On Gray-Box Program Tracking for Anomaly Detection

• المؤلفون الرئيسيون: GAO, Debin, Reiter, Michael K., SONG, Dawn
• التنسيق: text
• اللغة: English
• منشور في: Institutional Knowledge at Singapore Management University 2004
• الموضوعات: Information Security
• الوصول للمادة أونلاين: https://ink.library.smu.edu.sg/sis_research/1241; http://dl.acm.org/citation.cfm?id=1251383

Many host-based anomaly detection systems monitor a process ostensibly running a known program by observing the system calls the process makes. Numerous improvements to the precision of this approach have been proposed, such as tracking system call sequences, and various "gray-box" extensi...