Native API based windows anomaly intrusion detection method using SVM

Proceedings - IEEE International Conference on Sensor Networks, Ubiquitous, and Trustworthy Computing

Volumn 2006 II, Issue , 2006, Pages 514-519

  Miao, Wang ^a   Cheng, Zhang ^a   Jingjing, Yu ^b  

^a XI'AN JIAOTONG UNIVERSITY   (China)

^b SHAANXI NORMAL UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

DATA STRUCTURES; DATABASE SYSTEMS; RESEARCH AND DEVELOPMENT MANAGEMENT; UNIX; VECTORS;

HOST ANOMALY DETECTION SYSTEM; NATIVE API BASED WINDOWS; SUPPORT VECTOR MACHINE METHOD; WINDOWS SYSTEMS;

ERROR DETECTION;

EID: 33845397865     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SUTC.2006.1636219     Document Type: Conference Paper

References (15)

1. http://www.sysinternals.com/information/nativeapi.html
2. S. Forrest, S.A. Hofmeyr, A. Somayaji, T.A. Longstaff. A sense of self for Unix processes. In Proceedings of the 1996 IEEE Symposium on Security and Privacy, 6-8 May 1996, pp. 120-128.
3. C. Michael and A. Ghosh. Simple, state-based approaches to program-based anomaly detection. ACM Transactions on Information and System Security, 5(3):203-237, 2002.
4. D. Wagner and D. Dean. Intrusion detection via static analysis. In Proceedings: IEEE Symposium on Security and Privacy, Oakland, California, 2001. IEEE Computer Society, pp. 156-169.
5. C. Warrender, S. Forrest, B. Pearlmutter. Detecting Intrusions Using System Calls: Alternative Data Models. 1999 IEEE Symposium on Security and Privacy, pp. 133-145
6. Zhen Liu, Susan M. Bridges, Rayford B. Vaughn: Combining Static Analysis and Dynamic Learning to Build Accurate Intrusion Detection Models. IWIA 2005, pp. 164-177
7. Dorothy E. Denning, An Intrusion-Detection Model, IEEE Transactions on Software Engineering, Vol. SE-13, No. 2, February 1987, pp.222-232
8. Gary Nebbett, Windows NT/2000 Native API Reference, Macmillan Technical Publishing (MTP), February 15, 2000
9. Sven Schreiber, Undocumented Windows 2000 Secrets: A Programmer's Cookbook, Addison-Wesley Professional; Bk&CD-Rom edition (May 7, 2001)
10. Kienzle DM, Elder MC. Recent worms: A survey and trends. In: Staniford S, ed. Proc. of the ACM CCS Workshop on Rapid Malcode (WORM 2003). Washington, 2003.
11. LinkTrust IDS Introduction, http://bj.is-one.net/product/break/HIDS/4. html
12. B. Boser, I. Guyon, and V. Vapnik (1992). A training algorithm for optimal margin classifiers. In Proceedings of the Fifth Annual Workshop on Computational Learning Theory.
13. Cortes, C. and V. Vapnik (1995). Support-vector network. Machine Learning 20, pp. 273-297.
14. Chang, C.-C. and C.-J. Lin (2001). LIBSVM: a library for support vector machines. http://www.csie.ntu.edu.tw/~cjlin/libsvm
15. Tan K, Maxion R. "Why 6"? Defining the operational limits of stede[C]. IEEE Symposium on Secutity & Privacy, 2002. 188-201.