(Enter summary)
Abstract: In this paper we describe our preliminary experiments to extend the work pioneered by Forrest (see Forrest et al. 1996) on learning the (normal and abnormal) patterns of Unix processes. These patterns can be used to identify misuses of and intrusions in Unix systems. We formulated machine learning tasks on operating system call sequences of normal and abnormal (intrusion) executions of the Unix sendmail program. We show that our methods can accurately distinguish all abnormal executions of... (Update)
Cited by: More
On the Detection of - Anomalous System Call (2003)
(Correct)
Combining Behavior Models to Secure Email Systems - Stolfo, Hu, Li, Hershkop.. (2003)
(Correct)
A Behavior-based Approach To Securing Email Systems - Stolfo, Hershkop, Wang.. (2003)
(Correct)
Similar documents (at the sentence level):
34.1%: Learning Patterns from Unix Process Execution Traces for.. - Lee, Stolfo (1997)
(Correct)
23.0%: Data Mining Approaches for Intrusion Detection - Lee, Stolfo (1998)
(Correct)
23.0%: A Data Mining Framework for Constructing Features and Models for.. - Lee (1999)
(Correct)
Active bibliography (related documents): More All
0.0: A Sense of Self for Unix Processes - Forrest, Hofmeyr, Somayaji.. (1996)
(Correct)
0.0: A Data Mining Framework for Building Intrusion Detection Models - Lee, Stolfo, Mok (1999)
(Correct)
0.0: A Framework for Constructing Features and Models for Intrusion.. - Lee, Stolfo (2000)
(Correct)
Similar documents based on text: More All
0.3: Algorithms For Mining System Audit Data - Lee, Stolfo, Mok (1999)
(Correct)
0.2: Anomalous Payload-based Network Intrusion Detection - Wang, Stolfo (2004)
(Correct)
0.2: Credit Card Fraud Detection Using Meta-Learning.. - Stolfo, Fan, Lee.. (1997)
(Correct)
Related documents from co-citation: More All
13: A sense of self for unix processes
- Forrest, Hofmeyr et al. - 1996
9: Detecting Intrusions Using System Calls: Alternative Data Models
- Christina, Forrest et al. - 1999
8: Fast effective rule induction
- Cohen - 1995
BibTeX entry: (Update)
W. Lee, S. J. Stolfo, and P. K. Chan. Learning patterns from unix process execution traces for intrusion detection. In AAAI Workshop: AI Approaches to Fraud Detection and Risk Management, pages 50--56. AAAI Press, July 1997. http://citeseer.ist.psu.edu/lee97learning.html More
@inproceedings{ lee97learning,
author = "Wenke Lee and Salvatore J. Stolfo and Philip K. Chan",
title = "Learning Patterns from Unix Process Execution Traces for Intrusion Detection",
booktitle = "Proceedings of the AAAI97 workshop on AI Approaches to Fraud Detection and Risk Management",
pages = "50--56",
location = "Providence, RI",
year = "1997",
publisher = "AAAI Press",
url = "citeseer.ist.psu.edu/lee97learning.html" }
Citations (may not include all citations):
248
Fast Effective Rule Induction
- Cohen - 1995
105
State Transition Analysis: A Rule-Based Intrusion Detection ..
- Ilgun, Kemmerer et al. - 1995
59
Toward Parallel and Distributed Learning by Meta-Learning
- Chan, Stolfo - 1993
56
A Real-time Intrusion Detection Expert System (context) - Lunt, Tamaru et al. - 1992
32
A Software Architecture to Support Misuse Intrusion Detectio..
- Kumar, Spafford - 1995
29
Credit Card Fraud Detection Using Meta-Learning: Issues and ..
- Stolfo, Fan et al. - 1997
24
Searching for Structure in Multiple Streams of Data
- Oates, Cohen - 1996
The graph only includes citing articles where the year of publication is known.
Documents on the same site (http://www.cs.columbia.edu/~sal/JAM/PROJECT/recent-project-papers.html): More
A Comparative Evaluation of Voting and Meta-learning on.. - Chan, Stolfo (1995)
(Correct)
Learning with Non-uniform Class and Cost Distributions: Effects.. - Chan, al. (1998)
(Correct)
Meta-Learning in Distributed Data Mining Systems: Issues.. - Prodromidis, Chan, al. (2000)
(Correct)
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC