Using Observations of Invariant Behavior to Detect Malicious Agency in Distributed Environments

Lecture Notes in Informatics (LNI), Proceedings - Series of the Gesellschaft fur Informatik (GI)

Volumn P-140, Issue , 2008, Pages 55-72

  McEvoy, Thomas Richard ^a   Wolthusen, Stephen D ^a  

^a UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

CONDITION; DATA ELEMENTS; DATA SET; DISTRIBUTED ENVIRONMENTS; GLOBAL STATE; MALICIOUS ACTIVITIES; MALICIOUS ATTACK; PARTIAL ORDER;

MALWARE;

EID: 85134783150     PISSN: 16175468     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. Punit Chandra and Ajay D. Kshemkalyani. Causality-Based Predicate Detection across Space and Time. IEEE Transactions on Computers, 54(11):1438-1453, 2005.
2. Aaron Emigh. The Crimeware Landscape: Malware, Phishing, Identity Theft and Beyond. Journal of Digital Forensic Practice, 1:245 - 260, 2006.
3. Yingfang Fu, Jingsha He, and Guorui Li. A Distributed Intrusion Detection Scheme for Mobile Ad Hoc Networks. COMPSAC '07: Proceedings of the 31st Annual International Computer Software and Applications Conference - Vol. 2- (COMPSAC 2007), 02:75-80, 2007.
4. Vijay K. Garg. Elements of Distributed Computing, chapter 1, 2, 3, 4, 10, 11, 12, 20. John Wiley and Sons Inc, 2002.
5. Ashish Gehani and Surendar Chandra. PAST: Probabilistic Authentication of Sensor Timestamps. In ACSAC '06: Proceedings of the 22nd Annual Computer Security Applications Conference on Annual Computer Security Applications Conference, pages 439-448, Washington, DC, USA, 2006. IEEE Computer Society.
6. Greg Hoglund and James Butler. Rootkits. Addison-Wesley, 2005.
7. Steven A. Hofmeyr, Stephanie Forrest, and Anil Somayaji. Intrusion detection using sequences of system calls. Journal of Computer Security, 1998, 6(3):151-180, 1998.
8. Letian He and Yongqiang Sun. On Distributed Snapshot Algorithms. APDC '97: Proceedings of the 1997 Advances in Parallel and Distributed Computing Conference (APDC '97), page 291, 1997.
9. Oleg Kachirski and Ratan Guha. Effective Intrusion Detection Using Multiple Sensors in Wireless Ad Hoc Networks. In HICSS '03: Proceedings of the 36th Annual Hawaii International Conference on System Sciences (HICSS'03) - Track 2, page 57.1, Washington, DC, USA, 2003. IEEE Computer Society.
10. Samuel T. King, Z. Morley Mao, Dominic G. Lucchetti, and Peter M. Chen. Enriching Intrusion Alerts Through Multi-host Causality. In Proceedings of the Symposium on Network and Distributed Systems Security (NDSS), 2005.
11. Calvin Ko. Logic Induction of Valid Behavior Specifications for Intrusion Detection. SP '00: Proceedings of the 2000 IEEE Symposium on Security and Privacy, 00:0142, 2000.
12. Ajay D. Kshemkalyani. Temporal interactions of intervals in distributed systems. Journal of Computer and System Sciences, 52(2):287-298, 1996.
13. Michael E. Locasto, Janak J. Parekh, Angelos D. Keromytis, and Salvatore J. Stolfo. Towards Collaborative Security and P2P Intrusion Detection. In Proceedings of the IEEE Information Assurance Workshop (IAW), June 2005.
14. Adrian P. Lauf, Richard A. Peters, and William H. Robinson. Embedded Intelligent Intrusion Detection: A Behavior-Based Approach. AINAW '07: Proceedings of the 21st International Conference on Advanced Information Networking and Applications Workshops, 1:816-821, 2007.
15. J.R. Mitchell and V.K. Garg. Deriving Distributed Algorithms from a General Predicate Detector. Computer Software and Applications Conference, 1995. COMPSAC 95. Proceedings., Nineteenth Annual International, 00:268, 1995.
16. Neeraj Mittal and Vijay K. Garg. On Detecting Global Predicates in Distributed Computations. 21st IEEE International Conference on Distributed Computing Systems (ICDCS'01), 00:0003, 2001.
17. Naoyuki Nagatou and Takuo Watanabe. Run-Time Detection of Covert Channels. In ARES '06: Proceedings of the First International Conference on Availability, Reliability and Security, pages 577-584, Washington, DC, USA, 2006. IEEE Computer Society.
18. Chengzheng Sun and Wentong Cai. Capturing Causality by Compressed Vector Clock in Real-Time Group Editors. IPDPS '02: Proceedings of the 16th International Parallel and Distributed Processing Symposium, page 89, 2002.
19. Ivan Sklyarov. Programming Linux Hacker Tools Uncovered, chapter 21. A-LIST, LLC, 2007.
20. Peter Szor. The Art of Computer Virus Research and Defense. Addison-Wesley, 2005.
21. Ashis Tarafdar and Vijay K. Garg. Happened Before is the Wrong Model for Potential Causality. Technical Report ECE-PDS-1998-006, Parallel and Distributed Systems Laboratory, ECE Dept. University of Texas at Austin, 1998.
22. S. Venkatesan and Brahma Dathan. Testing and Debugging Distributed Programs Using Global Predicates. IEEE Transactions on Software Engineering, 21(2):163-177, 1995.