Section: .. / papers / IDS / hids /
|
White paper section discussing host-based intrusion detection systems.
|
| /// File Name: |
A-Real-Time-IDS-based-on-Learning.p..> |
Description:
|
A RealTime Intrusion Detection System based on Learning Program Behavior.
| | File Size: | 291280 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 84238c1d65436ed0f60fb20cceafd411 |
|
| /// File Name: |
An-Application-of-Machine-Learning-..> |
Description:
|
An Application of Machine Learning to Anomaly Detection.
| | File Size: | 127982 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 417f35d7adbe78b0c6307311981c0957 |
|
| /// File Name: |
An-Immunological-Approach-to-Change..> |
Description:
|
An Immunological Approach to Change Detection: Algorithms, Analysis and Implications.
| | File Size: | 448198 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 2a2b542d736203c02905a744855dba33 |
|
| /// File Name: |
An-Immunological-Approach-to-Change..> |
Description:
|
An Immunological Approach to Change Detection: Theoretical Results.
| | File Size: | 57179 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 9b7e5aae518ec5d6aef156c1c8478a92 |
|
| /// File Name: |
Automated-Response-Using-System-Cal..> |
Description:
|
Automated Response Using SystemCall Delays.
| | File Size: | 106061 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | dd8349f140a2cd146e795ce1965e28d5 |
|
| /// File Name: |
Automating-Mimicry-Attacks-Using-St..> |
Description:
|
Automating Mimicry Attacks Using Static Binary Analysis.
| | File Size: | 360424 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | f08eaabba049edacb27337c3fe7ed30d |
|
| /// File Name: |
Detecting-Intrusions-using-System-C..> |
Description:
|
Detecting Intrusions using System Calls: Alternative Data Models.
| | File Size: | 187412 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 0952329f9a95bc150ef963e8364d61b5 |
|
| /// File Name: |
Efficient-ID-using-Automaton-Inlini..> |
Description:
|
Efficient Intrusion Detection using Automaton Inlining.
| | File Size: | 389697 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | ace88b81821604ec16743e374cce4bcf |
|
| /// File Name: |
Finding-the-Vocabulary-of-Program-B..> |
Description:
|
Finding the Vocabulary of Program Behavior Data for Anomaly Detection.
| | File Size: | 130358 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 9c512d2710669da9175290b0dcc8f5b4 |
|
| /// File Name: |
Information-Theoretic-Measures-For-..> |
Description:
|
InformationTheoretic Measures For Anomaly Detection.
| | File Size: | 312678 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 1d78254f6e6b4db394de91f4a726ab95 |
|
| /// File Name: |
Intrusion-Detection-using-Sequences..> |
Description:
|
Intrusion Detection using Sequences of System Calls.
| | File Size: | 147638 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | faab3a484f0449c0ffbf4499ed1a1515 |
|
| /// File Name: |
Learning-Patterns-from-Unix-Process..> |
Description:
|
Learning Patterns from Unix Process Execution Traces for Intrusion Detection.
| | File Size: | 63838 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 28f942dc0204ef86a96d60a0152e791e |
|
| /// File Name: |
Learning-Program-Behaviour.pdf |
Description:
|
Learning Program Behaviour Profiles for Intrusion Detection.
| | File Size: | 220718 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 7b54da49ec055ea8778289423d224319 |
|
| /// File Name: |
Learning-to-Detect-Malicious-Execut..> |
Description:
|
Learning to Detect Malicious Executables in the Wild.
| | File Size: | 216519 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | e39c058e42461830263c45d457b58124 |
|
| /// File Name: |
Modeling-System-Calls-for-IDS.pdf |
Description:
|
Modeling System Calls for Intrusion Detection with Dynamic Window Sizes.
| | File Size: | 127551 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | bf22279adbdac5e5b9a6263f675cc234 |
|
| /// File Name: |
On-gray-box-program-tracking-for-an..> |
Description:
|
On graybox program tracking for anomaly detection.
| | File Size: | 259435 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 29cab56186f41283aabcabac5c13db19 |
|
| /// File Name: |
On-the-Detection-of-Anomalous-Syste..> |
Description:
|
On the Detection of Anomalous System Call Arguments.
| | File Size: | 245986 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 73211d76f2d1227cf758a325f075e868 |
|
| /// File Name: |
Semantics-Aware-Malware-Detection.p..> |
Description:
|
SemanticsAware Malware Detection.
| | File Size: | 285774 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 40e27c959fc89ddb994d55ffabcaed88 |
|
| /// File Name: |
Sequence-Matching-and-Learning-in-A..> |
Description:
|
Sequence Matching and Learning in Anomaly Detection for Computer Security.
| | File Size: | 152104 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 572531e183a9071755fc68b6d9401722 |
|
| /// File Name: |
Seurat-A-Pointillist-Approach-to-An..> |
Description:
|
Seurat: A Pointillist Approach to Anomaly Detection.
| | File Size: | 734236 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | ae8248f6c84dcb245992220a9054eacd |
|
| /// File Name: |
STATL-An-Attack-Language-for-State-..> |
Description:
|
STATL An Attack Language for State based Intrusion Detection.
| | File Size: | 514467 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 11d2da10454793eba8f044048c145e90 |
|
| /// File Name: |
Temporal-Sequence-Learning-and-Data..> |
Description:
|
Temporal Sequence Learning and Data Reduction for Anomaly Detection.
| | File Size: | 287395 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 1ffa59c9171a815a7cbb9bf83d95281f |
|
| /// File Name: |
Toward-Stealthy-Malware-Detection.p..> |
Description:
|
Toward Stealthy Malware Detection.
| | File Size: | 882100 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | 8ece4b4d508a3e13428eb02314bd0e92 |
|
| /// File Name: |
Two-state-based-approaches-to-Progr..> |
Description:
|
Two statebased approaches to Program-based Anomaly Detection.
| | File Size: | 135088 | | Last Modified: | Nov 1 17:23:01 2006 |
| MD5 Checksum: | c0b46817a189211aff77ffdce24e62ed |
|
| /// File Name: |
Undermining-Anomaly-based-IDS.pdf |
Description:
|
Undermining an Anomalybased Intrusion Detection System Using Common Exploits.
| | File Size: | 159960 | | Last Modified: | Nov 1 17:23:02 2006 |
| MD5 Checksum: | 443dd5a514c54a50ee9f99f326c78224 |
|
|
|
|
|