Behavioral Distance Measurement using Hidden Markov Models

• Main Authors: GAO, Debin, Reiter, Michael K., SONG, Dawn
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2006
• Subjects: intrusion detection; anomaly detection; system call; behavioral distance; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/1244; http://dx.doi.org/10.1007/11856214_2
• Institution: Singapore Management University

The behavioral distance between two processes is a measure of the deviation of their behaviors. Behavioral distance has been proposed for detecting the compromise of a process, by computing its behavioral distance from another process executed on the same input. Provided that the two processes are d...