Matches in SemOpenAlex for { <https://semopenalex.org/work/W2023821675> ?p ?o ?g. }
- W2023821675 endingPage "251" @default.
- W2023821675 startingPage "238" @default.
- W2023821675 abstract "Program execution profiles have been extensively and successfully used in several dynamic analysis fields such as software testing and fault localization. This paper presents a pattern-matching approach implemented as an application-based intrusion (and failure) detection system that operates on signatures generated from execution profiles. Such signatures are not descriptions of exploits, i.e. they do not depend on the syntax or semantics of the exploits, but instead are descriptions of program events that correlate with the exploitation of program vulnerabilities. A vulnerability exploit is generally correlated with the execution of a combination of program elements, such as statements, branches, and definition–use pairs. In this work we first analyze the execution profiles of a vulnerable application in order to identify such suspicious combinations, define signatures that describe them, and consequently deploy these signatures within an intrusion detection system that performs online signature matching. To evaluate our approach, which is also applicable to online failure detection, we implemented it for the Java platform and applied it onto seven open-source applications containing 30 vulnerabilities/defects for the purpose of the online detection of attacks/ failures. Our results showed that our approach worked very well for 26 vulnerabilities/defects (86.67%) and the overhead imposed by the system is somewhat acceptable as it varied from 46% to 102%. The exhibited average rates of false negatives and false positives were 0.43% and 1.03%, respectively. Using profile-based signatures for online intrusion and failure detection was shown to be effective." @default.
- W2023821675 created "2016-06-24" @default.
- W2023821675 creator A5031393207 @default.
- W2023821675 creator A5075963925 @default.
- W2023821675 creator A5086037704 @default.
- W2023821675 date "2014-02-01" @default.
- W2023821675 modified "2023-09-23" @default.
- W2023821675 title "Generating profile-based signatures for online intrusion and failure detection" @default.
- W2023821675 cites W1486570429 @default.
- W2023821675 cites W1533753084 @default.
- W2023821675 cites W1670263352 @default.
- W2023821675 cites W1832277845 @default.
- W2023821675 cites W1970297952 @default.
- W2023821675 cites W1971137495 @default.
- W2023821675 cites W1976659547 @default.
- W2023821675 cites W1983095796 @default.
- W2023821675 cites W1984350393 @default.
- W2023821675 cites W1989081620 @default.
- W2023821675 cites W2013296707 @default.
- W2023821675 cites W2016634082 @default.
- W2023821675 cites W2034533707 @default.
- W2023821675 cites W2035036030 @default.
- W2023821675 cites W2041862806 @default.
- W2023821675 cites W2064795874 @default.
- W2023821675 cites W2067436653 @default.
- W2023821675 cites W2083491752 @default.
- W2023821675 cites W2088604607 @default.
- W2023821675 cites W2094873755 @default.
- W2023821675 cites W2096769539 @default.
- W2023821675 cites W2100583963 @default.
- W2023821675 cites W2100888251 @default.
- W2023821675 cites W2107071518 @default.
- W2023821675 cites W2113278923 @default.
- W2023821675 cites W2118542736 @default.
- W2023821675 cites W2120563984 @default.
- W2023821675 cites W2122049982 @default.
- W2023821675 cites W2132111557 @default.
- W2023821675 cites W2134429122 @default.
- W2023821675 cites W2135143063 @default.
- W2023821675 cites W2137522044 @default.
- W2023821675 cites W2140056197 @default.
- W2023821675 cites W2151135920 @default.
- W2023821675 cites W2154941560 @default.
- W2023821675 cites W2163030488 @default.
- W2023821675 cites W2163446760 @default.
- W2023821675 cites W2165594507 @default.
- W2023821675 cites W2168654349 @default.
- W2023821675 cites W2804329188 @default.
- W2023821675 cites W2998574808 @default.
- W2023821675 cites W3106729728 @default.
- W2023821675 cites W3136767761 @default.
- W2023821675 cites W4242377092 @default.
- W2023821675 cites W4243127898 @default.
- W2023821675 cites W4253629268 @default.
- W2023821675 doi "https://doi.org/10.1016/j.infsof.2013.09.004" @default.
- W2023821675 hasPublicationYear "2014" @default.
- W2023821675 type Work @default.
- W2023821675 sameAs 2023821675 @default.
- W2023821675 citedByCount "12" @default.
- W2023821675 countsByYear W20238216752014 @default.
- W2023821675 countsByYear W20238216752015 @default.
- W2023821675 countsByYear W20238216752016 @default.
- W2023821675 countsByYear W20238216752017 @default.
- W2023821675 countsByYear W20238216752021 @default.
- W2023821675 countsByYear W20238216752022 @default.
- W2023821675 crossrefType "journal-article" @default.
- W2023821675 hasAuthorship W2023821675A5031393207 @default.
- W2023821675 hasAuthorship W2023821675A5075963925 @default.
- W2023821675 hasAuthorship W2023821675A5086037704 @default.
- W2023821675 hasConcept C105795698 @default.
- W2023821675 hasConcept C124101348 @default.
- W2023821675 hasConcept C137524506 @default.
- W2023821675 hasConcept C154945302 @default.
- W2023821675 hasConcept C165064840 @default.
- W2023821675 hasConcept C165696696 @default.
- W2023821675 hasConcept C199360897 @default.
- W2023821675 hasConcept C2524010 @default.
- W2023821675 hasConcept C2777904410 @default.
- W2023821675 hasConcept C2779696439 @default.
- W2023821675 hasConcept C2779960059 @default.
- W2023821675 hasConcept C33923547 @default.
- W2023821675 hasConcept C35525427 @default.
- W2023821675 hasConcept C38652104 @default.
- W2023821675 hasConcept C41008148 @default.
- W2023821675 hasConcept C548217200 @default.
- W2023821675 hasConcept C60048249 @default.
- W2023821675 hasConcept C64869954 @default.
- W2023821675 hasConcept C68859911 @default.
- W2023821675 hasConcept C95713431 @default.
- W2023821675 hasConceptScore W2023821675C105795698 @default.
- W2023821675 hasConceptScore W2023821675C124101348 @default.
- W2023821675 hasConceptScore W2023821675C137524506 @default.
- W2023821675 hasConceptScore W2023821675C154945302 @default.
- W2023821675 hasConceptScore W2023821675C165064840 @default.
- W2023821675 hasConceptScore W2023821675C165696696 @default.
- W2023821675 hasConceptScore W2023821675C199360897 @default.
- W2023821675 hasConceptScore W2023821675C2524010 @default.
- W2023821675 hasConceptScore W2023821675C2777904410 @default.