Learning useful system call attributes for anomaly detection

Proceedings of the Eighteenth International Florida Artificial Intelligence Research Society Conference, FLAIRS 2005 - Recent Advances in Artifical Intelligence

Volumn , Issue , 2005, Pages 405-410

  Tandon, Gaurav ^a   Chan, Philip K ^a  

^a Florida Institute of Technology ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

HOST-BASED ANOMALY DETECTION SYSTEMS; SYSTEM CALL ARGUMENTS;

INFORMATION ANALYSIS;

LEARNING SYSTEMS;

EID: 32844462024     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. Agrawal, R.; Imielinski, T.; and Swami A. 1993. Mining association rules between sets of items in large databases. ACM SIGMOD, 207-216.
2. Forrest, S.; Hofmeyr, S.; Somayaji, A.; and Longstaff, T. 1996. A Sense of Self for UNIX Processes. IEEE Symposium on Security and Privacy, 120-128.
3. Kendell, K. 1999. A Database of Computer Attacks for the Evaluation of Intrusion Detection Systems. Masters Thesis, MIT.
4. Kruegel, C.; Mutz, D.; Valeur, F.; and Vigna, G. 2003. On the Detection of Anomalous System Call Arguments, European Symposium on Research in Computer Security, 326-343.
5. Lane, T., and Brodley C.E. 1997. Sequence Matching and Learning in Anomaly Detection for Computer Security. AAAI Workshop on AI Approaches to Fraud Detection and Risk Management, 43-49.
6. Lippmann, R.; Haines, J.; Fried, D.; Korba, J.; and Das, K. 2000. The 1999 DARPA Off-Line Intrusion Detection Evaluation. Computer Networks, 34:579-595.
7. Mahoney, M., and Chan, P. 2003. Learning Rules for Anomaly Detection of Hostile Network Traffic, IEEE International Conference on Data Mining, 601-604.
8. Rigoutsos, I., and Floratos, A. 1998. Combinatorial pattern discovery in biological sequences. Bioinformatics, 14(1):55-67.
9. Tan, K.M.C.; Killourhy, K.S.; and Maxion, R.A. 2002. Undermining an Anomaly-based Intrusion Detection System Using Common Exploits. RAID, 54-74.
10. Wagner, D., and Soto, P. 2002. Mimicry Attacks on Host-Based Intrusion Detection Systems. ACM CCS, 255-264.
11. Warrender, C.; Forrest, S.; and Pearlmutter, B. 1999. Detecting Intrusions Using System Calls: Alternative Data Models. IEEE Symposium on Security and Privacy, 133-145.
12. Wespi, A.; Dacier, M.; and Debar, H. 1999. An Intrusion-Detection System Based on the Teiresias Pattern-Discovery Algorithm. EICAR Conference, 1-15.
13. Wespi, A.; Dacier, M.; and Debar, H. 2000. Intrusion detection using variable-length audit trail patterns. RAID, 110-129.
14. Witten, I., and Bell, T. 1991. The zero-frequency problem: estimating the probabilities of novel events in adaptive text compression. IEEE Trans. on Information Theory, 37(4):1085-1094.