Linux - Open Source White Papers
Anomaly Detection Using Self/Nonself Discrimination for the Linux Kernel
Overview This paper discusses how computers can protect themselves from different forms of attacks, mis-configurations, and program errors. The work is inspired by the immune system and in a similar vein to the immune system the system learns how to distinguish self from nonself. The system is implemented as a couple of modules to the Linux kernel and analyses each system call of the monitored processes. To build and analyse profiles of the system calls it have implemented three different methods; a table lookup method, a feed-forward neural network, and an Elman recurrent neural network. Experiments show that this system can detect several methods of intrusion including buffer overflow attacks, format string exploits, and Trojan code.
| Publisher | Abstract Void Computing | File Format | |
|---|---|---|---|
| Date Published | June 2003 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 2 out of 5 users found this white paper useful
White Paper RSS
Download
Register
