Monitoring for security intrusion using performance signatures

WOSP/SIPEW'10 - Proceedings of the 1st Joint WOSP/SIPEW International Conference on Performance Engineering

Volumn , Issue , 2010, Pages 93-103

  Avritzer, Alberto ^a   Tanikella, Rajanikanth ^a   James, Kiran ^a   Cole, Robert G ^b   Weyuker, Elaine ^c  

^a SIEMENS CORPORATE RESEARCH   (United States)

^b APPLIED PHYSICS LABORATORY   (United States)

^c AT AND T LABS RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MODE OF OPERATIONS; MONITORING PERFORMANCE; NEW APPROACHES; NORMAL MODES; OPERATIONS SUPPORT SYSTEM; POWER GENERATION SYSTEMS; PROPOSED ARCHITECTURES; SECURITY ATTACKS; SECURITY INTRUSION; SECURITY MONITORING; SOFTWARE SYSTEMS; TRANSPORTATION SYSTEM;

COMPUTER SOFTWARE; INTRUSION DETECTION; NETWORK SECURITY;

MONITORING;

EID: 77950509312     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1712605.1712623     Document Type: Conference Paper

References (22)

1. A. Avritzer and E. J. Weyuker. The Automatic Generation of Load Test Suites and the Assessment of the Resulting Software. IEEE Trans. on Software Engineering, Sept 1995, pp. 705-716.
2. A. Avritzer and E. J. Weyuker, Detecting failed processes using fault signatures, International Computer Performance and Dependability Symposium, July, 1996.
3. A. Avritzer and E. J. Weyuker, Monitoring Smoothly Degrading Systems for Increased Dependability, Empirical Software Engineering, Springer Netherlands, March 1997.
4. A. Avritzer, J. P. Ros and E. J. Weyuker, Estimating the CPU utilization of a rule-based system, Proc. Fourth International Workshop on Software and Performance 2004, Redwood Shores, California, Jan, 2004, pp. 1-12.
5. A. Avritzer, A. Bondi and E. J. Weyuker, Ensuring Stable Performance for Systems that Degrade, Proc. Fifth International Workshop on Software and Performance 2005, Palma de Mallorca, Spain, July, 2005, pp. 43-51.
6. A. Avritzer, R. G. Cole and E. J. Weyuker, Using performance signatures and software rejuvenation for worm mitigation in tactical MANETs, Proc. Sixth International Workshop on Software and Performance 2007, Buenos Aires, Argentina, February, 2007, pp. 172-180.
7. W. Diffie and M. E. Hellman, New directions in cryptography. IEEE Transactions on Information Theory, vol IT-22, Nov 1976, pp:644-654.
8. S. A. Hofmeyr and S. Forrest and A. Somayaji, Intrusion Detection Using Sequences of System Calls. Journal of Computer Security, vol 6, No 3, 1998, pp 151-180.
9. Y. Huang, C. Kintala, N. Kolettis, and N. D. Fulton, Software rejuvenation:Analysis, module and applications. Proc. Twenty-fifth International Symp. on Fault-Tolerant Computing, 1995, pp. 381-390.
10. IBM Cryptography Research Group. http://domino.research.ibm.com/security
11. D. Khan. The code breakers. Macmillan, 1967.
12. R. Mariani. Performance Signature: A qualitative approach to dependence guidance. International Computer Measurement Group Conference, pp 469-474, 2006.
13. D. L .Oppenheimer and M. R. Martonosi, Performance Signatures: A Mechanism for Intrusion Detection. Proceedings of the 1997 IEEE Information Survivability Workshop, 1997. http://www.sysnet.ucsd.edu/ davidopp/ pubs/perfsig.html.
14. R. L. Rivest, A. Shamir and L. Adleman. A method for obtaining digital signatures and public key cryptosystems. Communications of the ACM, Feb. 1978, pp 120-126. [15] http://www.wired.com/threatlevel/2009/01/professedtwitt/
15. Snort http://www.snort.org/
16. Cain & Abel http://www.oxid.it/cain.html
17. Wireshark http://www.wireshark.org/
18. Hyperic Sigar http://www.hyperic.com/products/sigar.html
19. DoSHttp http://www.socketsoft.net/
20. Base http://base.secureideas.net/
21. CurrPorts http://www.nirsoft.net/utils/cports.html
22. SysTracer http://www.blueproject.ro/systracer