{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,22]],"date-time":"2025-02-22T05:19:37Z","timestamp":1740201577259,"version":"3.37.3"},"reference-count":40,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,1,6]],"date-time":"2025-01-06T00:00:00Z","timestamp":1736121600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,6]],"date-time":"2025-01-06T00:00:00Z","timestamp":1736121600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,1,6]]},"DOI":"10.1109\/comsnets63942.2025.10885639","type":"proceedings-article","created":{"date-parts":[[2025,2,20]],"date-time":"2025-02-20T20:05:58Z","timestamp":1740081958000},"page":"566-574","source":"Crossref","is-referenced-by-count":0,"title":["Towards Generating a Robust, Scalable and Dynamic Provenance Graph for Attack Investigation over Distributed Microservice Architecture"],"prefix":"10.1109","author":[{"given":"Utkalika","family":"Satpathy","sequence":"first","affiliation":[{"name":"IIT,Department of Computer Science and Engineering,Kharagpur,India"}]},{"given":"Harsh","family":"Borse","sequence":"additional","affiliation":[{"name":"IIT,Department of Computer Science and Engineering,Kharagpur,India"}]},{"given":"Sandip","family":"Chakraborty","sequence":"additional","affiliation":[{"name":"IIT,Department of Computer Science and Engineering,Kharagpur,India"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3183628.3183631"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS59351.2024.10427048"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3532183"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3538969.3543807"},{"key":"ref5","first-page":"3989","article-title":"CLARION: Sound and clear provenance tracking for microservice deployments","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Chen"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2891891"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24046"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3477314.3507097"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom56396.2022.00106"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3208815"},{"article-title":"ORCHID: Streaming threat detection over versioned provenance graphs","year":"2024","author":"Goyal","key":"ref11"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24167"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35170-9_6"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3127479.3129249"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3539605"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3664476.3664494"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24207"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS51040.2020.00099"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3055676"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CloudNet51028.2020.9335808"},{"key":"ref21","first-page":"3005","article-title":"ATLAS: A sequence-based learning approach for attack investigation","volume-title":"30th USENIX security symposium (USENIX Security)","author":"Alsaheel"},{"key":"ref22","first-page":"113","article-title":"AIQL: Enabling efficient attack investigation from system monitoring data","volume-title":"2018 USENIX Annual Technical Conference (USENIX ATC 18)","author":"Gao"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24270"},{"key":"ref24","first-page":"2461","article-title":"Back-Propagating system dependency impact for attack investigation","volume-title":"31st USENIX Security Symposium (USENIX Security)","author":"Fang"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TIM.2022.3216674"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICPECA56706.2023.10075886"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.3390\/electronics12081849"},{"year":"2004","key":"ref28","article-title":"Linux audit-subsystem design documentation for linux kernel 2.6, v0. 1"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3019612.3019919"},{"article-title":"Scads: A scalable approach using spark in cloud for host-based intrusion detection system with system calls","year":"2021","author":"Liu","key":"ref30"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363217"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00026"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS53615.2022.9668504"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23349"},{"key":"ref35","first-page":"319","article-title":"Trustworthy Whole-System provenance for the linux kernel","volume-title":"24th USENIX Security","author":"Bates"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3297280.3297401"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48987.2021.00035"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/343477.343628"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.05.007"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.3837\/tiis.2015.07.023"}],"event":{"name":"2025 17th International Conference on COMmunication Systems and NETworks (COMSNETS)","start":{"date-parts":[[2025,1,6]]},"location":"Bengaluru, India","end":{"date-parts":[[2025,1,10]]}},"container-title":["2025 17th International Conference on COMmunication Systems and NETworks (COMSNETS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10885406\/10885547\/10885639.pdf?arnumber=10885639","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T07:28:15Z","timestamp":1740122895000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10885639\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,1,6]]},"references-count":40,"URL":"https:\/\/doi.org\/10.1109\/comsnets63942.2025.10885639","relation":{},"subject":[],"published":{"date-parts":[[2025,1,6]]}}}