NORT: Runtime Anomaly-based Monitoring of Malicious Behavior for Windows

• Main Authors: MILEA, Narcisa Andrea, KHOO, Siau-Cheng, LO, David, POP, Cristi
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2011
• Subjects: Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/1404; http://dx.doi.org/10.1007/978-3-642-29860-8_10
• Institution: Singapore Management University

Protecting running programs from exploits has been the focus of many host-based intrusion detection systems. To this end various formal methods have been developed that either require manual construction of attack signatures or modelling of normal program behavior to detect exploits. In terms of the...