Behavioral Distance for Intrusion Detection

• المؤلفون الرئيسيون: GAO, Debin, Reiter, Michael K., SONG, Dawn
• التنسيق: text
• اللغة: English
• منشور في: Institutional Knowledge at Singapore Management University 2005
• الموضوعات: Information Security
• الوصول للمادة أونلاين: https://ink.library.smu.edu.sg/sis_research/1243; http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.113.7936

We introduce a notion, behavioral distance, for evaluating the extent to which processes—potentially running different programs and executing on different platforms—behave similarly in response to a common input. We explore behavioral distance as a means to detect an attack on one process that cause...