Forensix: A robust, high-performance reconstruction system

Proceedings - International Conference on Distributed Computing Systems

Volumn , Issue , 2005, Pages

  Goel, Ashvin ^a   Feng, Wu Chang ^b   Maier, David ^b   Feng, Wu Chi ^b   Walpole, Jonathan ^b  

^a UNIVERSITY OF TORONTO   (Canada)

^b PORTLAND STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COST BENEFIT ANALYSIS; QUERY PROCESSING;

AUTOMATED ANALYSIS; COMPUTING SYSTEM; CPU RESOURCES; DESIGN EVALUATION; DESIGN IMPLEMENTATION; FORENSIC ANALYSIS; NETWORK RESOURCE; PERFORMANCE; RECONSTRUCTION SYSTEMS; STORAGE RESOURCES;

COST REDUCTION;

EID: 84960382252     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDCSW.2005.62     Document Type: Conference Paper

References (12)

1. 4N6 Developers. The Forensix Project. http://forensix.sourceforge.net/.
2. M. Crosbie and B. Kuperman. A Building Block Approach to Intrusion Detection. In Recent Advances in Intrusion Detection (RAID 2001), Davis, California, October 2001. Springer.
3. G. Dunlap, S. King, S. Cinar, M. Basrai, and P. Chen. ReVirt: Enabling Intrusion Analysis through Virtual-Machine Logging and Replay. In Proceedings of OSDI, December 2002.
4. E. Eskin, W. Lee, and S. Stolfo. Modeling System Calls for Intrusion Detection with Dynamic Window Sizes. In Proceedings of DARPA Information Survivability Converence and Exposition II, June 2001.
5. T. Garfinkel. Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools. In Proceedings of the Network and Distributed System Security Symposium, February 2003.
6. S. A. Hofmeyr, S. Forrest, and A. Somayaji. Intrusion Detection Using Sequences of System Calls. Journal of Computer Security, 6(3):151–180, 1998.
7. iSEC Security Research. Linux Kernel ptrace/kmod Local Root Exploit. http://downloads.securityfocus.com/vulnerabilities/exploits/ptrace-kmod%.c, 2003.
8. K. Mitnick. Takedown Transcripts: 1995 Feb 5 11:48:08. http://www.takedown.com/cgi-bin/transcript.pl?4002, February 1995.
9. mshmro.com. http://www.mshmro.com/.
10. P. Starzetz. Linux kernel do mremap VMA limit local privelege excalation vulnerability. http://www.isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt, 2004.
11. L. Purdie and G. Cora. SNARE - System iNtrusion Analysis & Reporting Environment. http://www.intersectalliance.com/projects/Snare/. Viewed in Jan 2003.
12. A. Somayaji and S. Forrest. Automated Response Using System-Call Delays. In Proceedings of the USENIX Security Symposium, pages 185–198, August 2000.