Detecting anomalous and unknown intrusions against programs

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 1998, Pages 259-267

  Ghosh, Anup K ^a   Wanken, James ^a   Charron, Frank ^a  

^a Cigital   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTER SYSTEM FIREWALLS; INTRUSION DETECTION; NETWORK SECURITY; SECURITY SYSTEMS;

ANOMALY DETECTION; CORPORATE ASSETS; INTERNET CONNECTION; MISUSE DETECTION; NORMAL BEHAVIOR; SECURITY INTRUSION; SECURITY POLICY; SOFTWARE SYSTEMS;

COMPUTER VIRUSES;

EID: 85019678573     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.1998.738646     Document Type: Conference Paper

References (16)

1. [D'haeseleer et al., 1996] D'haeseleer, P., Forrest, S., and Helman, P. (1996). An immunological approach to change detection: Algorithms, analysis and implications. In IEEE Symposium on Security and Privacy.
2. [Forrest et al., 1997] Forrest, S., Hofmeyr, S., and Somayaji, A. (1997). Computer immunology. Communications of the ACM, 40(10):88-96.
3. [Garvey and Lunt, 1991] Garvey, T. and Lunt, T. (1991). Model-based intrusion detection. In Proceedings of the 14th National Computer Security Conference.
4. [Ilgun, 1992] Ilgun, K. (1992). Ustat: A real-time in-trusion detection system for unix. Master's thesis, Computer Science Dept, UCSB.
5. [Jain et al., 1996] Jain, A., Mao, J., and Mohiuddin, K. M. (1996). Artificial neural networks: A tutorial. IEEE Computer, 29(3):31-33.
6. [Kumar and Spafford, 1996] Kumar, S. and Spafford, E. (1996). A pattern matching model for misuse intrusion detection. The COAST Project, Purdue University.
7. [Lane and Brodley, 1997] Lane, T. and Brodley, C. (1997). An application of machine learning to anomaly detection. In Proceedings of the 20th National Information Systems Security Conference, pages 366-377.
8. [Lippmann, 1991] Lippmann, R. (1991). An Introduc-tion to Computing with Neural Nets, chapter Part 1, pages 5-23. IEEE Press, Piscataway, NJ. in Neural Networks Theoretical Foundations and Analysis.
9. [Lunt, 1990] Lunt, T. (1990). Ides: an intelligent system for detecting intruders. In Proceedings of the Symposium: Computer Security, Threat and Coun-termeasures. Rome, Italy.
10. [Lunt, 1993] Lunt, T. (1993). A survey of intru-sion detection techniques. Computers and Security, 12:405-418.
11. [Lunt and Jagannathan, 1988] Lunt, T. and Jagannathan, R. (1988). A prototype real-time intrusion-detection system. In Proceedings of the 1988 IEEE Symposium on Security and Privacy.
12. [Lunt et al., 1992] Lunt, T., Tamaru, A., Gilham, F., Jagannthan, R., Jalali, C., Javitz, H., Valdos, A., Neumann, P., and Garvey, T. (1992). A real-time intrusion-detection expert system (ides). Technical Report, Computer Science Laboratory, SRI Internationnal.
13. [Miller et al., 1995] Miller, B., Koski, D., Lee, C., Ma-ganty, V., Murthy, R., Natarajan, A., and Steidl, J. (1995). Fuzz revisted: A re-examination of the reliability of unix utilities and services. Technical report, University of Wisconsin, Computer Sciences Dept.
14. [Monrose and Rubin, 1997] Monrose, F. and Rubin, A. (1997). Authentication via keystroke dynamics. In 4th ACM Conference on Computer and Communications Security.
15. [Porras and Kemmerer, 1992] Porras, P. and Kemmerer, R. (1992). Penetration state transition analysis -a rule-based intrusion detection approach. In Eighth Annual Computer Security Applications Conference, pages 220-229. IEEE Computer Soci-ety Press.
16. [Porras and Neumann, 1997] Porras, P. and Neumann, P. (1997). Emerald: Event monitoring enabling responses to anomalous live disturbances. In Proceedings of the 20th National Information Systems Security Conference, pages 353-365.