[an error occurred while processing this directive]<meta name="keywords" content="Department of Computer Science, publications, by type, Thomas Pasquier"></meta><meta name="description" content="Publications, by type, Department of Computer Science, Oxford, Thomas Pasquier"></meta><title>Department of Computer Science, University of Oxford: Thomas Pasquier : Publications
</title><style type="text/css">
			  .btn-toolbar::after, .btn-toolbar::before
			  {
			    content: " ";
			    display: table;
			  }

			
			.btn-toolbar
			{
			    margin-bottom: 2em;
			}

			  .btn-toolbar::after, .btn-group::after
			  {
			    clear: both;
			  }


			.btn-toolbar .btn, .btn-toolbar .btn-group
			  {
			    float: left;
			}
			
			.btn-group
			  {
			    display: inline-block;
			    position: relative;
			    vertical-align: middle;
			}

			  .btn-group > .btn:first-child:not(:last-child)
			  {
			    border-bottom-right-radius: 0;
			    border-top-right-radius: 0;
			}
			
			.btn-group > .btn:first-child
			  {
			    margin-left: 0;
			}

			.btn-group > .btn
			  {
			    float: left;
			    position: relative;
			}

			  .btn-group > .btn:not(:first-child):not(:last-child)
			  {
			    border-radius: 0;
			}
			
			  .btn-group > .btn:last-child:not(:first-child)
			  {
			    border-bottom-left-radius: 0;
			    border-top-left-radius: 0;
			}
			
			.btn-group .btn + .btn, .btn-group .btn + .btn-group, .btn-group .btn-group + .btn, .btn-group .btn-group + .btn-group
			  {
			    margin-left: -2px;
			}
			</style>[an error occurred while processing this directive]<div class="content-width"><ol class="breadcrumb text-uppercase"><li><a href="/">Home</a></li><li><a href="/aboutus/">About Us</a></li><li><a href="/people/">People</a></li><li><a href="/people/faculty.html">Faculty</a></li><li><a href="/people/Thomas.Pasquier"><span itemprop="name">Thomas Pasquier</span></a></li><li class="active">Publications</li></ol></div><!-- MOBILE NAVIGATION --><div class="content-width space-below mobile-menu-placeholder visible-xs visible-sm"></div><!-- COLUMNS --><div class="container-fluid content-width"><div class="row"><div class="col-xs-12 col-md-9 col-md-push-3" id="maincontent"><!-- CONTENT (Column 2) --><div class="page-title"><h1>Thomas Pasquier : Publications
</h1></div><div role="toolbar" class="btn-toolbar"><div class="btn-group"><a href="/people/publications/date/Thomas.Pasquier.html" aria-hidden="true" type="button" class="btn btn-default"><span class="glyphicon glyphicon-sort-by-attributes"></span> By date</a><a href="/people/publications/title/Thomas.Pasquier.html" aria-hidden="true" type="button" class="btn btn-default"><span class="glyphicon glyphicon-sort-by-attributes"></span> By title</a><a href="/people/publications/type/Thomas.Pasquier.html" aria-hidden="true" type="button" class="btn btn-oxford-blue"><span class="glyphicon glyphicon-sort-by-attributes"></span> By type</a><a href="/people/publications/bibtex/Thomas.Pasquier.html" aria-hidden="true" type="button" class="btn btn-default"><span class="glyphicon glyphicon-file"></span> BibTex</a></div></div><p></p><h2>
      Conference papers
      </h2><ul class="list-unbulleted list-unbulleted-spaced"><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[1] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            PIDSMaker: Building and Evaluating Provenance&#x2212;based Intrusion Detection Systems </strong> </p>
	    <p class="publicationAuthors"> <em> Tristan Bilot&#x201a; Baoxiang Jiang and Thomas Pasquier  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Conference on Knowledge Discovery and Data Mining (KDD'26)</em>.
        ACM.
        2026.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication17193-abstract.html">
			Details <span class="sr-only" > about <em> PIDSMaker: Building and Evaluating Provenance&#x2212;based Intrusion Detection Systems  </em></span> </a> |
			<a href="/publications/publication17193.bib">
			BibTeX  <span class="sr-only" > data for <em> PIDSMaker: Building and Evaluating Provenance&#x2212;based Intrusion Detection Systems  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[2] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Inside Out: A Paradigm Shift In VM Introspection </strong> </p>
	    <p class="publicationAuthors"> <em> Dufy Teguia&#x201a; Louis Duval&#x201a; Teo Pisenti&#x201a; Kahina Lazri&#x201a; Kahina Lazri&#x201a; Daniel Hagimont&#x201a; Thomas Pasquier&#x201a; Renaud Lachaize and Alain Tchana  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Symposium on Operating Systems Design and Implementation (OSDI'26)</em>.
        USENIX.
        2026.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication17192-abstract.html">
			Details <span class="sr-only" > about <em> Inside Out: A Paradigm Shift In VM Introspection  </em></span> </a> |
			<a href="/publications/publication17192.bib">
			BibTeX  <span class="sr-only" > data for <em> Inside Out: A Paradigm Shift In VM Introspection  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[3] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            ORTHRUS: Achieving High Quality of Attribution in Provenance&#x2212;based Intrusion Detection Systems </strong> </p>
	    <p class="publicationAuthors"> <em> Baoxiang Jiang&#x201a; Tristan Bilot&#x201a; Nour El Madhoun&#x201a; Khaldoun Al Agha&#x201a; Anis Zouaoui&#x201a; Shahrear Iqbal&#x201a; Xueyuan Han and Thomas Pasquier  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Security Symposium (USENIX Sec'25)</em>.
        USENIX.
        2025.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication17195-abstract.html">
			Details <span class="sr-only" > about <em> ORTHRUS: Achieving High Quality of Attribution in Provenance&#x2212;based Intrusion Detection Systems  </em></span> </a> |
			<a href="/publications/publication17195.bib">
			BibTeX  <span class="sr-only" > data for <em> ORTHRUS: Achieving High Quality of Attribution in Provenance&#x2212;based Intrusion Detection Systems  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[4] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            Sometimes Simpler is Better: A Comprehensive Analysis of State&#x2212;of&#x2212;the&#x2212;Art Provenance&#x2212;Based Intrusion Detection Systems </strong> </p>
	    <p class="publicationAuthors"> <em> Tristan Bilot&#x201a; Baoxiang Jiang&#x201a; Zefeng Li&#x201a; Nour El Madhoun&#x201a; Khaldoun Al Agha&#x201a; Anis Zouaoui and Thomas Pasquier  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Security Symposium (USENIX Sec'25)</em>.
        USENIX.
        2025.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication17194-abstract.html">
			Details <span class="sr-only" > about <em> Sometimes Simpler is Better: A Comprehensive Analysis of State&#x2212;of&#x2212;the&#x2212;Art Provenance&#x2212;Based Intrusion Detection Systems  </em></span> </a> |
			<a href="/publications/publication17194.bib">
			BibTeX  <span class="sr-only" > data for <em> Sometimes Simpler is Better: A Comprehensive Analysis of State&#x2212;of&#x2212;the&#x2212;Art Provenance&#x2212;Based Intrusion Detection Systems  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[5] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            FetchBPF: Customizable Prefetching Policies in Linux with eBPF </strong> </p>
	    <p class="publicationAuthors"> <em> Xuechun Cao&#x201a; Shaurya Patel&#x201a; Soo Yee Lim&#x201a; Xueyuan Han and Thomas Pasquier  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Annual Technical Conference (ATC'24)</em>.
        USENIX.
        2024.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication17197-abstract.html">
			Details <span class="sr-only" > about <em> FetchBPF: Customizable Prefetching Policies in Linux with eBPF  </em></span> </a> |
			<a href="/publications/publication17197.bib">
			BibTeX  <span class="sr-only" > data for <em> FetchBPF: Customizable Prefetching Policies in Linux with eBPF  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li><li>
	
	<div class="row">
		
			<div class="col-xs-1 text-right">
				[6] 
			</div>

		
        
		<div
			class="col-xs-11"
		>
			
	
	<p class="publicationTitle"> <strong>
            KAIROS: Practical Intrusion Detection and Investigation using Whole&#x2212;system Provenance </strong> </p>
	    <p class="publicationAuthors"> <em> Zijun Cheng&#x201a; Qiujian Lv&#x201a; Jinyuan Liang&#x201a; Yan Wang&#x201a; Degang Sun&#x201a; Thomas Pasquier and Xueyuan Han  </em> </p>
	
	<p class="publicationDetails"> 
            In  
            <em>
            Symposium on Security and Privacy (S&P'24)</em>.
        IEEE.
        2024.
        </p>
	
        		<p class="publicationlinks"> <a
        
            		href="/publications/publication17196-abstract.html">
			Details <span class="sr-only" > about <em> KAIROS: Practical Intrusion Detection and Investigation using Whole&#x2212;system Provenance  </em></span> </a> |
			<a href="/publications/publication17196.bib">
			BibTeX  <span class="sr-only" > data for <em> KAIROS: Practical Intrusion Detection and Investigation using Whole&#x2212;system Provenance  </em></span>   </a>
			
			
		
		</div> 
	</div> 
	
        </li></ul></div><div class="col-xs-12 col-md-3 col-md-pull-9 side-menu-col"><h2 class="side-menu-title text-uppercase"><a href="#">About Us</a></h2><ul class="side-menu"><li class="active mobile-menu-source"><a href="/people/">People</a><ul><li class="active"><a href="/people/faculty.html">Faculty</a></li><li><a href="/people/research.html">Research</a></li><li><a href="/people/students.html">Students</a></li><li><a href="/people/support.html">Professional Services</a></li><li><a href="/people/visitingprofessors.html">Visiting Professors</a></li><li><a href="/people/emeritusfaculty.html">Emeritus Faculty</a></li></ul></li><li><a href="/aboutus/vacancies/">Vacancies</a></li><li><a href="/aboutus/women-cs-oxford/index.html">Women in the department</a></li><li><a href="/aboutus/equality-diversity-inclusion/index.html">Equality, diversity and inclusion</a></li><li><a href="https://www.alumniweb.ox.ac.uk/cs/make-a-donation">Support Us</a></li><li><a href="/aboutus/cshistory.html">Our History</a></li><li><a href="/aboutus/contact.html">Contact Us</a></li></ul></div></div></div>[an error occurred while processing this directive]