{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T15:43:25Z","timestamp":1785512605349,"version":"3.56.0"},"reference-count":180,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5]]},"DOI":"10.1109\/sp46215.2023.10179405","type":"proceedings-article","created":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T17:18:15Z","timestamp":1689959895000},"page":"2620-2638","source":"Crossref","is-referenced-by-count":59,"title":["SoK: History is a Vast Early Warning System: Auditing the Provenance of System Intrusions"],"prefix":"10.1109","author":[{"given":"Muhammad Adil","family":"Inam","sequence":"first","affiliation":[{"name":"University of Illinois at Urbana-Champaign"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yinfang","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Akul","family":"Goyal","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jason","family":"Liu","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jaron","family":"Mink","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Noor","family":"Michael","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sneha","family":"Gaur","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Adam","family":"Bates","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wajih Ul","family":"Hassan","sequence":"additional","affiliation":[{"name":"University of Virginia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-02333-0"},{"key":"ref2","article-title":"Computer Security Technology Planning Study","volume-title":"Air Force Electronic Systems Division, Tech. Rep. ESD-TR-73-51","author":"Anderson","year":"1972"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2830903.2830905"},{"key":"ref4","article-title":"Integrating Flexible Support for Security Policies into the Linux Operating System","volume-title":"Proceedings of the 2001 USENIX Annual Technical Conference","author":"Loscocco"},{"key":"ref5","article-title":"Implementing SELinux as a Linux security module","volume-title":"NAI Labs Report","volume":"1","author":"Smalley","year":"2001"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/fits.2003.1264934"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/1805974.1805982"},{"key":"ref8","article-title":"Analyzing integrity protection in the selinux example policy","volume-title":"USENIX Security Symposium","author":"Jaeger"},{"key":"ref9","article-title":"On the security of selinux with a simplified policy","volume-title":"Proceedings of the IASTED International Conference on Communication, Network, and Information Security","author":"Sueyasu"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586141"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102164"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/996943.996944"},{"key":"ref13","article-title":"Using CQUAL for Static Analysis of Authorization Hook Placement","volume-title":"USENIX Security Symposium","author":"Zhang"},{"key":"ref14","article-title":"Linux Audit-Subsystem Design Documentation for Linux Kernel 2.6, v0.1","author":"LINUXAG","year":"2004"},{"key":"ref15","article-title":"Controlled Access Protection Profile, Version 1.d","author":"Agency","year":"1999"},{"key":"ref16","article-title":"Labeled Security Protection Profile, Version 1.b","author":"Agency","year":"1999"},{"key":"ref17","volume-title":"Equifax Says Cyberattack May Have Affected 143 Million in the U.S."},{"key":"ref18","article-title":"Operation Aurora Hit Google, Others","author":"Kurtz","year":"2010"},{"key":"ref19","article-title":"Inside the Cyberattack That Shocked the US Government"},{"key":"ref20","article-title":"Cyberattacks Put Russian Fingers on the Switch at Power Plants, U.S. Says","author":"Perlroth","year":"2018"},{"key":"ref21","article-title":"APT3","year":"2019"},{"key":"ref22","article-title":"APT29","year":"2019"},{"key":"ref23","article-title":"Target Missed Warnings in Epic Hack of Credit Card Data"},{"key":"ref24","article-title":"Why Dwell Time Continues to Plague Organizations","year":"2019"},{"key":"ref25","article-title":"Global Cybersecurity Spending Predicted To Exceed $1 Trillion From 2017-2021","author":"Morgan","year":"2019"},{"key":"ref26","article-title":"Endpoint Detection and Response Solutions Market","year":"2019"},{"key":"ref27","article-title":"Worldwide Spending on Security Solutions Forecast to Reach $103.1 Billion in 2019, According to a New IDC Spending Guide","author":"Goepfert","year":"2019"},{"key":"ref28","article-title":"Global incident response threat report","author":"Black","year":"2018"},{"issue":"6","key":"ref29","doi-asserted-by":"crossref","DOI":"10.1016\/j.future.2010.07.005","article-title":"The Open Provenance Model Core Specification (v1. 1)","volume":"27","author":"Moreau","year":"2011","journal-title":"Future Generation Computer Systems"},{"key":"ref30","article-title":"Dependence-preserving data compaction for scalable forensic analysis","volume-title":"USENIX Security Symposium","author":"Hossain"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00026"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363217"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00064"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23349"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00096"},{"key":"ref36","article-title":"Sleuth: Real-time attack scenario reconstruction from cots audit data","volume-title":"USENIX Security Symposium","author":"Hossain"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24167"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24046"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939783"},{"key":"ref40","article-title":"Frappuccino: Fault-detection through runtime analysis of provenance","author":"Han","year":"2017","journal-title":"HotCloud"},{"key":"ref41","article-title":"Sigl: Securing software installations through deep graph learning","volume-title":"USENIX Security Symposium","author":"Han"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134015"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833671"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991122"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45474-8_4"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.21"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45474-8_6"},{"key":"ref48","article-title":"Endpoint Monitoring & Security","year":"2019"},{"key":"ref49","article-title":"Logz.io"},{"key":"ref50","article-title":"splunk"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/11760146_24"},{"key":"ref52","article-title":"BotHunter: Detecting malware infection through ids-driven dialog correlation","volume-title":"USENIX Security Symposium","author":"Gu"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24549"},{"key":"ref54","article-title":"Atlas: A sequence-based learning approach for attack investigation","volume-title":"USENIX Security Symposium","author":"Alsaheel"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23102"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23103"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833632"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833669"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-05171-6_6"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/BigDataSecurity-HPSC-IDS.2016.41"},{"key":"ref61","article-title":"Back-propagating system dependency impact for attack investigation","volume-title":"USENIX Security Symposium","author":"Fang"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427255"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24270"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24445"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE51399.2021.00024"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24329"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3127479.3129249"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23254"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243776"},{"key":"ref70","article-title":"Aiql: Enabling efficient attack investigation from system monitoring data","volume-title":"USENIX ATC","author":"Gao"},{"key":"ref71","article-title":"SAQL: A stream-based query system for real-time abnormal system behavior detection","volume-title":"USENIX Security Symposium","author":"Gao"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35170-9_6"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/1851476.1851503"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24065"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516731"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243763"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/3062180"},{"key":"ref78","article-title":"Kernel-supported cost-effective audit logging for causality tracking","volume-title":"USENIX ATC","author":"Ma"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978378"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-98379-0_27"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/2396761.2398511"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/2501986"},{"key":"ref83","article-title":"Compressing Provenance Graphs","author":"Xie","year":"2011","journal-title":"tapp11"},{"key":"ref84","article-title":"Seal: Storage-efficient causality analysis on enterprise logs with query-friendly compression","volume-title":"USENIX Security Symposium","author":"Fei"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23141"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427272"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945467"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134045"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-40593-3_1"},{"key":"ref90","article-title":"Decoupling provenance capture and analysis from execution","volume-title":"USENIX TaPP","author":"Stamatogiannakis"},{"key":"ref91","article-title":"System administration utilities"},{"key":"ref92","article-title":"About Event Tracing","author":"Bridge","year":"2018"},{"key":"ref93","article-title":"Provenance-aware Storage Systems","volume-title":"Proceedings of the Annual Conference on USENIX \u201906 Annual Technical Conference","author":"Muniswamy-Reddy"},{"key":"ref94","article-title":"Layering in Provenance Systems","author":"Muniswamy-Reddy","year":"2009","journal-title":"atc09"},{"key":"ref95","article-title":"Towards a Secure and Efficient System for End-to-End Provenance","volume-title":"USENIX TaPP","author":"McDaniel"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420989"},{"key":"ref97","article-title":"Trustworthy Whole-System Provenance for the Linux Kernel","volume-title":"USENIX Security Symposium","author":"Bates"},{"key":"ref98","article-title":"High accuracy attack provenance via binary-based execution partition","volume-title":"NDSS","author":"Lee"},{"key":"ref99","article-title":"Mpi: Multiple perspective attack investigation with semantic aware execution partitioning","volume-title":"USENIX Security Symposium","author":"Ma"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23306"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23319"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818039"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23057"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664264"},{"key":"ref105","article-title":"Quire: Lightweight provenance for smart phone operating systems","volume-title":"Proceedings of USENIX Security \u201911","author":"Dietz"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_4"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3052984"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23282"},{"key":"ref109","article-title":"Event Tracing"},{"key":"ref110","article-title":"DTrace on FreeBSD"},{"key":"ref111","article-title":"NIST special publication 800-53 (rev. 4), security controls and assessment procedures for federal information systems and organizations","year":"2013"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/SADFE.2009.12"},{"key":"ref113","volume-title":"The art of memory forensics: detecting malware and threats in windows, linux, and Mac memory","author":"Ligh","year":"2014"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.45"},{"key":"ref115","article-title":"Clarion: Sound and clear provenance tracking for microservice deployments","volume-title":"USENIX Security Symposium","author":"Chen"},{"key":"ref116","article-title":"Alastor: Reconstructing the provenance of serverless intrusions","volume-title":"USENIX Security Symposium","author":"Datta"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2016.12.004"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23350"},{"key":"ref119","article-title":"Towards Automated Collection of Application-Level Data Provenance","volume-title":"USENIX TaPP","author":"Tariq"},{"key":"ref120","article-title":"SPROV 2.0: A Highly-Confgurable Platform-Independent Library for Secure Provenance","volume-title":"ACM CCS","author":"Hasan"},{"key":"ref121","article-title":"A General-purpose Provenance Library","author":"Macko","year":"2012","journal-title":"tapp12"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1145\/2954679.2872395"},{"key":"ref123","article-title":"Android provenance: Diagnosing device disorders","volume-title":"USENIX TaPP","author":"Husted"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417862"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053034"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833745"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484551"},{"key":"ref128","article-title":"Take Only What You Need: Leveraging Mandatory Access Control Policy to Reduce Provenance Storage Costs","author":"Bates","year":"2015","journal-title":"tapp15"},{"key":"ref129","article-title":"About purging reports","year":"2019"},{"key":"ref130","article-title":"Evaluating Endpoint Products","year":"2018"},{"key":"ref131","first-page":"3023","article-title":"Elise: A storage efficient logging system powered by redundancy reduction and representation learning","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Ding"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2012.6297930"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/InfoSEEE.2014.6947828"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2013.6596060"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11698-3_2"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435389"},{"key":"ref137","article-title":"Cypher Query Language","year":"2021"},{"key":"ref138","article-title":"Choosing a Data Model and Query Language for Provenance","author":"Holland","year":"2008","journal-title":"ipaw08"},{"key":"ref139","article-title":"Neo4j","year":"2021"},{"key":"ref140","article-title":"Mica: A holistic approach to fast in-memory key-value storage","author":"Lim","year":"2014","journal-title":"NSDI"},{"key":"ref141","article-title":"Scaling memcache at facebook","volume-title":"10th USENIX Symposium on Networked Systems Design and Implementation (NSDI 13)","author":"Nishtala"},{"key":"ref142","article-title":"Redis","year":"2021"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.45"},{"key":"ref144","first-page":"02","article-title":"Anubis analyzing unknown binaries the automatic way","volume-title":"Virus bulletin conference","volume":"1","author":"Mandl"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664252"},{"key":"ref146","article-title":"Cuckoo Sandbox tool"},{"key":"ref147","first-page":"12","article-title":"Cxpinspector: Hypervisor-based, hardware-assisted system monitoring","volume-title":"Ruhr-Universitat Bochum, Tech. Rep","author":"Willems","year":"2013"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2001.924286"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2013.25"},{"issue":"1","key":"ref150","first-page":"351","article-title":"Effective and efficient malware detection at the end host","volume-title":"USENIX Security Symposium","volume":"4","author":"Kolbitsch"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866353"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85886-7_7"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2007.17"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2491300"},{"key":"ref155","article-title":"MITRE ATT&CK","year":"2019"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2017.64"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2016.02.005"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2867595"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2960353"},{"key":"ref160","article-title":"How Many Alerts is Too Many to Handle?","year":"2019"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1609\/aimag.v40i2.2850"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813650"},{"key":"ref163","article-title":"Back to the whiteboard: a principled approach for the assessment and design of memory forensic techniques","volume-title":"USENIX Security Symposium","author":"Pagani"},{"issue":"1","key":"ref164","first-page":"551","article-title":"Effective digital forensic analysis of the ntfs disk image","volume":"4","author":"Alazab","year":"2009","journal-title":"Ubiquitous Computing and Communication Journal"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1109\/SADFE.2009.12"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1145\/1113034.1113070"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1145\/1368506.1368519"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2021.301193"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516731"},{"key":"ref170","article-title":"How Symantec EDR purges data from the Symantec EDR database","year":"2022"},{"key":"ref171","article-title":"Darpa transparent computing. 2020. transparent computing engagement 3 data release","year":"2020"},{"key":"ref172","article-title":"Stanford network analysis package","author":"Leskovec","year":"2009"},{"key":"ref173","article-title":"Crowd Strike"},{"key":"ref174","article-title":"Sophos"},{"key":"ref175","article-title":"Comodo"},{"key":"ref176","article-title":"Hackers are increasingly destroying logs to hide attacks","author":"Cimpanu"},{"key":"ref177","article-title":"Last door log wiper","author":"Hales"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.28"},{"key":"ref179","article-title":"Efficient data structures for tamperevident logging","volume-title":"USENIX Security Symposium","author":"Crosby"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484551"}],"event":{"name":"2023 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2023,5,21]]},"end":{"date-parts":[[2023,5,25]]}},"container-title":["2023 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10179215\/10179280\/10179405.pdf?arnumber=10179405","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,20]],"date-time":"2024-07-20T05:14:25Z","timestamp":1721452465000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10179405\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5]]},"references-count":180,"URL":"https:\/\/doi.org\/10.1109\/sp46215.2023.10179405","relation":{},"subject":[],"published":{"date-parts":[[2023,5]]}}}