Accurate and automated system call policy-based intrusion prevention

Proceedings of the International Conference on Dependable Systems and Networks

Volumn 2006, Issue , 2006, Pages 413-422

  Lam, Lap Chung ^a   Li, Wei ^a   Chiueh, Tzi Cker ^a  

^a Stony Brook University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

RUN TIME SYSTEMS;

CLIENT SERVER COMPUTER SYSTEMS; CODES (SYMBOLS); COMPUTER NETWORKS; SOFTWARE PROTOTYPING; USER INTERFACES;

SECURITY OF DATA;

EID: 33845567238     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2006.10     Document Type: Conference Paper

References (14)

1. CERT Coordination Center. Cert summary cs-2003-01. http://www.cert.org/ summaries/, 2003.
2. H. H. Feng, J. T. Giffin, Y. Huang, S. Jha, W. Lee, and B. P. Miller. Formalizing sensitivity in static analysis for intrusion detection. In IEEE Symposium on Security and Privacy, Oakland, California, May 2004.
3. H. H. Feng, O. M. Kolesnikov, P. Fogla, W. Lee, and W. Gong. Anomaly detection using call stack information. In Proceedings of the IEEE Symposium on Security and Privacy, pages 62-76, Berkeley, CA, May 2003. IEEE Press.
4. J. T. Giffin, S. Jha, and B. P. Miller. Detecting manipulated remote call streams. USENIX Security Symposium, August 2002.
5. J. T. Giffin, S. Jha, and B. P. Miller. Efficient context-sensitive intrusion detection, 11th Annual Network and Distributed System Security Symposium, February 2004.
6. GrammaTech, Inc. Codesurfer. http://www.grammatech.com/products/ codesurfer/.
7. D. Grove and L. Torczon. Interprocedural constant propagation: A study of jump function implementations. In Proceedings of the ACM SIGPLAN 1993 conference on Programming language design and implementatio, pages 90-99, 1993.
8. S. Hofmeyr, S. Forrest, and A. Somayaji. Intrusion detection using sequences of system calls. Journal of Computer Security, 6(3), 1998.
9. L. C. Lam and T. Chiueh. Automatic extraction of highly accurate application-specific sandboxing policy. In Seventh International Symposium on Recent Advances in Intrusion Detection, Sophia Antipolis, French Riviera, France, September 15-17 2004.
10. R. Sekar, M. Bendre, P. Bollineni, and D. Dhurjati. A fast automaton-based method for detecting anomalous program behaviors. IEEE Symposium on Security and Privacy, pages 144-155, 2001.
11. D. Wagner and D. Dean. Intrusion detection via static analysis. In Proceedings of the IEEE Symposium on Security and Privacy, pages 156-169, Oakland, CA, May 2001. IEEE Press.
12. D. Wagner and P. Soto. Mimicry attacks on host-based intrusion detection systems. In Proceedings of the 9th ACM Conference on Computer and Communications Security, November 2002.
13. C. Warrender, S. Forrest, and B. Pearlmutter. Detecting intrusions using system calls: Alternative data models. In 1999 IEEE Symposium on Security and Privacy, pages 133-145, Oakland, California, May 1999.
14. M. N. Wegman and F. K. Zadeck. Constant propagation with conditional branches. ACM Transactions on Programming Languages and Systems, 13(2): 181-210, April 1991.