{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,25]],"date-time":"2026-10-25T16:05:11Z","timestamp":1792944311434,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":27,"publisher":"ACM","license":[{"start":{"date-parts":[[2007,6,20]],"date-time":"2007-06-20T00:00:00Z","timestamp":1182297600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2007,6,20]]},"DOI":"10.1145\/1266840.1266852","type":"proceedings-article","created":{"date-parts":[[2007,9,25]],"date-time":"2007-09-25T19:21:05Z","timestamp":1190748065000},"page":"71-80","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":43,"title":["Towards a VMM-based usage control framework for OS kernel integrity protection"],"prefix":"10.1145","author":[{"given":"Min","family":"Xu","sequence":"first","affiliation":[{"name":"George Mason University, Fairfax, Virginia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xuxian","family":"Jiang","sequence":"additional","affiliation":[{"name":"George Mason University, Fairfax, Virginia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ravi","family":"Sandhu","sequence":"additional","affiliation":[{"name":"Univ. of Texas at San Antonio"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinwen","family":"Zhang","sequence":"additional","affiliation":[{"name":"Samsung Information Systems America, San Jose, California"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2007,6,20]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Bochs ia-32 emulator project http:\/\/bochs.sourceforge.net.  Bochs ia-32 emulator project http:\/\/bochs.sourceforge.net."},{"key":"e_1_3_2_1_2_1","unstructured":"VMware. http:\/\/www.vmware.com\/.  VMware. http:\/\/www.vmware.com\/."},{"key":"e_1_3_2_1_3_1","volume-title":"Phrack Magazine","author":"Linux","year":"2001","unstructured":"Linux on-the-fly kernel patching without lkm . Phrack Magazine , 2001 . Linux on-the-fly kernel patching without lkm. Phrack Magazine, 2001."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/11853886_5"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945462"},{"key":"e_1_3_2_1_6_1","volume-title":"Bedford","author":"Bell D. E.","year":"1975","unstructured":"D. E. Bell and L. J. LaPadula . Secure computer systems: Mathematical foundations and model. Mitre Corp. Report No.M74-244 , Bedford , Massachusetts , 1975 . D. E. Bell and L. J. LaPadula. Secure computer systems: Mathematical foundations and model. Mitre Corp. Report No.M74-244, Bedford, Massachusetts, 1975."},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the 8th National Computer Security Conference","author":"Boebert W. E.","year":"1985","unstructured":"W. E. Boebert and R. Y. Kain . A practical alternative to hierarchical integrity policies . In Proceedings of the 8th National Computer Security Conference , 1985 . W. E. Boebert and R. Y. Kain. A practical alternative to hierarchical integrity policies. In Proceedings of the 8th National Computer Security Conference, 1985."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/646962.712113"},{"key":"e_1_3_2_1_10_1","volume-title":"December","author":"Department of Defense National Computer Security Center.","year":"1985","unstructured":"Department of Defense National Computer Security Center. Department of Defense Trusted Computer Systems Evaluation Criteria , December 1985 . DoD 5200.28-STD. Department of Defense National Computer Security Center. Department of Defense Trusted Computer Systems Evaluation Criteria, December 1985. DoD 5200.28-STD."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/882494.884406"},{"key":"e_1_3_2_1_12_1","volume-title":"Network and Distributed System Security Symposium, SanDiego","author":"Garfinkel Tal","year":"2003","unstructured":"Tal Garfinkel and Mendel Rosenblum . A virtual machine introspection based architecture of intrusion detection . In Network and Distributed System Security Symposium, SanDiego , California , 2003 . Tal Garfinkel and Mendel Rosenblum. A virtual machine introspection based architecture of intrusion detection. In Network and Distributed System Security Symposium, SanDiego, California, 2003."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095820"},{"key":"e_1_3_2_1_14_1","volume-title":"the 13th USENIX Security Symposium","author":"Petrono Nick L.","year":"2004","unstructured":"Nick L. Petrono Jr ., Timothy Fraser , Jesus Molina , and William A. Arbaugh . Copilot - a coprocessor-based kernel runtime integrity monitor . In the 13th USENIX Security Symposium , San Diego, California , 2004 . Nick L. Petrono Jr., Timothy Fraser, Jesus Molina, and William A. Arbaugh. Copilot - a coprocessor-based kernel runtime integrity monitor. In the 13th USENIX Security Symposium, San Diego, California, 2004."},{"key":"e_1_3_2_1_15_1","volume-title":"Proc. of AAAI","author":"Lobo J.","year":"1999","unstructured":"J. Lobo , R. Bhatia , and S. Naqvi . A policy description language . In Proc. of AAAI , Orlando, FL , July 1999 . J. Lobo, R. Bhatia, and S. Naqvi. A policy description language. In Proc. of AAAI, Orlando, FL, July 1999."},{"key":"e_1_3_2_1_16_1","volume-title":"USENIX Annual Technical Conference, June 25-30","author":"Loscocco P.","year":"2001","unstructured":"P. Loscocco and S. Smalley . Integrating flexible support for security policies into the linux operating system . In USENIX Annual Technical Conference, June 25-30 , Boston, Massachusetts , 2001 . P. Loscocco and S. Smalley. Integrating flexible support for security policies into the linux operating system. In USENIX Annual Technical Conference, June 25-30, Boston, Massachusetts, 2001."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/984334.984339"},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings for the 15th USENIX Security Symposium","author":"Petroni N. L.","year":"2006","unstructured":"N. L. Petroni , T. Fraser , A. Walters , and W. A. Arbaugh . An Architecture for Specification-Based Detection of Semantic Integrity Violations in Kernel Dynamic Data . In Proceedings for the 15th USENIX Security Symposium , Vancouver, B. C., Canada , July 2006 . N. L. Petroni, T. Fraser, A. Walters, and W. A. Arbaugh. An Architecture for Specification-Based Detection of Semantic Integrity Violations in Kernel Dynamic Data. In Proceedings for the 15th USENIX Security Symposium, Vancouver, B. C., Canada, July 2006."},{"key":"e_1_3_2_1_19_1","volume-title":"Improving host security with system call policies. Technical report","author":"Provos Niels","year":"2002","unstructured":"Niels Provos . Improving host security with system call policies. Technical report , Center for Information Technology Integration , University of Michigan, 2002 . Niels Provos. Improving host security with system call policies. Technical report, Center for Information Technology Integration, University of Michigan, 2002."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.13"},{"key":"e_1_3_2_1_21_1","volume-title":"Linux on-the-fly kernel patching without LKM. Phrack, 11(58): article 7 of","year":"2001","unstructured":"sd. Linux on-the-fly kernel patching without LKM. Phrack, 11(58): article 7 of 15, December 2001 . sd. Linux on-the-fly kernel patching without LKM. Phrack, 11(58): article 7 of 15, December 2001."},{"key":"e_1_3_2_1_22_1","first-page":"123","volume-title":"Proceedings of the Eighth USENIX Security Symposium","author":"Spencer R.","year":"1999","unstructured":"R. Spencer , S. Smalley , P. Loscocco , M. Hibler , D. Anderson , and J. Lepreau . The flask security architecture: System support for diverse security policies . In Proceedings of the Eighth USENIX Security Symposium , pages 123 -- 139 , 1999 . R. Spencer, S. Smalley, P. Loscocco, M. Hibler, D. Anderson, and J. Lepreau. The flask security architecture: System support for diverse security policies. In Proceedings of the Eighth USENIX Security Symposium, pages 123--139, 1999."},{"key":"e_1_3_2_1_23_1","unstructured":"Stealth. adore. http:\/\/spider.scorpions.net\/stealth.  Stealth. adore. http:\/\/spider.scorpions.net\/stealth."},{"key":"e_1_3_2_1_24_1","unstructured":"Stealth. adore-ng. http:\/\/stealth.7350.org\/rootkits\/.  Stealth. adore-ng. http:\/\/stealth.7350.org\/rootkits\/."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1047915.1047919"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1108906.1108908"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/990036.990038"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1133373.1133423"}],"event":{"name":"SACMAT07: 12th ACM Symposium on Access Control Models and Technologies","location":"Sophia Antipolis France","acronym":"SACMAT07","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 12th ACM symposium on Access control models and technologies"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1266840.1266852","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1266840.1266852","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T20:22:25Z","timestamp":1750278145000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1266840.1266852"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,6,20]]},"references-count":27,"alternative-id":["10.1145\/1266840.1266852","10.1145\/1266840"],"URL":"https:\/\/doi.org\/10.1145\/1266840.1266852","relation":{},"subject":[],"published":{"date-parts":[[2007,6,20]]},"assertion":[{"value":"2007-06-20","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}