"Why 6?" Defining the operational limits of stide, an anomaly-based intrusion detector

Proceedings - IEEE Symposium on Security and Privacy

Volumn 2002-January, Issue , 2002, Pages 188-201

  Tan, K M C ^a   Maxion, R A ^a  

^a Carnegie Mellon University   (United States)

Author keywords

Chromium; Detectors; Privacy; Security

Indexed keywords

CHROMIUM; DATA PRIVACY; DETECTORS; MERCURY (METAL); SECURITY OF DATA; SIGNAL DETECTION;

ANOMALY DETECTION; CRITICAL PROBLEMS; DETECTION CAPABILITY; EVALUATION FRAMEWORK; INTRUSION DETECTORS; OPERATIONAL LIMITS; SECURITY; UNIVERSITY OF NEW MEXICO;

INTRUSION DETECTION;

EID: 84880858814     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECPRI.2002.1004371     Document Type: Conference Paper

References (12)

1. P. D'haeseleer, S. Forrest, and P. Helman. An immunological approach to change detection: algorithms, analysis and implications. In IEEE Symposium on Security and Privacy, 6-8 May 1996, Oakland, California, pages 110-119, IEEE Computer Society Press, Los Alamitos, California. 1996.
2. S. Forrest, S. A. Hofmeyr, A. Somayaji, and T. A. Longstaff. A sense of self for unix processes. In IEEE Symposium on Security and Privacy, 6-8 May 1996, Oakland, California, pages 120-128,IEEE Computer Society Press, Los Alamitos, California. 1996.
3. S. Forrest, A. S. Perelson, L. Allen, and R. Cherukuri. Self-nonself discrimination in a computer. In IEEE Symposium on Security and Privacy, 16-18 May 1994, Oakland, California, pages 202-212,IEEE Computer Society Press, Los Alamitos, California, 1994.
4. S. A. Hofmeyr, S. Forrest, and A. Somayaji. Intrusion detection using sequences of system calls. Journal of Computer Security, 6(3):151-180, 1998.
5. W. Lee and D. Xiang. Information-theoretic measures for anomaly detection. In IEEE Symposium on Security and Privacy, 14-16 May 2001, Oakland, California, pages 130-143, IEEE Computer Society Press, Los Alamitos, California, 2001.
6. C. Marceau. Characterizing the behavior of a program using multiple-length n-grams. In New Security Paradigms Workshop, 18-22 September 2000, Ballycotton, County Cork, Ireland, pages 101-110, ACM Press, New York, NY, 2001.
7. R. A. Maxion and K. M. C. Tan. Benchmarking anomaly-based detection systems. In International Conference on Dependable Systems and Networks, 25-28 June 2000, New York, New York, pages 623-630, IEEE Computer Society Press, Los Alamitos, California, 2000.
8. R. A. Maxion and K. M. C. Tan. Anomaly detection in embedded systems. IEEE Transactions on Computers, Special Issue on Embedded Fault-Tolerant Systems, 51(2):108-120, February 2002.
9. M. Stillerman, C. Marceau, and M. Stillman. Intrusion detection for distributed applications. Communications of the ACM, 42(7):62-69, July 1999.
10. K. M. C. Tan. Defining the operational limits of anomaly detectors. PhD thesis, The University of Melbourne, Melbourne, Australia, 2002 (forthcoming).
11. University of New Mexico. Computer immune systems, data sets and software: Sequence-based intrusion detection. Internet: http://www.cs.unm.edu/?immsec/systemcalls.htm, February 2002.
12. C. Warrender, S. Forrest, and B. Pearlmutter. Detecting intrusions using system calls:Alternative data models. In IEEE Symposium on Security and Privacy, 9-12 May 1999, Oakland, California, pages 133-145, IEEE Computer Society Press, Los Alamitos, California, 1999.