013)","journal-title":"Appl. Mech. Mater."},{"key":"6_CR18","doi-asserted-by":"crossref","unstructured":"Li, C., Raghunathan, A. Jha, N.K.: Secure virtual machine execution under an untrusted management OS. In: IEEE 3rd International Conference on Cloud Computing, pp. 172\u2013179 (2010)","DOI":"10.1109\/CLOUD.2010.29"},{"key":"6_CR19","unstructured":"Milenkoski., Payne, B.D., Antunes, N., Vieira, M., Kounev, S.: HInjector: injecting hypercall attacks for evaluating vmi-based intrusion detection systems. Presented at the Annual Computer Security Applications Conference (ACSAC) (2013)"},{"key":"6_CR20","unstructured":"National vulnerability database (NVD). CVE-2017-8903. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2017-8903 (2017)"},{"key":"6_CR21","doi-asserted-by":"crossref","unstructured":"Milenkoski, Payne, B.D., Antunes, N., Vieira, M., Kounev, S.: Experience report: an analysis of hypercall handler vulnerabilities. In: IEEE 25th International Symposium on Software Reliability Engineering (ISSRE) 2014, pp. 100\u2013111 (2014)","DOI":"10.1109\/ISSRE.2014.24"},{"key":"6_CR22","unstructured":"National vulnerability database (NVD). CVE-2013-4494. https:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2013-4494 (2013)"},{"key":"6_CR23","unstructured":"National vulnerability database (NVD). CVE-2013-1920. https:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2013-1920 (2013)"},{"key":"6_CR24","doi-asserted-by":"crossref","unstructured":"Shropshire, J.: Hyperthreats: hypercall-based DoS attacks. In: IEEE SoutheastCon 2015, pp. 1\u20137 (2015)","DOI":"10.1109\/SECON.2015.7133049"},{"key":"6_CR25","doi-asserted-by":"crossref","unstructured":"Milenkoski, Payne, B.D., Antunes, N., Vieira, M., Kounev, S., Avritzer, A., et al.: Evaluation of intrusion detection systems in virtualized environments using attack injection. In: Bos, H., Monrose, F., Blanc, G. (Eds.) Research in Attacks, Intrusions, and Defenses: 18th International Symposium, RAID 2015, Kyoto, Japan, November 2\u20134, 2015. Proceedings, pp. 471\u2013492. Springer International Publishing, Cham (2015)","DOI":"10.1007\/978-3-319-26362-5_22"},{"key":"6_CR26","doi-asserted-by":"crossref","unstructured":"Barham, P., Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., et al.: Xen and the art of virtualization. Presented at the Proceedings of the nineteenth ACM symposium on Operating systems principles, Bolton Landing, NY, USA (2003)","DOI":"10.1145\/945445.945462"},{"key":"6_CR27","unstructured":"Faggioli, D.: Tracing with Xentrace and Xenalyze. https:\/\/blog.xenproject.org\/2012\/09\/27\/tracing-with-xentrace-and-xenalyze\/ (2012)"},{"key":"6_CR28","volume-title":"Introduction to Datamining","author":"P-N Tan","year":"2005","unstructured":"Tan, P.-N., Steinbach, M., Kumar, V.: Introduction to Datamining, 1st edn. Pearson, London (2005)","edition":"1"},{"key":"6_CR29","unstructured":"Weka 3: data mining software in Java. http:\/\/www.cs.waikato.ac.nz\/ml\/weka\/ (2013)"},{"key":"6_CR30","volume-title":"Algorithms","author":"R Sedgewick","year":"2011","unstructured":"Sedgewick, R., Wayne, K.: Algorithms, 4th edn. Addison-Wesley Professional, Boston (2011)","edition":"4"},{"key":"6_CR31","doi-asserted-by":"crossref","unstructured":"Rocha, F., Gross, T., Van Moorsel, A.: Defense-in-depth against malicious insiders in the cloud. In: IEEE International Conference on Cloud Engineering (IC2E) 2013, pp. 88\u201397 (2013)","DOI":"10.1109\/IC2E.2013.20"},{"key":"6_CR32","unstructured":"National vulnerability database (NVD). CVE-2015-7969. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2015-7969 (2015)"},{"key":"6_CR33","unstructured":"National vulnerability database (NVD). CVE-2015-7971. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2015-7971 (2015)"}],"container-title":["Iran Journal of Computer Science"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s42044-018-0006-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s42044-018-0006-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s42044-018-0006-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T03:51:04Z","timestamp":1751255464000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s42044-018-0006-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,1,30]]},"references-count":33,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2018,6]]}},"alternative-id":["6"],"URL":"https:\/\/doi.org\/10.1007\/s42044-018-0006-5","relation":{},"ISSN":["2520-8438","2520-8446"],"issn-type":[{"value":"2520-8438","type":"print"},{"value":"2520-8446","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,1,30]]},"assertion":[{"value":"23 October 2017","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 January 2018","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 January 2018","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}