Intrusion detection using signatures extracted from execution profiles

Proceedings of the 2009 ICSE Workshop on Software Engineering for Secure Systems, SESS 2009

Volumn , Issue , 2009, Pages 17-24

  El Ghali, Marwa ^a   Masri, Wes ^a  

^a AMERICAN UNIVERSITY OF BEIRUT   (Lebanon)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION PROGRAMS; NETWORK SECURITY;

INTRUSION DETECTION SYSTEMS; MALICIOUS BEHAVIOR; PROGRAM STATEMENTS; PROGRAM VULNERABILITY; RUNTIME OVERHEADS; SECURITY MECHANISM; SOFTWARE APPLICATIONS; SOFTWARE VULNERABILITIES;

INTRUSION DETECTION;

EID: 70349916409     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IWSESS.2009.5068454     Document Type: Conference Paper

References (26)

1. Apache Tomcat. http://www.akarta.apache.org/tomcat
2. The Byte Code Engineering Library (BCEL), The Apache Jakarta Project, http://jakarta.apache.org/bcel. Apache Software Foundation 2003.
3. D. Brumley, Z. Liang, J. Newsome, D. Song. "Towards Practical Automatic Generation of Multipath Vulnerability Signatures". Technical Report, Carnegie Mellon University, April 2007.
4. D. Brumley, J. Newsome, D. Song, H. Wang, S. Jha. "Towards Automatic Generation of Vulnerability-Based Signatures". Proceedings of the 2006 IEEE Symposium on Security and Privacy, Berkeley, California, USA, May 2006, pp. 2-16.
5. th IEEE Computer SecurityFoundations Symposium (CSF '07), Venice, Italy, July 2007.
6. S. Butenko and W. E. Wilhelm, "Clique-detection models in computational biochemistry and genomics", European Journal of Operational Research, 173(1), pp. 1-17, 2006.
7. st International Conference on Software Engineering (ICSE '99), Los Angeles, CA, USA, May 1999, pp. 213-224.
8. H. Feng, O. Kolesnikov, P. Fogla, W. Lee, W. Gong. "Anomaly Detection using Call Stack Information". Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, USA, May 2003, p. 62.
9. S. Forrest, S. Hofmeyr, A. Somayaji, T. longstaff. "A Sense of Self for Unix Processes". Proceedings of the 1996 IEEE Symposium on Security and Privacy, Los Alamitos, CA, USA, May 1996, pp. 120-128.
10. J. Giffin, S. Jha, B. Miller. "Automated Discovery of Mimicry Attacks". Proceedings of the 9th International Symposium on Recent Advances in Intrusion Detection (RAID '06), Hamburg, Germany, September 2006, pp. 41-60.
11. Q. Guo, R.M. Hierons, M. Harman, K. Derderian, "Computing Unique Input/Output Sequences using Genetic Algorithms". Proceedings of the 3rd International Workshop on Formal Approaches to Software Testing (FATES '03), Montreal, Canada, October 2003, pp. 1098-1100.
12. M. Hifi, "A genetic algorithm-based heuristic for solving the weighted maximum independent set and some equivalent problems". The Journal of the Operational Research Society, 48(6), pp. 612-622, 1997.
13. Jones J., Harrold M. J., and Stasko J. "Visualization of Test Information to Assist Fault Localization". In Proceedings of the 24th International Conference on Software Engineering, Orlando, Florida, USA, May 2002, pp. 467-477.
14. th USENIX Security Symposium, San Diego, California, August 2004, pp. 271-286.
15. C. Kruegel, D. Mutz, F. Valeur, G. Vigna. "On the Detection of Anomalous System Call Arguments". Proceedings of the 8th European Symposium on Research in Computer Security, Gjovik, Norway, October 2003, pp. 326-343.
16. M. Lam, M. Martin, B. Livshits, J. Whaley. "Securing Web Applications with Static and Dynamic Information Flow Tracking". Proceedings of the 2008 ACM SIGPLAN symposium on Partial Evaluation and Semantics-based Program Manipulation (PEPM'08), San Francisco, California, USA, January 2008, pp. 3-12.
17. Z. Li, M. Harman, R.M. Hierons, "Search Algorithms for Regression Test Case Prioritization", IEEE Transactions on Software Engineering, 33(4), pp. 225-237, 2007.
18. th conference on USENIX Security Symposium (USENIX '05), Baltimore, Maryland, USA, July/August 2005, pp. 271-286.
19. D. Lorenzoli, L. Mariani, M. Pezza. "Towards Self-Protecting Enterprise Applications". Proceedings of the 18th IEEE International Symposium on Software Reliability (ISSRE '07), Trollhättan, Sweden, November 2007.
20. R.J. Lorimer, "Instrumentation: Modify Applications with Java 5 Class File Transformations", Java Lobby, http://www.javalobby.org/java/ forums/t19309.html, accessed Nov. 29, 2007.
21. th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications (OOPSLA '05), San Diego, California, USA, October 2005, pp. 365-383.
22. W. Masri, A. Podgurski. "Application-based Anomaly Intrusion Detection with Dynamic Information Flow Analysis". Computers and Security (ELSEVIER), 27(5-6), pp. 176-187, 2008.
23. W. Masri, A. Podgurski and D. Leon. "An Empirical Study of Test Case Filtering Techniques Based On Exercising Information Flows". IEEE Transactions on Software Engineering, 33(7), pp. 454, July 2007.
24. A. Singh and A.K. Gupta, "A hybrid heuristic for the maximum clique problem", Journal of Heuristics, 12(1-2), pp. 5-22, 2006.
25. D. Wagner, D. Dean. "Intrusion Detection via Static Analysis". Proceedings of the 2001 IEEE Symposium on Security and Privacy, Oakland, CA, USA, May 2001, pp. 156-168.
26. D. Wagner, P. Soto. "Mimicry Attacks on Host-Based Intrusion Detection Systems". Proceedings of the 9th ACM conference on Computer and Communications Security, Washington, DC, USA, November 2002, pp. 255-264.