A fast automation-based method for detecting anomalous program behaviors

Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy

Volumn , Issue , 2001, Pages 144-155

  Sekar, R ^a   Bendre, M ^a   Dhurjati, D ^a   Bollineni, P ^a  

^a STONY BROOK UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATA THEORY; COMPUTATIONAL COMPLEXITY; COMPUTER PROGRAMMING; DATA STRUCTURES; LEARNING ALGORITHMS; PROGRAM DIAGNOSTICS; RESPONSE TIME (COMPUTER SYSTEMS);

ANOMALY DETECTION; FINITE STATE AUTOMATON; PROGRAM STRUCTURES;

SECURITY OF DATA;

EID: 0034829697     PISSN: 10637109     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (30)

1. Next-generation Intrusion Detection Expert System (NIDES): A summary
2. StackGuard: Automatic adaptive detection and prevention of buffer-overflow attacks
3. Intrusion detection: Applying machine learning to solaris audit data
4. Intrusion detection using sequences of system calls
5. COTS software with generic software wrappers
6. SLIC: An extensibility system for commodity operating systems
7. A study in using neural networks for anomaly and misuse detection
8. Learning program behavior profiles for intrusion detection
9. Using program behavior profiles for intrusion detection
10. Detecting anomalous and unknown intrusions against programs
11. State transition analysis: A rule-based intrusion detection approach
12. User-level infrastructure for system call interposition: A platform for intrusion detection and confinement
13. Cryptographic limitations on learning Boolean formulae and finite automata
14. Automated detection of vulnerabilities in privileged programs by execution monitoring
15. Intrusion detection via system call traces
16. A pattern-matching model for intrusion detection
17. Using finite automate to mine execution data for intrusion detection: A preliminary report
18. Using kernel hypervisors to secure applications
19. Data mining approaches for intrusion detection
20. Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation
21. A real-time intrusion detection expert system (IDES) - Final report
22. Penetration state transition analysis: A rule based intrusion detection approach
23. Emerald: Event monitoring enabling responses to anomalous live disturbances
24. The minimum consistency DFA problem cannot be approximated within any polynomial
25. A tutorial on hidden Markov models and selected applications in speech recognition
26. Synthesizing fast intrusion prevention/detection systems from high-level specifications
27. Netstat: A network-based intrusion detection approach
28. Detecting intrusions using system calls: Alternative data models