{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,8]],"date-time":"2026-06-08T23:30:54Z","timestamp":1780961454815,"version":"3.54.1"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2020.3041302","type":"journal-article","created":{"date-parts":[[2020,11,30]],"date-time":"2020-11-30T21:01:40Z","timestamp":1606770100000},"page":"225356-225369","source":"Crossref","is-referenced-by-count":3,"title":["SBGen: A Framework to Efficiently Supply Runtime Information for a Learning-Based HIDS for Multiple Virtual Machines"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1848-750X","authenticated-orcid":false,"given":"Jiwon","family":"Seo","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3042-3023","authenticated-orcid":false,"given":"Inyoung","family":"Bang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1539-229X","authenticated-orcid":false,"given":"Junseung","family":"You","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7842-1719","authenticated-orcid":false,"given":"Yeongpil","family":"Cho","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6412-2926","authenticated-orcid":false,"given":"Yunheung","family":"Paek","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","year":"2016","journal-title":"CVE-2016-6663 MySQL\/MariaDB\/Percona-Privilege Escalation\/Race Condition PoC Exploit"},{"key":"ref38","year":"2017","journal-title":"Econet Privilege Escalation"},{"key":"ref33","first-page":"16","article-title":"Preventing privilege escalation","author":"provos","year":"2003","journal-title":"Proc Usenix Secur Symp"},{"key":"ref32","first-page":"346","article-title":"Privilege escalation attacks on Android","author":"davi","year":"2010","journal-title":"Proc Int Conf Inf Secur"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/762476.762477"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2014.59"},{"key":"ref37","year":"2017","journal-title":"Econet Privilege Escalation"},{"key":"ref36","year":"0","journal-title":"MySql"},{"key":"ref35","year":"0","journal-title":"GNU screen"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.32"},{"key":"ref10","article-title":"Extended abstract: Mimicry resilient program behavior modeling with LSTM based branch models","author":"yi","year":"2018","journal-title":"arXiv 1803 09171"},{"key":"ref40","year":"2016","journal-title":"CVE-2016-6664 MySQL\/MariaDB\/Percona-Root Privilege Escalation PoC Exploit"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23476"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2013.13"},{"key":"ref14","article-title":"LSTM-based system-call language modeling and robust ensemble method for designing host-based intrusion detection systems","author":"kim","year":"2016","journal-title":"arXiv 1611 01726"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243811"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.49"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2019.8714807"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1996.502675"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586145"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74320-0_11"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/IITSI.2010.127"},{"key":"ref27","author":"schumilo","year":"2017","journal-title":"kafl Hardware-assisted feedback fuzzing for os kernels"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2002.1007776"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-39650-5_19"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.40"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2003.1199328"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1127345.1127348"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2008.69"},{"key":"ref2","first-page":"485","article-title":"A rule-based approach for port scanning detection","author":"kanlayasiri","year":"2000","journal-title":"Proc 23rd Elect Eng Conf"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/S0140-3664(02)00038-5"},{"key":"ref9","year":"2016","journal-title":"64 and IA-32 Architectures Software Developer's Manual"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1368310.1368334"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1142\/S0218213006003028"},{"key":"ref21","first-page":"146","article-title":"Improving host-based ids with argument abstraction to prevent mimicry attacks","author":"yap","year":"2005","journal-title":"Proc Int Workshop Recent Adv Intrusion Detection"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3093315.3037716"},{"key":"ref23","first-page":"131","article-title":"Efficient protection of path-sensitive control security","author":"ding","year":"2017","journal-title":"Proc 26th USENIX Security Symp (USENIX Security)"},{"key":"ref41","year":"2017","journal-title":"EDB-ID 41154 GNU Screen 4 5 0–Local Privilege Escalation"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-95174-4_10"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029830"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/09272991.pdf?arnumber=9272991","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,17]],"date-time":"2021-12-17T19:55:16Z","timestamp":1639770916000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9272991\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/access.2020.3041302","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]}}}