On the learning of system call attributes for host-based anomaly detection

International Journal on Artificial Intelligence Tools

Volumn 15, Issue 6, 2006, Pages 875-892

  Tandon, Gaurav ^a   Chan, Philip K ^a  

^a Florida Institute of Technology ^*  (United States)

Author keywords

Anomaly detection; Host based intrusion detection; System call arguments

Indexed keywords

EID: 33845599591     PISSN: 02182130     EISSN: None     Source Type: Journal    
DOI: 10.1142/S0218213006003028     Document Type: Conference Paper

References (15)

1. S. Forrest, S. Hofmeyr, A. Somayaji and T. Longstaff, A Sense of Self for UNIX Processes. IEEE Symposium on Security and Privacy, (1996), pp. 120-128.
2. T. Lane and C.E. Brodley, Sequence Matching and Learning in Anomaly Detection for Computer Security. AAAI workshop on AI Approaches to Fraud Detection and Risk Management, (1997).
3. C. Warrender, S. Forrest and B. Pearlmutter, Detecting Intrusions Using System Calls: Alternative Data Models. IEEE Symposium on Security and Privacy, (1999), pp. 133-145.
4. I. Rigoutsos and A. Floratos, Combinatorial pattern discovery in biological sequences. Bioinformatics, 14(1), (1998), pp. 55-67.
5. A. Wespi, M. Dacier and H. Debar, An Intrusion-Detection System Based on the Teiresias Pattern-Discovery Algorithm. European Institute for Computer Anti- Virus Research, (1999), pp. 1-15.
6. A. Wespi, M. Dacier and H. Debar, Intrusion detection using variable-length audit trail patterns. Recent Advances in Intrusion Detection, (2000), pp. 110-129.
7. K.M.C. Tan, K.S. Killourhy and R.A. Maxion, Undermining an Anomaly-based Intrusion Detection System Using Common Exploits. Recent Advances in Intrusion Detection, (2002), pp. 54-73.
8. D. Wagner and P. Soto, Mimicry Attacks on Host-Based Intrusion Detection Systems. ACM Conference on Computer and Communications Security, (2002), pp. 255-264.
9. C. Kruegel, D. Mutz, F. Valeur and G. Vigna, On the Detection of Anomalous System Call Arguments, European Symposium on Research in Computer Security, (2003), pp. 326-343.
10. R. Agrawal, T. Imielinski and A. Swami, Mining association rules between sets of items in large databases. ACM SIGMOD, (1993), pp. 207-216.
11. M. Mahoney and P. Chan, Learning Rules for Anomaly Detection of Hostile Network Traffic, IEEE International Conference on Data Mining, (2003), pp. 601-604.
12. I. Witten and T. Bell, The zero-frequency problem: estimating the probabilities of novel events in adaptive text compression. IEEE Transactions on Information Theory, vol.37, (1991), pp. 1085-1094.
13. R. Lippmann, J. Haines, D. Fried, J. Korba and K. Das, The 1999 DARPA Off-Line Intrusion Detection Evaluation. Computer Networks, 34(4), (2000), pp. 579-595.
14. K. Kendell, A Database of Computer Attacks for the Evaluation of Intrusion Detection Systems. Masters Thesis, MIT, (1999).
15. P.A. Flach, The Many Faces of ROC Analysis in Machine Learning. International Conference on Machine Learning Tutorial, (2004).