Watcher: The missing piece of the security puzzle

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2001-January, Issue , 2001, Pages 230-239

  Munson, John C ^a   Wimer, Scott ^b  

^a University of Idaho   (Russian Federation)

^b Software Systems International   (United States)

Author keywords

Computer science; Computer security; Hardware; Information security; Internet; Intrusion detection; Monitoring; Operating systems; Radio access networks; Software systems

Indexed keywords

COMPLEX NETWORKS; COMPUTER HARDWARE; COMPUTER SCIENCE; INTERNET; INTRUSION DETECTION; MERCURY (METAL); MONITORING; NETWORK SECURITY; SECURITY OF DATA; SECURITY SYSTEMS;

COMMERCIAL MARKET; FALSE POSITIVE; INTRUSION DETECTION SYSTEMS; RADIO ACCESS NETWORKS; SECURITY TECHNOLOGY; SIGNATURE DATABASE; SOFTWARE SYSTEMS; TRAFFIC REQUIREMENTS;

COMPUTER OPERATING SYSTEMS;

EID: 33745462600     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2001.991539     Document Type: Conference Paper

References (18)

1. J. Alves-Foss, D. Frincke and J. Munson. Measuring Security: A Methodological Approach, International Workshop on Enterprise Security, Stanford, CA, June 1996
2. D. Anderson, T. Frivold and A. Valdez: Nextgeneration intrusion detection expert system (NIDES). Technical Report, Computer Science Laboratory, SRI International, Menlo Park, CA, SRI-CSL-95-07, May 1995
3. M. Bishop: A Taxonomy of UNIX and Network Security Vulnerabilities," M. Bishop, Technical Report 95-10, Department of Computer Science, University of California at Davis, May 1995
4. D. Denning: An intrusion-detection model. IEEE Transactions on Software Engineering, Vol.13, No:2, pp.222-232, February 1987
5. S. G. Elbaum and J. C. Munson, "Intrusion Detection through Dynamic Software Measurement", Proceedings of the USENIX Workshop on Intrusion Detection and Network Monitoring , Santa Clara, CA, April 1999
6. A.K. Ghosh, C. Michael and M. Schatz: A real-time intrusion detection system based on learning program behavior, Proceedings of theThird International Workshop, RAID 2000 , Springer-Verlag, Toulouse, France, pp. 93-109, October 2000
7. A. K. Ghosh, A. Schwartzbard and M. Schatz: Learning program behavior profiles for intrusion detection. Proceeding of the USENIX Workshop on Intrusion Detection and Network Monitoring, Santa Clara, CA, April 1999
8. L. R. Halme and R. K. Bauer: AINT misbehaving-A taxonomy of anti-intrusion techniques. Proc. of the 18th National Information Systems Security Conference, pp. 163-172, October 1995
9. J. Hochberg, K. Jackson, C. Stallings, J. F. McClary, D. DuBois and J. Ford: NADIR: An automated system for detecting network intrusion and misuse. Computers &Security, Vol.12, No:3, pp.235-248, May 1993
10. H. S. Javitz and A. Valdes: The SRI IDES statistical anomaly detector. Proc. of the IEEE Symposium on Research in Security and Privacy, pp.316-326, May 1991
11. A. P. Kosoresow and S. A. Hofmeyr, "Intrusion Detection via System Call Traces", IEEE Software, Septemeber/October 1997, pp. 35-42
12. S. Kumar and E. H. Spafford: A pattern matching model for misuse intrusion detection. Proc. of the 17th National Computer Security Conference, pp. 11-21, October 1994
13. S. Kumar and E. H. Spafford: A Software Architecture to Support Misuse Intrusion Detection, Proc. 18th National Information Systems Security Conference, pp.194-204, 1995
14. The Linux Kernel Instrumentation Project, http://sourceforge.net/projects/kip
15. J. C. Munson, A Software Blackbox Recorder. Proceedings of the 1996 IEEE Aerospace Applications Conference, IEEE Computer Society Press, Los Alamitos, CA, November, pp. 309-320, 1996
16. A. P. Porras and G. P. Neumann: EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances. National Information Systems Security Conference, 1997
17. M. Sobirey Richter and H. Konig. The intrusion detection system AID. Architecture, and experiences in automated audit analysis. Proc. of the International Conference on Communications and Multimedia Security, pp. 278-290, September 1996
18. C. Warrender, S. Forrest, and B. Pearlmutter: Detecting intrusions using system calls: alternative data models, IEEE Symposium on Security and Privacy, IEEE Computer Society Press, pp. 133-145, 1999