Detecting insider threats by monitoring system call activity

IEEE Systems, Man and Cybernetics Society Information Assurance Workshop

Volumn , Issue , 2003, Pages 45-52

  Nguyen, N ^a   Reiher, P ^a   Kuenning, G H ^b  

^a University of California   (United States)

^b HARVEY MUDD COLLEGE   (United States)

Author keywords

Companies; Computer science; Computer security; Computerized monitoring; Data mining; File systems; Intrusion detection; System testing; Telecommunication traffic; Watches

Indexed keywords

COMPUTER SCIENCE; CYBERNETICS; DATA MINING; FILE ORGANIZATION; INDUSTRY; INTRUSION DETECTION; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC; WATCHES;

EXPERIMENTAL SYSTEM; FILE SYSTEMS; INSIDER THREAT; MONITOR SYSTEM; MONITORING SYSTEM; RELATED SYSTEMS; SYSTEM TESTING; UNUSUAL BEHAVIORS;

MONITORING;

EID: 84946410215     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SMCSIA.2003.1232400     Document Type: Conference Paper

References (12)

1. S. Axelsson. Intrusion Detection Systems: A Survey and Taxonomy. Technical Report. Department of Computer Engineering, Chalmers University of Technology, Sweden, March 2000.
2. S. A. Hofmeyr, S. Forrest, A. Somayaji. Intrusion Detection Using Sequences of System Calls. Journal of Computer Security, 6(3): 151-180, 1998.
3. C. Ko, M. Ruschitzka, and K. Levitt. Execution Monitoring of Security-Critical Programs in Distributed Systems: A Specification-Based Approach. In Proceedings of the 1997 IEEE Symposium on Security and Privacy, Vol. ix, pp. 175-187, Oakland, CA, USA, May 1997.
4. th ACM Symposium on Operating System Principles, pp. 264-175, 1997.
5. th National Computer Security Conference, pp. 11-21, October 1994.
6. W. Lee. A Data Mining Framework for Constructing Features and Models for Intrusion Detection Systems. PhD Thesis, Computer Science Department, Columbia University, 1999.
7. W. Lee, S. J. Stolfo. Adaptive Intrusion Detection: A Data Mining Approach. In Artificial Intelligence Review, 14:533-567, 2001
8. W. Lee, S. J. Stolfo, K. Mok. A Data Mining Framework for Building Intrusion Detection Models. In IEEE Symposium on Security and Privacy, Berkeley, California, May 1999.
9. B. Mukherjee, L. Heberlein, and K. Levitt. Network Intrusion Detection. IEEE Network, June 1994.
10. M. Sebring, E. Shellhouse, M. Hanna, and Whitehurst. Expert Systems in Intrusion Detection: A Case Study. In Proceedings of the Summer USENIX Conference, pp. 74-81, Baltimore, Maryland, 17-20 October 1988.
11. st USENIX Workshop on Intrusion Detection and Network Monitoring, April 1999.
12. D. Wagner, J. Foster, E. Brewer, A. Aiken. A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities. In Proceeding of the Year 2000 Network and Distributed Systems Security Symposium, 2000.