Towards Ground Truthing Observations in Gray-Box Anomaly Detection

• المؤلفون الرئيسيون: MING, Jiang, ZHANG, Haibin, GAO, Debin
• التنسيق: text
• اللغة: English
• منشور في: Institutional Knowledge at Singapore Management University 2011
• الموضوعات: anomaly detection; taint analysis; system call monitor; ground truthing; Information Security
• الوصول للمادة أونلاين: https://ink.library.smu.edu.sg/sis_research/2006; https://ink.library.smu.edu.sg/context/sis_research/article/3005/viewcontent/nss11.pdf

Anomaly detection has been attracting interests from researchers due to its advantage of being able to detect zero-day exploits. A gray-box anomaly detector first observes benign executions of a computer program and then extracts reliable rules that govern the normal execution of the program. Howeve...