<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01490726</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T02:43:02+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Hypervisor Event Logs as a Source of Consistent Virtual Machine Evidence for Forensic Cloud Investigations</title>
            <author role="aut">
              <persName>
                <forename type="first">Sean</forename>
                <surname>Thorpe</surname>
              </persName>
              <email type="md5">704494ee4c8922cc46e745848419945a</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="numeric">1004178</idno>
              <idno type="halauthorid" notation="string">1149635-1004178</idno>
              <affiliation ref="#struct-489054"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Indrajit</forename>
                <surname>Ray</surname>
              </persName>
              <idno type="halauthorid">519328-0</idno>
              <affiliation ref="#struct-97463"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Tyrone</forename>
                <surname>Grandison</surname>
              </persName>
              <email type="md5">82089e289875427b37b381fe0b7d906d</email>
              <email type="domain">proficiencylabs.com</email>
              <idno type="idhal" notation="numeric">1004179</idno>
              <idno type="halauthorid" notation="string">1149636-1004179</idno>
              <affiliation ref="#struct-489056"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Abbie</forename>
                <surname>Barbir</surname>
              </persName>
              <email type="md5">6bf13f583e69734784b27e45079cf80c</email>
              <email type="domain">bankofamerica.com</email>
              <idno type="idhal" notation="numeric">1004180</idno>
              <idno type="halauthorid" notation="string">1149637-1004180</idno>
              <affiliation ref="#struct-489057"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Robert</forename>
                <surname>France</surname>
              </persName>
              <email type="md5">b5664d6d5deba9dbdd944796efdf390e</email>
              <email type="domain">cs.colostate.edu</email>
              <idno type="idhal" notation="numeric">881340</idno>
              <idno type="halauthorid" notation="string">235384-881340</idno>
              <affiliation ref="#struct-97463"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-03-15 17:22:32</date>
              <date type="whenModified">2024-11-19 15:02:03</date>
              <date type="whenReleased">2017-03-16 09:24:24</date>
              <date type="whenProduced">2013-07-15</date>
              <date type="whenEndEmbargoed">2016-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01490726v1/document">
                <date notBefore="2016-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01490726v1/file/978-3-642-39256-6_7_Chapter.pdf" id="file-1490726-1555053">
                <date notBefore="2016-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-39256-6_7.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01490726</idno>
            <idno type="halUri">https://inria.hal.science/hal-01490726</idno>
            <idno type="halBibtex">thorpe:hal-01490726</idno>
            <idno type="halRefHtml">&lt;i&gt;27th Data and Applications Security and Privacy (DBSec)&lt;/i&gt;, Jul 2013, Newark, NJ, United States. pp.97-112, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-39256-6_7"&gt;&amp;#x27E8;10.1007/978-3-642-39256-6_7&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">27th Data and Applications Security and Privacy (DBSec), Jul 2013, Newark, NJ, United States. pp.97-112, &amp;#x27E8;10.1007/978-3-642-39256-6_7&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1490726-1555053"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-WG" corresp="IFIP">Working Groups</idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-WG11-3" corresp="IFIP-WG">WG 11.3: Data and Application Security and Privacy</idno>
            <idno type="stamp" n="IFIP-DBSEC" corresp="IFIP">DBSec: Data and Applications Security</idno>
            <idno type="stamp" n="IFIP-LNCS-7964" corresp="IFIP-LNCS">Data and Applications Security and Privacy XXVII</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 3: Cloud Computing</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Hypervisor Event Logs as a Source of Consistent Virtual Machine Evidence for Forensic Cloud Investigations</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Sean</forename>
                    <surname>Thorpe</surname>
                  </persName>
                  <email type="md5">704494ee4c8922cc46e745848419945a</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="numeric">1004178</idno>
                  <idno type="halauthorid" notation="string">1149635-1004178</idno>
                  <affiliation ref="#struct-489054"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Indrajit</forename>
                    <surname>Ray</surname>
                  </persName>
                  <idno type="halauthorid">519328-0</idno>
                  <affiliation ref="#struct-97463"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Tyrone</forename>
                    <surname>Grandison</surname>
                  </persName>
                  <email type="md5">82089e289875427b37b381fe0b7d906d</email>
                  <email type="domain">proficiencylabs.com</email>
                  <idno type="idhal" notation="numeric">1004179</idno>
                  <idno type="halauthorid" notation="string">1149636-1004179</idno>
                  <affiliation ref="#struct-489056"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Abbie</forename>
                    <surname>Barbir</surname>
                  </persName>
                  <email type="md5">6bf13f583e69734784b27e45079cf80c</email>
                  <email type="domain">bankofamerica.com</email>
                  <idno type="idhal" notation="numeric">1004180</idno>
                  <idno type="halauthorid" notation="string">1149637-1004180</idno>
                  <affiliation ref="#struct-489057"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Robert</forename>
                    <surname>France</surname>
                  </persName>
                  <email type="md5">b5664d6d5deba9dbdd944796efdf390e</email>
                  <email type="domain">cs.colostate.edu</email>
                  <idno type="idhal" notation="numeric">881340</idno>
                  <idno type="halauthorid" notation="string">235384-881340</idno>
                  <affiliation ref="#struct-97463"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer Science</title>
                <meeting>
                  <title>27th Data and Applications Security and Privacy (DBSec)</title>
                  <date type="start">2013-07-15</date>
                  <date type="end">2013-07-17</date>
                  <settlement>Newark, NJ</settlement>
                  <country key="US">United States</country>
                </meeting>
                <editor>Lingyu Wang</editor>
                <editor>Basit Shafiq</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Data and Applications Security and Privacy XXVII</biblScope>
                  <biblScope unit="volume">LNCS-7964</biblScope>
                  <biblScope unit="pp">97-112</biblScope>
                  <date type="datePub">2013</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-39256-6_7</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Cloud Computing is an emerging model of computing where users can leverage the computing infrastructure as a service stack or commodity. The security and privacy concerns of this infrastructure arising from the large co-location of tenants are, however, significant and pose considerable challenges in its widespread deployment. The current work addresses one aspect of the security problem by facilitating forensic investigations to determine if these virtual tenant spaces were maliciously violated by other tenants. It presents the design, application and limitations of a software prototype called the Virtual Machine (VM) Log Auditor that helps in detecting inconsistencies within the activity timelines for a VM history. A discussion on modeling a consistent approach is also provided.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
              <org type="consortium">WG 11.3</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-489054" status="VALID">
          <orgName>University of Technology [Kingston, Jamaica]</orgName>
          <date type="start">2017-03-17</date>
          <desc>
            <address>
              <country key="JM"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-97463" status="VALID">
          <idno type="ROR">https://ror.org/03k1gpj17</idno>
          <orgName>Colorado State University [Fort Collins]</orgName>
          <orgName type="acronym">CSU</orgName>
          <desc>
            <address>
              <addrLine>Colorado State University, Fort Collins, Colorado 80523 USA</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">http://www.colostate.edu/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-489056" status="VALID">
          <orgName>Proficiency Labs International</orgName>
          <date type="start">2017-03-17</date>
          <desc>
            <address>
              <country key="US"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-489057" status="VALID">
          <orgName>Bank of America</orgName>
          <date type="start">2017-03-17</date>
          <desc>
            <address>
              <country key="US"/>
            </address>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>