Context: In recent years, the valuable knowledge that can be retrieved from petabyte scale
datasets–known as Big Data–led to the development of solutions to process information …

Endpoint Detection and Response (EDR) tools provide visibility into sophisticated intrusions
by matching system events against known adversarial behaviors. However, current solutions …

Provenance refers to any information describing the production process of an end product,
which can be anything from a piece of digital data to a physical object. While this survey …

Big Data technology has discarded traditional data modeling approaches as no longer
applicable to distributed data processing. It is, however, largely recognized that Big Data …

Data Provenance is information about the origin and creation process of data. Such
information is useful for debugging data and transformations, auditing, evaluating the quality …

In this paper, we propose a new approach to diagnosing problems in complex distributed
systems. Our approach is based on the insight that many of the trickiest problems are …

When debugging a distributed system, it is sometimes necessary to explain the absence of
an event-for instance, why a certain route is not available, or why a certain packet did not …

When diagnosing performance anomalies, it is often useful to reason about why a packet
experienced the queuing that it did. To that end, we observe that queuing is both a result of …

When diagnosing a problem in a distributed system, it is sometimes necessary to explain the
timing of an event—for instance, why a response has been delayed, or why the network …

Recently, the extraordinary growth in the World Wide Web has been sweeping through
business and industry. Many companies have developed or integrated their mission-critical …