{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T06:14:33Z","timestamp":1783577673992,"version":"3.55.0"},"reference-count":47,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T00:00:00Z","timestamp":1782086400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T00:00:00Z","timestamp":1782086400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000015","name":"U.S. Department of Energy","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000015","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,6,22]]},"DOI":"10.1109\/dsn69566.2026.00036","type":"proceedings-article","created":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T19:41:43Z","timestamp":1783539703000},"page":"248-260","source":"Crossref","is-referenced-by-count":0,"title":["Measuring Attack Observability in Cloud Telemetry Logs: A Cross-Platform Analysis"],"prefix":"10.1109","author":[{"given":"Mary Grace","family":"Dhooghe","sequence":"first","affiliation":[{"name":"University of Texas at Dallas"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Minkyung","family":"Park","sequence":"additional","affiliation":[{"name":"University of Texas at Dallas"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Junghwan","family":"Rhee","sequence":"additional","affiliation":[{"name":"University of Central Oklahoma"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yung Ryn","family":"Choe","sequence":"additional","affiliation":[{"name":"Sandia National Laboratories"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chung","family":"Hwan Kim","sequence":"additional","affiliation":[{"name":"University of Texas at Dallas"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.4193"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2015.11.016"},{"issue":"1","key":"ref3","first-page":"1","article-title":"Variational autoencoder based anomaly detection using reconstruction probability","volume":"2","author":"An","year":"2015","journal-title":"Special lecture on IE"},{"key":"ref4","first-page":"797","article-title":"{PrivateEye}: Scalable and {Privacy-Preserving} compromise detection in the cloud","volume-title":"17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20)","author":"Arzani"},{"key":"ref5","year":"2025","journal-title":"Azure blob storage pricing"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00064"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid54584.2022.00044"},{"key":"ref8","first-page":"257","article-title":"Detecting lateral movement in enterprise computer networks with unsupervised graph {AI}","volume-title":"23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020)","author":"Bowman"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3344382"},{"key":"ref10","article-title":"Deep learning for anomaly detection: A survey","author":"Chalapathy","year":"2019"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/RWS62797.2024.10799447"},{"key":"ref12","year":"2025","journal-title":"Auditlog api reference"},{"key":"ref13","year":"2025","journal-title":"Logentry api reference"},{"key":"ref14","year":"2025","journal-title":"Structured logging"},{"key":"ref15","first-page":"2443","article-title":"{ALASTOR}: Reconstructing the provenance of serverless intrusions","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Datta"},{"key":"ref16","volume-title":"How many companies use cloud computing in 2024"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134015"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2003.1199328"},{"key":"ref19","article-title":"Packet2vec: Utilizing word2vec for feature extraction in packet data","author":"Goodman","year":"2020"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2016.21"},{"key":"ref21","article-title":"Auto-encoding variational bayes","author":"Kingma","year":"2013"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1561\/2200000056"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-39650-5_19"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510155"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363224"},{"key":"ref26","volume-title":"Critical vulnerabilities in 6 aws services disclosed at black hat usa","year":"2024"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/658"},{"key":"ref28","year":"2025","journal-title":"Activity log schema"},{"key":"ref29","volume-title":"Att&ck att&ck"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM50108.2020.00148"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/WCNC.2018.8376973"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CloudIntelligence52565.2021.00013"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3439950"},{"key":"ref34","article-title":"Deep semi-supervised anomaly detection","author":"Ruff","year":"2019"},{"key":"ref35","volume-title":"Cloud security issues: 10 critical aspects"},{"key":"ref36","year":"2025","journal-title":"Cloudtrail event reference"},{"key":"ref37","volume-title":"CloudWatch logs anomalies","year":"2025"},{"key":"ref38","year":"2025","journal-title":"Guardduty foundational data sources"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TETC.2016.2520883"},{"key":"ref40","volume-title":"Cloud resources have become biggest targets for cyberattacks, finds thales"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/AICAI.2019.8701238"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-39945-3_8"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/2980024.2872407"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338931"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/IWQoS49365.2020.9212954"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3446132.3446415"},{"key":"ref47","article-title":"Deep autoencoding gaussian mixture model for unsupervised anomaly detection","volume-title":"International Conference on learning representations","author":"Zong"}],"event":{"name":"2026 56th Annual IEEE International Conference on Dependable Systems and Networks (DSN)","location":"Charlotte, NC, USA","start":{"date-parts":[[2026,6,22]]},"end":{"date-parts":[[2026,6,25]]}},"container-title":["2026 56th Annual IEEE International Conference on Dependable Systems and Networks (DSN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11593123\/11593173\/11593371.pdf?arnumber=11593371","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T05:25:46Z","timestamp":1783574746000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11593371\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,22]]},"references-count":47,"URL":"https:\/\/doi.org\/10.1109\/dsn69566.2026.00036","relation":{},"subject":[],"published":{"date-parts":[[2026,6,22]]}}}