A Sense of Self for Unix Processes (1996)
Cached
Download Links
- [www.cs.unm.edu]
- [cs.unm.edu]
- [www.cs.unm.edu]
- [www.eecs.harvard.edu]
- [www.eecs.harvard.edu]
- [www.eecs.harvard.edu]
- DBLP
Other Repositories/Bibliography
| Venue: | In Proceedings of the 1996 IEEE Symposium on Security and Privacy |
| Citations: | 457 - 25 self |
BibTeX
@INPROCEEDINGS{Forrest96asense,
author = {Stephanie Forrest and Steven A. Hofmeyr and Anil Somayaji and Thomas A. Longstaff},
title = {A Sense of Self for Unix Processes},
booktitle = {In Proceedings of the 1996 IEEE Symposium on Security and Privacy},
year = {1996},
pages = {120--128},
publisher = {IEEE Computer Society Press}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
A method for anomaly detection is introduced in which "normal" is defined by short-range correlations in a process ' system calls. Initial experiments suggest that the definition is stable during normal behavior for standard UNIX programs. Further, it is able to detect several common intrusions involving sendmail and lpr. This work is part of a research program aimed at building computer security systems that incorporate the mechanisms and algorithms used by natural immune systems. 1 Introduction We are interested in developing computer security methods that are based on the way natural immune systems distinguish self from other. Such "artificial immune systems" would have richer notions of identity and protection than those afforded by current operating systems, and they could provide a layer of general-purpose protection to augment current computer security systems. An important prerequisite of such a system is an appropriate definition of self, which is the subject of this paper. W...
Citations
No citations identified.
