{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,21]],"date-time":"2026-02-21T09:58:24Z","timestamp":1771667904119,"version":"3.50.1"},"reference-count":45,"publisher":"IBM","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IBM J. Res. &amp; Dev."],"published-print":{"date-parts":[[2016,7]]},"DOI":"10.1147\/jrd.2016.2572462","type":"journal-article","created":{"date-parts":[[2016,7,27]],"date-time":"2016-07-27T14:48:29Z","timestamp":1469630909000},"page":"11:1-11:13","source":"Crossref","is-referenced-by-count":13,"title":["Security intelligence for cloud management infrastructures"],"prefix":"10.1147","volume":"60","author":[{"given":"S.","family":"Berger","sequence":"first","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"S.","family":"Garion","sequence":"additional","affiliation":[{"name":"IBM Research Division, Haifa, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Y.","family":"Moatti","sequence":"additional","affiliation":[{"name":"IBM Research Division, Haifa, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"D.","family":"Naor","sequence":"additional","affiliation":[{"name":"IBM Research Division, Haifa, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"D.","family":"Pendarakis","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"A.","family":"Shulman-Peleg","sequence":"additional","affiliation":[{"name":"Security Innovation Center of Citibank, Tel Aviv, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"J. R.","family":"Rao","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"E.","family":"Valdez","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Y.","family":"Weinsberg","sequence":"additional","affiliation":[{"name":"IBM Research Division, Haifa, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"3082","reference":[{"key":"ref39","first-page":"1","article-title":"Traffic anomaly detection using k-means clustering","author":"m\u00fcnz","year":"0","journal-title":"Proc Perform Rel Depend Eval Commun Netw Distrib Syst 4 GI\/ITG Workshop MMBnet"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2009.19"},{"key":"ref33","author":"eby","year":"2003","journal-title":"Python Web Server Gateway Interface"},{"key":"ref32","year":"0","journal-title":"Representational state transfer (rest)"},{"key":"ref31","year":"0","journal-title":"Apache Spark Cluster Computing"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2886107.2886110"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1147\/JRD.2011.2165675"},{"key":"ref36","year":"0","journal-title":"Fast Scalable Machine Learning Platform | Dato"},{"key":"ref35","year":"0","journal-title":"OpenStack Swift Documentation on Logs"},{"key":"ref34","year":"0","journal-title":"Apache Ranger"},{"key":"ref10","year":"0","journal-title":"Heat-OpenStack Orchestration"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/1368506.1368514"},{"key":"ref11","year":"0","journal-title":"Networking Service Developer Documentation (Neutron)"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1355734.1355746"},{"key":"ref13","year":"0","journal-title":"AWS CloudFormation"},{"key":"ref14","year":"0","journal-title":"Heat Orchestration Template (HOT) Guide"},{"key":"ref15","year":"0","journal-title":"Compute Service Developer Documentation (Nova)"},{"key":"ref16","year":"0","journal-title":"Telemetry Service Developer Documentation (Ceilometer)"},{"key":"ref17","year":"0","journal-title":"Traffic Steering Abstraction for Neutron"},{"key":"ref18","year":"0","journal-title":"Stack-check"},{"key":"ref19","year":"0","journal-title":"Monsaas"},{"key":"ref28","author":"barr","year":"0","journal-title":"AWS Official Blog"},{"key":"ref4","year":"2015","journal-title":"OpenStack"},{"key":"ref27","year":"0","journal-title":"Imperva Skyfence Cloud Gateway"},{"key":"ref3","article-title":"Cloud computing vulnerability incidents: A statistical overview","year":"2013"},{"key":"ref6","year":"0","journal-title":"IBM Security Network Protection"},{"key":"ref29","year":"0","journal-title":"Apache Hadoop"},{"key":"ref5","year":"2015"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2015.7346869"},{"key":"ref7","year":"0","journal-title":"IBM InfoSphere Guardium"},{"key":"ref2","article-title":"IBM x-force threat intelligence quarterly, 1Q 2015","year":"2015"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1147\/JRD.2016.2574138"},{"key":"ref1","year":"2014","journal-title":"Elevating Business in the Cloud Cloud Survey Report"},{"key":"ref20","year":"0","journal-title":"Monasca"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/FITS.2003.1264934"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23822-2_22"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1866835.1866853"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2663165.2663319"},{"key":"ref24","year":"0","journal-title":"AWS Trusted Advisor"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/SECON.2014.6950698"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2046660.2046672"},{"key":"ref44","first-page":"18","article-title":"Improving host security with system call policies","volume":"12","author":"provos","year":"0","journal-title":"Proc 12th Conf Usenix Security Symp"},{"key":"ref26","year":"0","journal-title":"CloudPassage"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2008.54"},{"key":"ref25","year":"0","journal-title":"Alert Logic Cloud Defender"}],"container-title":["IBM Journal of Research and Development"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5288520\/7523342\/07523359.pdf?arnumber=7523359","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,20]],"date-time":"2025-10-20T17:55:21Z","timestamp":1760982921000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7523359\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,7]]},"references-count":45,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1147\/jrd.2016.2572462","relation":{},"ISSN":["0018-8646","0018-8646"],"issn-type":[{"value":"0018-8646","type":"print"},{"value":"0018-8646","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,7]]}}}