{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T08:25:21Z","timestamp":1771230321012,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,14]]},"DOI":"10.1145\/3719384.3719465","type":"proceedings-article","created":{"date-parts":[[2025,7,9]],"date-time":"2025-07-09T14:44:03Z","timestamp":1752072243000},"page":"555-564","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Malware Detection in Cloud Native Environments"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-7820-3927","authenticated-orcid":false,"given":"Brian S.","family":"Mitchell","sequence":"first","affiliation":[{"name":"College of Computing and Informatics, Drexel University, USA, Philadelphia, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-7404-1617","authenticated-orcid":false,"given":"Ansh","family":"Chandnani","sequence":"additional","affiliation":[{"name":"College of Computing and Informatics, Drexel University, USA, Philadelphia, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4391-0269","authenticated-orcid":false,"given":"John","family":"Carter","sequence":"additional","affiliation":[{"name":"College of Computing and Informatics, Drexel University, USA, Philadelphia, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-9148-4384","authenticated-orcid":false,"given":"Danai","family":"Roumelioti","sequence":"additional","affiliation":[{"name":"College of Computing and Informatics, Drexel University, USA, Philadelphia, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6354-4281","authenticated-orcid":false,"given":"Spiros","family":"Mancoridis","sequence":"additional","affiliation":[{"name":"College of Computing and Informatics, Drexel University, USA, Philadelphia, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,7,9]]},"reference":[{"key":"e_1_3_3_2_2_2","doi-asserted-by":"publisher","unstructured":"\u00d6mer\u00a0Aslan Aslan and Refik Samet. 2020. A Comprehensive Review on Malware Detection Approaches. IEEE Access 8 (2020) 6249\u20136271. 10.1109\/ACCESS.2019.2963724","DOI":"10.1109\/ACCESS.2019.2963724"},{"key":"e_1_3_3_2_3_2","volume-title":"AWS Lambda: Run code without thinking about servers or clusters","year":"2023","unstructured":"AWS. 2023. AWS Lambda: Run code without thinking about servers or clusters. Retrieved January 3, 2023 from https:\/\/aws.amazon.com\/lambda\/"},{"key":"e_1_3_3_2_4_2","doi-asserted-by":"publisher","unstructured":"Andrew\u00a0P. Bradley. 1997. The use of the area under the ROC curve in the evaluation of machine learning algorithms. Pattern Recognition 30 7 (1997) 1145\u20131159. 10.1016\/S0031-3203(96)00142-2","DOI":"10.1016\/S0031-3203(96)00142-2"},{"key":"e_1_3_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1145\/3477314.3508377"},{"key":"e_1_3_3_2_6_2","first-page":"1","volume-title":"NOMS 2020-2020 IEEE\/IFIP Network Operations and Management Symposium","author":"Cassagnes Cyril","year":"2020","unstructured":"Cyril Cassagnes, Lucian Trestioreanu, Clement Joly, and Radu State. 2020. The rise of eBPF for non-intrusive performance monitoring. In NOMS 2020-2020 IEEE\/IFIP Network Operations and Management Symposium. IEEE, 1\u20137."},{"key":"e_1_3_3_2_7_2","volume-title":"eBPF-based Networking, Observability, Security","year":"2023","unstructured":"Cilium. 2023. eBPF-based Networking, Observability, Security. Retrieved May 10, 2023 from https:\/\/cilium.io\/"},{"key":"e_1_3_3_2_8_2","volume-title":"Docker Compose Overview","author":"Compose Docker","year":"2023","unstructured":"Docker Compose. 2023. Docker Compose Overview. Retrieved May 11, 2023 from https:\/\/docs.docker.com\/compose\/"},{"key":"e_1_3_3_2_9_2","volume-title":"An industry-standard container runtime with an emphasis on simplicity, robustness and portability","year":"2023","unstructured":"containerd. 2023. An industry-standard container runtime with an emphasis on simplicity, robustness and portability. Retrieved June 1, 2023 from https:\/\/containerd.io\/"},{"key":"e_1_3_3_2_10_2","volume-title":"Lightweight Container Runtime for Kubernetes","year":"2023","unstructured":"CRI-O. 2023. Lightweight Container Runtime for Kubernetes. Retrieved June 3, 2023 from https:\/\/cri-o.io\/"},{"key":"e_1_3_3_2_11_2","volume-title":"What are the Types of Malware?","year":"2024","unstructured":"Crowdstrike. 2024. What are the Types of Malware?Retrieved April 2, 2024 from https:\/\/www.crowdstrike.com\/cybersecurity-101\/malware\/types-of-malware\/"},{"key":"e_1_3_3_2_12_2","doi-asserted-by":"publisher","unstructured":"L. Dhanya R. Chitra and A.M. Anusha Bamini. 2022. Performance evaluation of various ensemble classifiers for malware detection. Materials Today: Proceedings 62 (2022) 4973\u20134979. 10.1016\/j.matpr.2022.03.696 International Conference on Innovative Technology for Sustainable Development.","DOI":"10.1016\/j.matpr.2022.03.696"},{"key":"e_1_3_3_2_13_2","volume-title":"Use containers to Build, Share and Run your applications","year":"2023","unstructured":"Docker. 2023. Use containers to Build, Share and Run your applications. Retrieved January 3, 2023 from https:\/\/www.docker.com\/resources\/what-container"},{"key":"e_1_3_3_2_14_2","volume-title":"DockerHub: Build and Ship any Application Anywhere","year":"2023","unstructured":"DockerHub. 2023. DockerHub: Build and Ship any Application Anywhere. Retrieved June 5, 2023 from hhttps:\/\/hub.docker.com\/"},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICADEIS56544.2022.10037384"},{"key":"e_1_3_3_2_16_2","first-page":"2","volume-title":"Proceedings of the 17th SSTIC Symposium sur la S\u00e9curit\u00e9 des Technologies de l\u2019Information et de la Communication","author":"Fournier Guillaume","year":"2021","unstructured":"Guillaume Fournier, Sylvain Afchain, and Sylvain Baubeau. 2021. Runtime security monitoring with ebpf. In Proceedings of the 17th SSTIC Symposium sur la S\u00e9curit\u00e9 des Technologies de l\u2019Information et de la Communication. 2\u20134."},{"key":"e_1_3_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/3314221.3314590"},{"key":"e_1_3_3_2_18_2","doi-asserted-by":"publisher","unstructured":"Deepak Gupta and Rinkle Rani. 2020. Improving malware detection using big data and ensemble learning. Computers & Electrical Engineering 86 (2020) 106729. 10.1016\/j.compeleceng.2020.106729","DOI":"10.1016\/j.compeleceng.2020.106729"},{"key":"e_1_3_3_2_19_2","volume-title":"Che New Fundamentals of Cloud and The Path Ahead","year":"2021","unstructured":"IDC. 2021. Che New Fundamentals of Cloud and The Path Ahead. Retrieved January 3, 2023 from https:\/\/blogs.idc.com\/2021\/11\/29\/the-new-fundamentals-of-cloud-and-the-path-ahead"},{"key":"e_1_3_3_2_20_2","volume-title":"Top 10 Cloud Security Incidents in 2022","year":"2023","unstructured":"Immuniweb. 2023. Top 10 Cloud Security Incidents in 2022. Retrieved May 6, 2023 from https:\/\/www.immuniweb.com\/blog\/top-10-cloud-security-incidents-in-2022.html"},{"key":"e_1_3_3_2_21_2","volume-title":"Simplify observability, traffic management, security, and policy with the leading service mesh","year":"2023","unstructured":"Istio. 2023. Simplify observability, traffic management, security, and policy with the leading service mesh. Retrieved May 10, 2023 from https:\/\/istio.io\/"},{"key":"e_1_3_3_2_22_2","volume-title":"Kubernetes (k8s)","year":"2023","unstructured":"Kubernetes. 2023. Kubernetes (k8s). Retrieved January 3, 2023 from https:\/\/kubernetes.io"},{"key":"e_1_3_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1109\/EISIC.2011.77"},{"key":"e_1_3_3_2_24_2","volume-title":"The Open Container Initiative","author":"Foundation Linux","year":"2023","unstructured":"Linux Foundation. 2023. The Open Container Initiative. Retrieved September 3, 2023 from https:\/\/opencontainers.org\/"},{"key":"e_1_3_3_2_25_2","volume-title":"Locust: An open source testing tool","year":"2023","unstructured":"Locust. 2023. Locust: An open source testing tool. Retrieved May 11, 2023 from https:\/\/locust.io\/"},{"key":"e_1_3_3_2_26_2","volume-title":"Lua: The programming Language","year":"2023","unstructured":"Lua. 2023. Lua: The programming Language. Retrieved June 1, 2023 from https:\/\/www.lua.org\/"},{"key":"e_1_3_3_2_27_2","doi-asserted-by":"crossref","unstructured":"Sebastiano Miano Fulvio Risso Mauricio\u00a0V\u00e1squez Bernal Matteo Bertrone and Yunsong Lu. 2021. A framework for eBPF-based network functions in an era of microservices. IEEE Transactions on Network and Service Management 18 1 (2021) 133\u2013151.","DOI":"10.1109\/TNSM.2021.3055676"},{"key":"e_1_3_3_2_28_2","volume-title":"phpMailer Remote Code Execution","year":"2016","unstructured":"MITRE. 2016. phpMailer Remote Code Execution. Retrieved May 13, 2023 from https:\/\/www.cve.org\/CVERecord?id=CVE-2016-10033"},{"key":"e_1_3_3_2_29_2","volume-title":"SambaCry Remote Code Execution","year":"2020","unstructured":"MITRE. 2020. SambaCry Remote Code Execution. Retrieved May 13, 2023 from https:\/\/www.cve.org\/CVERecord?id=CVE-2020-1938"},{"key":"e_1_3_3_2_30_2","volume-title":"Log4J Remote Code Execution","year":"2021","unstructured":"MITRE. 2021. Log4J Remote Code Execution. Retrieved 05.13.2023 from https:\/\/www.cve.org\/CVERecord?id=CVE-2021-44228"},{"key":"e_1_3_3_2_31_2","volume-title":"Redis Lua Sandbox Escape","year":"2022","unstructured":"MITRE. 2022. Redis Lua Sandbox Escape. Retrieved May 12, 2023 from https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-0543"},{"key":"e_1_3_3_2_32_2","volume-title":"NVD: Vulnerability Metrics","year":"2015","unstructured":"NVD. 2015. NVD: Vulnerability Metrics. Retrieved May 13, 2023 from https:\/\/nvd.nist.gov\/vuln-metrics\/cvss#"},{"key":"e_1_3_3_2_33_2","unstructured":"F. Pedregosa G. Varoquaux A. Gramfort V. Michel B. Thirion O. Grisel M. Blondel P. Prettenhofer R. Weiss V. Dubourg J. Vanderplas A. Passos D. Cournapeau M. Brucher M. Perrot and E. Duchesnay. 2011. Scikit-learn: Machine Learning in Python. Journal of Machine Learning Research 12 (2011) 2825\u20132830."},{"key":"e_1_3_3_2_34_2","volume-title":"Redis: Open Source In-Memory Data Store","year":"2023","unstructured":"Redis. 2023. Redis: Open Source In-Memory Data Store. Retrieved May 12, 2023 from https:\/\/redis.io\/"},{"key":"e_1_3_3_2_35_2","volume-title":"Simplifying Cloud Networking and Security","year":"2023","unstructured":"Solo.io. 2023. Simplifying Cloud Networking and Security. Retrieved May 10, 2023 from https:\/\/solo.io\/"},{"key":"e_1_3_3_2_36_2","volume-title":"Annual number of malware attacks worldwide from 2015 to 2022","year":"2023","unstructured":"statista. 2023. Annual number of malware attacks worldwide from 2015 to 2022. Retrieved April 2, 2024 from https:\/\/www.statista.com\/statistics\/873097\/malware-attacks-per-year-worldwide\/"},{"key":"e_1_3_3_2_37_2","volume-title":"Snyk Container: Keep Your Containers Secure","year":"2023","unstructured":"SynkSecurity. 2023. Snyk Container: Keep Your Containers Secure. Retrieved May 8, 2023 from https:\/\/snyk.io"},{"key":"e_1_3_3_2_38_2","doi-asserted-by":"publisher","DOI":"10.5555\/3295222.3295349"},{"key":"e_1_3_3_2_39_2","volume-title":"Vulhub: An open source collection of pre-built vulnerable docker environments","year":"2023","unstructured":"Vulhub. 2023. Vulhub: An open source collection of pre-built vulnerable docker environments. Retrieved June 5, 2023 from https:\/\/github.com\/vulhub\/vulhub"},{"key":"e_1_3_3_2_40_2","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1109\/CloudIntelligence52565.2021.00014","volume-title":"2021 IEEE\/ACM International Workshop on Cloud Intelligence (CloudIntelligence)","author":"Weng Tianjun","year":"2021","unstructured":"Tianjun Weng, Wanqi Yang, Guangba Yu, Pengfei Chen, Jieqi Cui, and Chuanfu Zhang. 2021. Kmon: An in-kernel transparent monitoring system for microservice systems with ebpf. In 2021 IEEE\/ACM International Workshop on Cloud Intelligence (CloudIntelligence). IEEE, 25\u201330."},{"key":"e_1_3_3_2_41_2","volume-title":"WordPress Content Management System","year":"2023","unstructured":"WordPress. 2023. WordPress Content Management System. Retrieved May 13, 2023 from https:\/\/wordpress.com\/"},{"key":"e_1_3_3_2_42_2","doi-asserted-by":"publisher","unstructured":"Umme Zahoora Muttukrishnan Rajarajan Zahoqing Pan and Asifullah Khan. 2022. Zero-Day Ransomware Attack Detection Using Deep Contractive Autoencoder and Voting Based Ensemble Classifier. Applied Intelligence 52 12 (sep 2022) 13941\u201313960. 10.1007\/s10489-022-03244-6","DOI":"10.1007\/s10489-022-03244-6"}],"event":{"name":"AICCC 2024: 2024 the 7th Artificial Intelligence and Cloud Computing Conference","location":"Tokyo Japan","acronym":"AICCC 2024"},"container-title":["Proceedings of the 2024 7th Artificial Intelligence and Cloud Computing Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3719384.3719465","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,9]],"date-time":"2025-07-09T14:47:24Z","timestamp":1752072444000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3719384.3719465"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,14]]},"references-count":41,"alternative-id":["10.1145\/3719384.3719465","10.1145\/3719384"],"URL":"https:\/\/doi.org\/10.1145\/3719384.3719465","relation":{},"subject":[],"published":{"date-parts":[[2024,12,14]]},"assertion":[{"value":"2025-07-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}