Bridging the Gap between Data-Flow and Control-Flow Analysis for Anomaly Detection

• Main Authors: LI, Peng, PARK, Hyundo, GAO, Debin, Fu, Jianming
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2008
• Subjects: system call argument; data-flow; control-flow; anomaly detection; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/441
• Institution: Singapore Management University

Host-based anomaly detectors monitor the control-flow and data-flow behavior of system calls to detect intrusions. Control-flow-based detectors monitor the sequence of system calls, while data-flow-based detectors monitor the data propagation among arguments of system calls. Besides pointing out tha...