Detecting intrusions using system calls: Alternative data models

Proceedings - IEEE Symposium on Security and Privacy

Volumn 1999-January, Issue , 1999, Pages 133-145

  Warrender, Christina ^a   Forrest, Stephanie ^a   Pearlmutter, Barak ^a  

^a University of New Mexico   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

HIDDEN MARKOV MODELS; MARKOV PROCESSES;

HIDDEN MARKOV MODELS (HMMS); INTRUSION DETECTION SYSTEMS; MODEL METHOD; NORMAL BEHAVIOR; RELATIVE FREQUENCIES; RULE INDUCTION; SYSTEM CALLS;

INTRUSION DETECTION;

EID: 84880174811     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECPRI.1999.766910     Document Type: Conference Paper

References (16)

1. R. C. Carrasco and J. Oncina. Learning stochastic regular grammars by means of a state merging method. In Proceedings of the Second International ICGI Colloquium on Grammatical Inteference and Applications, pages 139-152, Alicante, Spain, 1994
2. W. W. Cohen. Fast effective rule induction. In Machine Learning: the 12th International Conference. Morgan Kaufmann, 1995
3. M. Damashek. Gauging similarity with n-grams: Languageindependent categorization of text. Science, 267:843-848, Feb. 1995
4. S. Forrest, S. A. Hofmeyr, A. Somayaji, and T. A. Longstaff. A sense of self for UNIX processes. In Proceedings of the 1996 IEEE Symposium on Security and Privacy, pages 120-128, Los Alamitos, CA, 1996. IEEE Computer Society Press
5. P. Helman and J. Bhangoo. A statistically based system for prioritizing information exploration under uncertainty. IEEE Transactions on Systems, Man and Cybernetics, Part A: Systems and Humans, 27(4):449-466, July 1997
6. G. G. Helmer, J. S. K. Wong, V. Honavar, and L. Miller. Intelligent agents for intrusion detection. In Proceedings, IEEE Information Technology Conference, pages 121-124, Syracuse, NY, September 1998
7. S. A. Hofmeyr, S. Forrest, and A. Somayaji. Intrusion detection using sequences of system calls. Journal of Computer Security, 6:151-180, 1998
8. H. S. Javitz and A. Valdes. The NIDES statistical component: Description and justification. Technical report, Computer Science Laboratory, SRI International, Menlo Park, CA, March 1993
9. C. Ko, G. Fink, and K. Levitt. Automated detection of vulnerabilities in priviledged programs by execution monitoring. In Proceedings of the 10th annual Computer Security Applications Conference, pages 134-144, December 1994
10. A. P. Kosoresow and S. A. Hofmeyr. A shape of self for UNIX processes. IEEE Software, 14(5):35-42, 1997
11. W. Lee, 1998. personal communication
12. W. Lee and S. J. Stolfo. Data mining approaches for intrusion detection. In Proceedings of the 7th USENIX Security Symposium, 1998
13. W. Lee, S. J. Stolfo, and P. K. Chan. Learning patterns from UNIX process execution traces for intrusion detection. In AAAI Workshop on AI Approaches to Fraud Detection and Risk Management, pages 50-56. AAAI Press, July 1997
14. L. R. Rabiner. A tutorial on Hidden Markov Models and selected applications in speech recognition. Proceedings of the IEEE, 77(2):257-286, 1989
15. L. R. Rabiner and B. H. Juang. An introduction to Hidden Markov Models. IEEE ASSP Magazine, pages 4-16, January 1986
16. D. Ron, Y. Singer, and N. Tishby. The power of amnesia: Learning probabilistic automata with variable memory length. Machine Learning, 25, 1996