A scaled, immunological approach to anomaly countermeasures: Combining pH with cfengine

IFIP Advances in Information and Communication Technology

Volumn 118, Issue , 2003, Pages 31-42

  Begnum, Kyrre M ^a   Burgess, Mark ^a  

^a OSLO METROPOLITAN UNIVERSITY   (Norway)

Author keywords

[No Author keywords available]

Indexed keywords

LINUX;

ANOMALY DETECTION; ANOMALY DETECTION MODELS; AUTOMATED RESPONSE; LINUX KERNEL; PROTOTYPE SYSTEM; TIME-AVERAGES;

NETWORK MANAGEMENT;

EID: 84904336851     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-0-387-35674-7     Document Type: Conference Paper

References (16)

1. M. Burgess. A site configuration engine. Computing systems (MIT Press: Cambridge MA), 8: 309, 1995.
2. M. Burgess. Automated system administration with feedback regulation. Software pmctice and experience, 28: 1519, 1998.
3. M. Burgess. Computer immunology. Proceedings of the Twelth Systems Administmtion Conference (LISA XII) (USENIX Association: Berkeley, CA), page 283, 1998.
4. M. Burgess. On the theory of system administration. Submitted to J. ACM., 2000.
5. M. Burgess. Two dimensional time-series for anomaly detection and regulation in adaptive systems. 13th International Workshop on Distributed Systems: Opemtions and Management (DSOM 2002), page 293, 2001.
6. M. Burgess, H. Haugerud, T. Reitan, and S. Straumsnes. Measuring host normality. ACM Transactions on Computing Systems, 20: 125-160, 2001.
7. J. Arvidsson et al. Terena's incident object description and exchange format requirements. RFC3067, 2001.
8. M. J. Ranum et al. Implementing a generalized tool for network monitoring. Proceedings of the Eleventh Systems Administration Conference (LISA XI) (USENIX Association: Berkeley, CAl, page 1, 1997.
9. J. L. Hellerstein, F. Zhang, and P. Shahabuddin. An approach to predictive detection for service management. Proceedings of IFIP/IEEE INM VI, page 309, 1999.
10. S. A. Hofmeyr, A. Somayaji, and S. Forrest. Intrusion detection using sequences of system calls. Journal of Computer Security, 6: 151-180, 1998.
11. P. Hoogenboom and J. Lepreau. Computer system performance problem detection using time series models. Proceedings of the USENIX Technical Conference, (USENIX Association: Berkeley, CAl, page 15, 1993.
12. P. Dhaeseleer, Forrest, and P. Helman. An immunological approach to change detection: algorithms, analysis, and implications. In Proceedings of the 1996 IEEE Symposium on Computer Security and Privacy (1996).
13. Snort. Intrusion detection system. http://www. snort. ory.
14. A. Somayaji and S. Forrest. Automated reponse using system-call delays. Proceedings of the 9th USENIX Security Symposium, page 185, 2000.
15. A. Somayaji and S. Forrest. Automated response using system-call delays. Proceedings of the 9th USENIX Security Symposium (USENIX Association; Berkeley, CAl, page 185, 2000.
16. A. Somayaji, S. Hofmeyr, and S. Forrest. Principles of a computer immune system. New Security Paradigms Workshop, ACM, September 1997: 75-82.