Research on hidden Markov model for system call anomaly detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4430 LNCS, Issue , 2007, Pages 152-159

  Qian, Quan ^a   Xin, Mingjun ^a  

^a SHANGHAI UNIVERSITY   (China)

Author keywords

Anomaly detection; Hidden markov model; Host system calls

Indexed keywords

DATA COMMUNICATION SYSTEMS; HIDDEN MARKOV MODELS; INFORMATION SYSTEMS; REAL TIME CONTROL;

ANOMALY DETECTION; HOST SYSTEM CALLS; PART-STATES TRANSITION;

INTRUSION DETECTION;

EID: 38049136994     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-71549-8_13     Document Type: Conference Paper

References (12)

1. R. Anderson, A. Khattak. The use of information retrieval techniques for intrusion detection [EB/OL]. http://www.raid-symposium.org/raid98/index.html, 2004-10-04.
2. Terran L. Hidden markov models for human/computer interface modeling[A]. Proceedings of the IJCAI-99 Workshop on Learning about Users[C]. Stockholm, Sweden: Morgan Kaufmann Publishers, 1999. 35-44.
3. Nong Y. A Markov chain model of temporal behavior for anomaly detection[A]. Proceedings of the 2000 IEEE Systems, Man, and Cybernetics Information Assurance and Security Workshops]. New York: IEEE Computer Society Press, 2000.171-174.
4. Sung B C, Hyuk J P. Efficient anomaly detection by modeling privilege flows using hidden Markov model[J]. Computers & Security, 2003, 22(1):45-55.
5. Stephanie F, Steven A H, Anil S, etc. A sense of self for unix processes[A]. Proceedings of the 1996 IEEE Symposium on Security and Privacy[C]. CA:IEEE Computer Society Press, 1996.120-128.
6. Steven A H, Stephanie F, Anil S. Intrusion detection using sequences of system calls[J]. Journal of Computer Security, 1998,6(3): 151-180.
7. Helman P, Bhangoo J. A statistically based system for prioritizing information exploration under uncertainty[J]. IEEE Transactions on Systems, Man and Cyberneticsm, Part A: Systems and Humans. 1997,27(4):449-466.
8. Wenke L, Salvatore J S, Chan P K. Learning patterns from UNIX process execution traces for intrusion detection[A]. AAAI Workshop on AI Approaches to Fraud Detection and Risk Managements]. Menlo Park:AAAI press, 1997.50-56.
9. Christina W, Stephanie F, Barak P. Detecting intrusions using system calls: alternative data models[A]. Proceedings of IEEE Symposium on Security and Privacy[C]. Oakland, California: IEEE Computer Society Press, 1999.133-145.
10. D.Snyder. On-line intrusion detection using sequences of system calls[D]. Master's thesis, Department of Computer Science, Florida State University, 2001.
11. Jinhui-xie. HMM and its application in speech recognition[M] (in Chinese). Wuhan : Huazhong University of Technology Press, 1995.
12. Computer Immune Systems Data Sets. University of New Mexico[EB/OL], http://www.cs.unm.edu/~immsec/data/synth-sm.html, 2004-9-10.