Editing Provenance (section)

====Whole-system provenance implementation for Linux====
* PASS<ref>{{cite journal|last1=Muniswamy-Reddy|first1=Kiran-Kumar|last2=Holland|first2=David|last3=Seltzer|first3=Margo|title=Provenance-Aware Storage Systems|journal=USENIX 2006 Annual Technical Conference Refereed Paper|date=2006|url=https://www.usenix.org/legacy/event/usenix06/tech/full_papers/muniswamy-reddy/muniswamy-reddy_html/}}</ref> – closed source – not maintained – kernel v2.6.X
* Hi-Fi<ref>{{cite book|last1=Pohly|first1=Devin J.|last2=McLaughlin|first2=Stephen|last3=McDaniel|first3=Patrick|last4=Butler|first4=Kevin|title=Proceedings of the 28th Annual Computer Security Applications Conference |chapter=Hi-Fi |series=Acsac '12|date=2012|pages=259–268|doi=10.1145/2420950.2420989|chapter-url=https://dl.acm.org/citation.cfm?doid=2420950.2420989|publisher=ACM|isbn=9781450313124|s2cid=5622944}}</ref> – open source<ref>{{cite web|last1=Pohly|first1=Devin J.|title=Hi-Fi|website=[[GitHub]]|url=https://github.com/djpohly/linux|date=19 August 2013}}</ref> – not maintained – kernel v3.2.x
* Flogger<ref>{{Cite book|last1=Ko|first1=Ryan K. L.|last2=Jagadpramana|first2=Peter|last3=Lee|first3=Bu Sung|title=2011IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications |chapter=Flogger: A File-Centric Logger for Monitoring File Access and Transfers within Cloud Computing Environments |date=November 2011|pages=765–771|language=en-US|publisher=IEEE|doi=10.1109/trustcom.2011.100|isbn=9781457721359|s2cid=15858535}}</ref> – closed source – not maintained – kernel v2.6.x
* S2Logger<ref>{{Cite book|last1=Suen|first1=Chun Hui|last2=Ko|first2=Ryan K.L.|last3=Tan|first3=Yu Shyang|last4=Jagadpramana|first4=Peter|last5=Lee|first5=Bu Sung|title=2013 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications |chapter=S2Logger: End-to-End Data Tracking Mechanism for Cloud Data Provenance |date=July 2013|pages=594–602|language=en-US|publisher=IEEE|doi=10.1109/trustcom.2013.73|isbn=9780769550220|s2cid=504801}}</ref> – closed source – not maintained – kernel v2.6.x
* LPM<ref>{{cite journal|last1=Bates|first1=Adam|last2=Tian|first2=Dave|last3=Butler|first3=Kevin R. B.|last4=Moyer|first4=Thomas|title=Trustworthy Whole-system Provenance for the Linux Kernel|journal=Proceedings of the 24th USENIX Conference on Security Symposium|series=SEC'15|date=2015|pages=319–334|url=https://dl.acm.org/citation.cfm?id=2831164|publisher=USENIX Association|isbn=9781931971232}}</ref> – open source<ref>{{cite web|title=uf_sensei / redhat-linux-provenance-release – Bitbucket|url=https://bitbucket.org/uf_sensei/redhat-linux-provenance-release|website=bitbucket.org|language=en}}</ref> – not maintained – kernel v2.6.x
* Progger<ref>{{Cite book|last1=Ko|first1=Ryan K.L.|last2=Will|first2=Mark A.|title=2014 IEEE 7th International Conference on Cloud Computing |chapter=Progger: An Efficient, Tamper-Evident Kernel-Space Logger for Cloud Data Provenance Tracking |date=June 2014|pages=881–889|language=en-US|publisher=IEEE|doi=10.1109/cloud.2014.121|isbn=9781479950638|hdl=10289/9018|s2cid=17536574|hdl-access=free}}</ref><ref name=":0" /><ref>{{Cite book|last1=Taha|first1=Mohammad M. Bany|last2=Chaisiri|first2=Sivadon|last3=Ko|first3=Ryan K. L.|title=2015 IEEE Trustcom/BigDataSE/ISPA |chapter=Trusted Tamper-Evident Data Provenance |date=August 2015|pages=646–653|language=en-US|publisher=IEEE|doi=10.1109/trustcom.2015.430|isbn=9781467379526|s2cid=10720318}}</ref><ref>{{Cite book|last1=Garae|first1=Jeffery|last2=Ko|first2=Ryan K.L.|last3=Chaisiri|first3=Sivadon|title=2016 IEEE Trustcom/BigDataSE/ISPA |chapter=UVisP: User-centric Visualization of Data Provenance with Gestalt Principles |date=August 2016|pages=1923–1930|language=en-US|publisher=IEEE|doi=10.1109/trustcom.2016.0294|isbn=9781509032051|hdl=10289/10996|s2cid=11231512|hdl-access=free}}</ref> – open source<ref>{{Cite web|url=https://github.com/CROWLaboratory/Progger|title=CROWLaboratory/Progger|website=GitHub|language=en|access-date=2018-08-04}}</ref> – not maintained – kernel v2.6.x and kernel v.4.14.x
* CamFlow<ref>{{cite journal|last1=Pasquier|first1=Thomas|last2=Singh|first2=Jatinder|last3=Eyers|first3=David|last4=Bacon|first4=Jean|title=Camflow: Managed Data-Sharing for Cloud Services|journal=IEEE Transactions on Cloud Computing|date=2015|volume=5|issue=3|pages=472–484|doi=10.1109/TCC.2015.2489211|arxiv=1506.04391|bibcode=2015arXiv150604391P|s2cid=11537746}}</ref><ref>{{cite book|last1=Pasquier|first1=Thomas|last2=Han|first2=Xueyuan|last3=Goldstein|first3=Mark|last4=Moyer|first4=Thomas|last5=Eyers|first5=David|last6=Seltzer|first6=Margo|last7=Bacon|first7=Jean|title=Proceedings of the 2017 Symposium on Cloud Computing |chapter=Practical whole-system provenance capture |series=SoCC '17|date=2017|pages=405–418|doi=10.1145/3127479.3129249|chapter-url=https://dl.acm.org/citation.cfm?id=3129249&CFID=829730322&CFTOKEN=15897970|publisher=ACM|isbn=9781450350280|arxiv=1711.05296|bibcode=2017arXiv171105296P|s2cid=4885447}}</ref><ref>{{cite journal |last1=Pasquier |first1=Thomas |last2=Han |first2=Xueyuan |last3=Moyer |first3=Thomas |last4=Bates |first4=Adam |last5=Hermant |first5=Olivier |last6=Eyers |first6=David |last7=Bacon |first7=Jean |last8=Seltzer |first8=Margo |title=Runtime Analysis of Whole-System Provenance |journal=25th ACM Conference on Computer and Communications Security |date=14 October 2018 |arxiv=1808.06049 |bibcode=2018arXiv180806049P }}</ref> – open source<ref>{{cite web|title=CamFlow: Practical Linux Provenance|url=http://camflow.org/|website=camflow.org}}</ref> – maintained – kernel v6.0.X