KaydedilenlerDerginizi ekleyin

Dergiler / International Journal of Information Security Science / 2016 / Cilt: 5 - Sayı: 2

A Framework for Studying New Approaches to Anomaly Detection

Esra Nergis YOLACAN
David R. KAELİ
Sayfa
39–50
Yayın Tarihi
2016-06-01
DOI
—
🏛️Bu makalenin bibliyografik verileri ve tam metin bağlantısı DergiPark üzerinden sağlanmıştır.
DergiPark Kaydı ↗
✨

Yapay Zeka Hızlı Bakış & Çıkarımlar

AI Insight
⚡ TL;DR(1 Cümlede Hızlı Çıkarım)

Test and detection results show the proposed approach provides fast and accurate anomaly detection by applying context-aware behavior learning.

📌 3 Maddede Bu Makale

🎯
Amaç & Hipotez:In this work, we describe a new framework for an anomaly-based intrusion detection system using system call traces.
📊
Temel Bulgular & Veri:System calls provide an interface between an application and the operating system’s kernel.
💡
Sonuç & Katkı:Test and detection results show the proposed approach provides fast and accurate anomaly detection by applying context-aware behavior learning.
🔬Tür:Araştırma Makalesi
📍Kapsam:Genişletilmiş Akademik Örneklem
⚙️Değişkenler:Intrusion detection · anomaly · system call traces

Abstract

In this work, we describe a new framework for an anomaly-based intrusion detection system using system call traces. System calls provide an interface between an application and the operating system’s kernel. Since a program frequently requests services via system calls, a trace of these system calls provides a rich profile of program behavior. But we need to use efficient and effective methods while extracting the underlying behavior. In this paper we present an illustrative example to describe how to apply our proposed approach on system call traces for cyber security. We discuss the details of system call anomaly detection by considering various normal behaviors in program traces. Test and detection results show the proposed approach provides fast and accurate anomaly detection by applying context-aware behavior learning.

🔖

Bu Makaleye Atıf Yap

YOLACAN, E. N., KAELİ, D. R. (2016). A Framework for Studying New Approaches to Anomaly Detection. International Journal of Information Security Science, Cilt: 5 - Sayı: 2, 39–50. https://ajindex.com/articles/832667

📄 Tam Metin PDF Okuyucu

📄

PDF görüntüleyici hazırlanıyor...

Kaynakça (8)

  1. V. J. Hodge and J. Austin, “A survey of outlier detection methodologies,” Artificial Intelligence Review, vol. 22, no. 2, pp. 85–126, 2004.
  2. D. C. Montgomery, C. L. Jennings, and M. Kulahci, Introduc- tion to time series analysis and forecasting. Sons, 2011, vol. 526. John Wiley & A. Kl¨aser, M. Marszałek, C. Schmid, and A. Zisserman, “Hu- man focused action localization in video,” in Trends and Topics in Computer Vision. G. Aloysius and D. Binu, “An approach to products placement in supermarkets using prefixspan algorithm,” Journal of King Saud University-Computer and Information Sciences, vol. 25, no. 1, pp. 77–87, 2013. T.-c. Fu, “A review on time series data mining,” Engineering Applications of Artificial Intelligence, vol. 24, no. 1, pp. 164– 181, 2011.
  3. I. Kinde, J. Wu, N. Papadopoulos, K. W. Kinzler, and B. Vo- gelstein, “Detection and quantification of rare mutations with massively parallel sequencing,” Proceedings of the National Academy of Sciences, vol. 108, no. 23, pp. 9530–9535, 2011. K.-P. Chan and A.-C. Fu, “Efficient time series matching by wavelets,” in Data Engineering, 1999. Proceedings., 15th International Conference on. Z. Xing, J. Pei, and E. Keogh, “A brief survey on sequence classification,” ACM SIGKDD Explorations Newsletter, vol. 12, no. 1, pp. 40–48, 2010.
  4. X. D. Hoang, J. Hu, and P. Bertok, “A multi-layer model for anomaly intrusion detection using program sequences of system calls,” in Networks, ICON2003. The 11th IEEE International Conference on. X. Hoang and J. Hu, “An efficient hidden markov model training scheme for anomaly intrusion detection of server applications based on system calls,” in Networks, 2004.(ICON 2004). Pro- ceedings. 12th IEEE International Conference on, vol. 2. IEEE, 2004, pp. 470–474.
  5. C. Kruegel, D. Mutz, F. Valeur, and G. Vigna, “On the detection of anomalous system call arguments,” in Computer Security– ESORICS 2003.
  6. D. Mutz, F. Valeur, G. Vigna, and C. Kruegel, “Anomalous system call detection,” ACM Transactions on Information and System Security (TISSEC), vol. 9, no. 1, pp. 61–93, 2006.
  7. F. Maggi, M. Matteucci, and S. Zanero, “Detecting intrusions through system call sequence and argument analysis,” Depend- able and Secure Computing, IEEE Transactions on, vol. 7, no. 4, pp. 381–395, 2010. G. Tandon and P. Chan, “Learning rules from system call arguments and sequences for anomaly detection,” in ICDM Workshop on Data Mining for Computer Security (DMSEC), 2003, pp. 20–29.
  8. D.-K. Kang, D. Fuller, and V. Hona