Intrusion detection via system call traces

@article{citeulike:368361, abstract = {Unusual behavior in computer systems can be detected by monitoring the system calls being executed by programs. Analysis of the temporal ordering of these calls reveals that such anomalies are localized within traces and that normal program behavior can be described compactly using deterministic finite automata. This article presents preliminary work in analyzing system call traces, particularly their structure during normal and anomalous behavior}, author = {Kosoresow, A. P. and Hofmeyer, S. A. }, citeulike-article-id = {368361}, journal = {Software, IEEE}, number = {5}, pages = {35--42}, posted-at = {2005-10-28 05:17:29}, priority = {2}, title = {Intrusion detection via system call traces}, url = {http://ieeexplore.ieee.org/xpls/abs\_all.jsp?arnumber=605929}, volume = {14}, year = {1997} }

TY - JOUR ID - citeulike:368361 L3 - citeulike-article-id:368361 TI - Intrusion detection via system call traces JF - Software, IEEE VL - 14 IS - 5 SP - 35 EP - 42 N2 - Unusual behavior in computer systems can be detected by monitoring the system calls being executed by programs. Analysis of the temporal ordering of these calls reveals that such anomalies are localized within traces and that normal program behavior can be described compactly using deterministic finite automata. This article presents preliminary work in analyzing system call traces, particularly their structure during normal and anomalous behavior AU - Kosoresow, AP AU - Hofmeyer, SA PY - 1997/// UR - http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=605929 ER -