{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T09:58:20Z","timestamp":1740131900376,"version":"3.37.3"},"reference-count":33,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["60970008"],"award-info":[{"award-number":["60970008"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput."],"published-print":{"date-parts":[[2016]]},"DOI":"10.1109\/tc.2016.2560809","type":"journal-article","created":{"date-parts":[[2016,4,29]],"date-time":"2016-04-29T18:45:33Z","timestamp":1461955533000},"page":"1-1","source":"Crossref","is-referenced-by-count":6,"title":["CloudMon: Monitoring Virtual Machines in Clouds"],"prefix":"10.1109","author":[{"given":"Chuliang","family":"Weng","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qian","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kenli","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Deqing","family":"Zou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/MM.2011.35"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2014.6848144"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS.2010.39"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2786763.2694394"},{"key":"ref10","article-title":"Mystifying the debugger for ultimate stealthness","volume":"x0c","author":"halfdead","year":"2008","journal-title":"Phrack"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1368506.1368515"},{"journal-title":"Minebench","year":"0","key":"ref12"},{"journal-title":"SPEC","year":"0","key":"ref13"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1152154.1152176"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA.1995.524546"},{"journal-title":"HTTPERF","year":"0","key":"ref16"},{"journal-title":"Autobench","year":"0","key":"ref17"},{"key":"ref18","first-page":"191","article-title":"A virtual machine introspection based architecture for intrusion detection","author":"garfinkel","year":"2003","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2576195.2576196"},{"key":"ref28","first-page":"85","article-title":"Hypershell: A practical hypervisor layer guest OS shell for automated in-VM management","author":"fu","year":"2014","journal-title":"Proc Usenix Conf"},{"journal-title":"The chkrootkit tool","year":"0","key":"ref4"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.24"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1244002.1244070"},{"journal-title":"Trusted Boot","year":"0","key":"ref6"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2014.59"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950398"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.10"},{"key":"ref7","article-title":"Shadow Walker—raising the bar for windows rootkit detection","author":"sparks","year":"2005","journal-title":"Phrack 63"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.46"},{"key":"ref9","first-page":"1","article-title":"Predicting the future of stealth attacks","author":"kapoor","year":"2011","journal-title":"Proc Virus Bull Conf"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653687"},{"journal-title":"LibVMI","year":"0","key":"ref20"},{"key":"ref22","first-page":"803","article-title":"Virtual machine introspection based rootkit detection in virtualized environments","volume":"11","author":"hwang","year":"2014","journal-title":"Life Sci"},{"key":"ref21","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1145\/1519138.1519142","article-title":"lbmon: Monitoring VMM-bypass capable infiniband devices using memory introspection","author":"ranadive","year":"2009","journal-title":"Proc Workshop System-Level Virtualization for High Performance Computing"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653720"},{"key":"ref23","first-page":"1","article-title":"Exploiting the rootkit paradox with windows memory analysis","volume":"5","author":"d","year":"2006","journal-title":"Int l J Digital Evidence"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.143"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.53"}],"container-title":["IEEE Transactions on Computers"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/12\/4358213\/07463056.pdf?arnumber=7463056","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,19]],"date-time":"2022-06-19T07:44:46Z","timestamp":1655624686000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7463056\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"references-count":33,"URL":"https:\/\/doi.org\/10.1109\/tc.2016.2560809","relation":{},"ISSN":["0018-9340"],"issn-type":[{"type":"print","value":"0018-9340"}],"subject":[],"published":{"date-parts":[[2016]]}}}