Process profiling using frequencies of system calls

Proceedings - Second International Conference on Availability, Reliability and Security, ARES 2007

Volumn , Issue , 2007, Pages 473-479

  Varghese, Surekha Mariam ^a   Jacob, K Poulose ^b  

^a MA College of Engineering   (India)

^b Department of Polymer Science and Rubber Technology   (India)

Author keywords

[No Author keywords available]

Indexed keywords

CLASSIFICATION (OF INFORMATION); ENGINEERING RESEARCH; INTRUSION DETECTION; MESSAGE PASSING; PROBABILITY;

ANOMALY DETECTION; PROBABILISTIC TECHNIQUES; PROGRAM BEHAVIOR; SENDMAIL SYSTEMS;

SYSTEMS ANALYSIS;

EID: 34548147746     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2007.116     Document Type: Conference Paper

References (14)

1. D.E. Denning, An intrusion-detection model, IEEE Transactions on software Engineering, Vol: 13, No:2,pp. 222-232, 1987.
2. H. S. Javitz and A. Valdês. The SRI IDES Statistical Anomaly Detector. In Proceedings of the IEEE Symposium on Security and Privacy, May 1991.
3. C. C. Michael And Anup Ghosh, Simple, State-Based Approaches to Program-Based Anomaly Detection, ACM Transactions on Information and System Security, Vol. 5, No. 3, August 2002.
4. Dae-Ki Kang, Doug Fuller, Vasant Honavar, Learning Classifiers for Misuse and Anomaly Detection Using a Bag of System Calls Representation, In the Proceedings of the 2005 IEEE Workshop on Information Assurance and Security ,United States Military Academy, West Point, NY.,pp 118-125 http://www.cs.iastate.edu/~honavar/Papers/isi05.pdf
5. W. Lee, S. Stolfo, and K. Mok. Mining in a Data-flow Environment: Experience in Network Intrusion Detection. In Proceedings of the 5th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining (KDD '99), San Diego, CA, August 1999.
6. S. Forrest. A Sense of Self for UNIX Processes. In Proceedings of the IEEE Symposium on Security and Privacy, pages 120-128, Oakland, CA, May 1996.
7. S. A. Hofmeyr, S. Forrest, and A. Somayaji. Intrusion detection using sequences of system calls. Journal of Computer Security, 6:151-180, 1998.
8. P. Herman and J. Bhangoo. A statistically based system for prioritizing information exploration under uncertainty. IEEE Transactions on Systems, Man and Cybernetics, Part A: Systems and Humans, 27(4):449-466, July 1997.
9. Sekar, R., Bendre, M., Dhurjati, D., And Bollineni, P, A Fast Automaton-Based Method For Detecting Anomalous Program Beha viors. In Proceedings Of The 2000 IEEE Symposium On SecurityAnd Privacy. IEEE Computer Society, Los Alamitos, Calif., 144-155.
10. Finn V.Jensen, An Introduction to Bayesian Networks, Springer, 1996.
11. J. Pearl. Probabilistic Reasoning in Intelligent Systems: Networks of Plausible Inference. Morgan Kaufmann, 1997.
12. Probabilistic networks-with-undirected.pdf
13. CERT Syslog vulnerability-a workaround for sendmail,http://www.cert.org/ advisories/CA-95.13.syslog.vul.html,October 19, 1995.
14. Computer Immune Systems - Data Sets and Software http://www.cs.unm. edu/~immsec/systemcalls.htm