A sense of self for Unix processes

Keywords

Unix, Computer science, System call, Anomaly detection, Process (computing)

References

• Classification and detection of computer intrusionsSandeep Kumar — 1996
• A Software Architecture to Support Misuse Intrusion DetectionSandeep Kumar, Eugene H. Spafford — 1995
• Using Genetic Algorithms to Explore Pattern Recognition in the Immune SystemStephanie Forrest, Brenda Javornik, Robert E. Smith — 1993
• Security audit trail analysis using inductively generated predictive rulesHanlin Teng, K. Chen, Sha Lu — 1990
• Self-nonself discrimination in a computerStephanie Forrest, Alan S. Perelson, Luke R. Allen — 1994
• Property-based testing of privileged programsG. Fink, Karl Levitt — 1994
• An Intrusion-Detection ModelDorothy E. Denning — 1987
• Automated detection of vulnerabilities in privileged programs by execution monitoringCalvin Ko, G. Fink, Karl Levitt — 1994
• Self-Nonself Discrimination in a ComputerStephanie Forrest, Alan S. Perelson, Lawrence H. Allen — 1994

Cited by

• Filtering Techniques for Rapid User ClassificationTerran Lane — 1998
• Non-Control-Data Attacks Are Realistic ThreatsShuo Chen, Jun Xu, Emre C. Sezer — 2005
• Learning Useful System Call Attributes for Anomaly DetectionGaurav Tandon, Philip K. Chan — 2005
• A Host-Based Anomaly Intrusion Detection Model Based on Genetic ProgrammingPurui Su, Dequan Li, Dengguo Feng — 2003
• Host-Based Data Exfiltration Detection via System Call SequencesJustin M. Beaver, Brian Jewell — 2011
• Workload Hidden Markov Model for Anomaly DetectionJuan Manuel García-Samaniego, Tomás Navarrete, Carlos Ismael Orozco — 2006
• EXTENDED AUTOMATA-BASED APPROACHES TO INTRUSION DETECTIONJoel W. Branch — 2003
• Anomaly detection in dynamic execution environmentsStephanie Forrest, Hajime Inoue — 2005
• An Implementation of Mining Prototype System for Network Attack AnalysisEun-Hee Kim — 2004
• Evolutionary neural networks for anomaly detection based on the behavior of a programJoshua C. C. Pun, Frederick H. Lochovsky — 2005
• Mitigating the Insider Threat with High-Dimensional Anomaly DetectionSmriti. Pramanick, S. P. Rajagopalan, Eric van den Berg — 2004
• Code injection in C and C++: a survey of vulnerabilities and countermeasuresYves Younan, Wouter Joosen, Frank Piessens — 2004
• Profiler-2000: Attacking the Insider ThreatRoy A. Maxion, Kymie Tan, S. S. Killourhy — 2005
• The Internet Motion Sensor: A distributed global scoped Internet threat monitoring systemEvan Cooke, Michael Bailey, David Watson — 2004
• Using Model-based Intrusion Detection for SCADA NetworksSteven W. Cheung, Bruno Dutertre, Martin Fong — 2006
• Distance Measures for Anomaly Intrusion DetectionWei Wang, Sylvain Gombault — 2007
• Using ACL2 to Verify Security Properties of Specification- based Intrusion Detection SystemsTao Song, Jim Alves-Foss, Calvin Ko — 2003
• PHAD: packet header anomaly detection for identifying hostile network trafficMatthew V. Mahoney, Philip K. Chan — 2001
• Performance Evaluation of Anomaly-Based Detection MechanismsKymie Tan, Roy A. Maxion — 2004
• Self-Organising Applications: A SurveySoraya Kouadri Mostéfaoui, Omer Rana, Noria Foukia — 2003

Related papers

• A Study in Using Neural Networks for Anomaly and Misuse DetectionA. K. Ghosh, Aaron Schwartzbard — 1999
• Computer security threat monitoring and surveillanceJoseph Anderson — 1980
• Computer immunologyStephanie Forrest, Steven Hofmeyr, Anil Somayaji — 1997
• EMERALD: Event Monitoring Enabling Responses to Anomalous Live DisturbancesPhillip Porras, Peter G. Neumann, Ravenswood Avenue — 1997
• Anomaly detection using call stack informationH.H. Feng, Oleg Kolesnikov, Prahlad Fogla — 2003
• An Intrusion-Detection ModelDorothy E. Denning — 1987
• Mimicry attacks on host-based intrusion detection systemsDavid Wagner, Paolo Soto — 2002
• Detecting intrusions using system calls: alternative data modelsC. Warrender, Stephanie Forrest, Barak A. Pearlmutter — 1999
• Automated Response Using System-Call DelayAnil Somayaji, Stephanie Forrest — 2000