Catégorie: Conférence
Auteurs: Paul Houssel, Olivier Levillain et Nicolas Dejon
Date: juillet 2026

Provenance aims at capturing the origins, transformations, and interactions of system objects, for security and forensic applications. Existing provenance capture approaches were primarily designed for whole-host environments and face significant challenges in the production environments. In this paper, we first analyze the different core kernel telemetry approaches underlying current provenance systems, enriched with micro-benchmarks to assess overhead and the methods used to achieve granularity.

Présenté lors de la conférence COMPAS à Anglet, France en juillet 2026

BibTeX Site de la conférence