Two state-based approaches to program-based anomaly detection (2000)
| Venue: | In Proceedings of the 16th Annual Computer Security Applications Conference |
| Citations: | 16 - 0 self |
BibTeX
@INPROCEEDINGS{Michael00twostate-based,
author = {C. C. Michael and Anup Ghosh},
title = {Two state-based approaches to program-based anomaly detection},
booktitle = {In Proceedings of the 16th Annual Computer Security Applications Conference},
year = {2000},
pages = {21},
publisher = {IEEE Computer Society}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
AbstractThis paper describes two recently developed intrusion detection algorithms, and gives experimental results on theirperformance. The algorithms detect anomalies in execution audit data. One is a simply constructed finite-state machine,and the other monitors statistical deviations from normal program behavior. The performance of these algorithms isevaluated as a function of the amount of available training data, and they are compared to the well-known intrusion de-tection technique of looking for novel n-grams in computeraudit data.
Citations
| 258 | Detection of Abrupt Changes: Theory and Application - Basseville, Nikiforov - 1993 |
| 17 | Information bounds and quick detection of parameter changes in stochastic systems - Lai - 1998 |
