Matches in SemOpenAlex for { <https://semopenalex.org/work/W2917388839> ?p ?o ?g. }
- W2917388839 abstract "In the context of Advanced Persistent Threat-s(APTs), system audit log-based intrusion forensics has been proposed to carry out attack investigation. System audit log is highly suitable for intrusion forensics because it records the interactions among system entities in detail. However, system audit log has a fatal shortcoming due to its massive growth of log size. To address this issue, this paper proposes a compression scheme for system audit log named T-Tracker. Firstly, T-Tracker detects the events that communicate with external data sources and generates the initial taint set. Then it tracks the diffusion of the taint according to the audit log. By retaining the events on diffusion path only, we can achieve log compression. Our evaluation with different system workloads and attack cases demonstrates that our approach can achieve significant log compression without affecting the accuracy of intrusion forensics." @default.
- W2917388839 created "2019-03-02" @default.
- W2917388839 creator A5016162807 @default.
- W2917388839 creator A5037575655 @default.
- W2917388839 creator A5047347402 @default.
- W2917388839 creator A5047913997 @default.
- W2917388839 creator A5056057784 @default.
- W2917388839 date "2018-12-01" @default.
- W2917388839 modified "2023-09-25" @default.
- W2917388839 title "T-Tracker: Compressing System Audit Log by Taint Tracking" @default.
- W2917388839 cites W2089745089 @default.
- W2917388839 cites W2093406244 @default.
- W2917388839 cites W2112127916 @default.
- W2917388839 cites W2133089788 @default.
- W2917388839 cites W2138788987 @default.
- W2917388839 cites W2144801589 @default.
- W2917388839 cites W2152582571 @default.
- W2917388839 cites W2213728018 @default.
- W2917388839 cites W2295705535 @default.
- W2917388839 cites W4244461107 @default.
- W2917388839 doi "https://doi.org/10.1109/padsw.2018.8645035" @default.
- W2917388839 hasPublicationYear "2018" @default.
- W2917388839 type Work @default.
- W2917388839 sameAs 2917388839 @default.
- W2917388839 citedByCount "4" @default.
- W2917388839 countsByYear W29173888392020 @default.
- W2917388839 countsByYear W29173888392021 @default.
- W2917388839 countsByYear W29173888392022 @default.
- W2917388839 crossrefType "proceedings-article" @default.
- W2917388839 hasAuthorship W2917388839A5016162807 @default.
- W2917388839 hasAuthorship W2917388839A5037575655 @default.
- W2917388839 hasAuthorship W2917388839A5047347402 @default.
- W2917388839 hasAuthorship W2917388839A5047913997 @default.
- W2917388839 hasAuthorship W2917388839A5056057784 @default.
- W2917388839 hasConcept C124101348 @default.
- W2917388839 hasConcept C127413603 @default.
- W2917388839 hasConcept C151730666 @default.
- W2917388839 hasConcept C15744967 @default.
- W2917388839 hasConcept C162324750 @default.
- W2917388839 hasConcept C171146098 @default.
- W2917388839 hasConcept C187736073 @default.
- W2917388839 hasConcept C19417346 @default.
- W2917388839 hasConcept C199521495 @default.
- W2917388839 hasConcept C25797200 @default.
- W2917388839 hasConcept C2775936607 @default.
- W2917388839 hasConcept C2777735758 @default.
- W2917388839 hasConcept C2779343474 @default.
- W2917388839 hasConcept C31258907 @default.
- W2917388839 hasConcept C35525427 @default.
- W2917388839 hasConcept C38652104 @default.
- W2917388839 hasConcept C41008148 @default.
- W2917388839 hasConcept C511840579 @default.
- W2917388839 hasConcept C79403827 @default.
- W2917388839 hasConcept C80958533 @default.
- W2917388839 hasConcept C86803240 @default.
- W2917388839 hasConceptScore W2917388839C124101348 @default.
- W2917388839 hasConceptScore W2917388839C127413603 @default.
- W2917388839 hasConceptScore W2917388839C151730666 @default.
- W2917388839 hasConceptScore W2917388839C15744967 @default.
- W2917388839 hasConceptScore W2917388839C162324750 @default.
- W2917388839 hasConceptScore W2917388839C171146098 @default.
- W2917388839 hasConceptScore W2917388839C187736073 @default.
- W2917388839 hasConceptScore W2917388839C19417346 @default.
- W2917388839 hasConceptScore W2917388839C199521495 @default.
- W2917388839 hasConceptScore W2917388839C25797200 @default.
- W2917388839 hasConceptScore W2917388839C2775936607 @default.
- W2917388839 hasConceptScore W2917388839C2777735758 @default.
- W2917388839 hasConceptScore W2917388839C2779343474 @default.
- W2917388839 hasConceptScore W2917388839C31258907 @default.
- W2917388839 hasConceptScore W2917388839C35525427 @default.
- W2917388839 hasConceptScore W2917388839C38652104 @default.
- W2917388839 hasConceptScore W2917388839C41008148 @default.
- W2917388839 hasConceptScore W2917388839C511840579 @default.
- W2917388839 hasConceptScore W2917388839C79403827 @default.
- W2917388839 hasConceptScore W2917388839C80958533 @default.
- W2917388839 hasConceptScore W2917388839C86803240 @default.
- W2917388839 hasLocation W29173888391 @default.
- W2917388839 hasOpenAccess W2917388839 @default.
- W2917388839 hasPrimaryLocation W29173888391 @default.
- W2917388839 hasRelatedWork W2040093904 @default.
- W2917388839 hasRelatedWork W2050210749 @default.
- W2917388839 hasRelatedWork W2102450376 @default.
- W2917388839 hasRelatedWork W2272254334 @default.
- W2917388839 hasRelatedWork W2353511327 @default.
- W2917388839 hasRelatedWork W2365422413 @default.
- W2917388839 hasRelatedWork W2432644407 @default.
- W2917388839 hasRelatedWork W2550566521 @default.
- W2917388839 hasRelatedWork W2752748960 @default.
- W2917388839 hasRelatedWork W2774412991 @default.
- W2917388839 hasRelatedWork W2794671739 @default.
- W2917388839 hasRelatedWork W2885144342 @default.
- W2917388839 hasRelatedWork W2921313192 @default.
- W2917388839 hasRelatedWork W3008445684 @default.
- W2917388839 hasRelatedWork W3047566582 @default.
- W2917388839 hasRelatedWork W3089157269 @default.
- W2917388839 hasRelatedWork W3138880825 @default.
- W2917388839 hasRelatedWork W31445814 @default.
- W2917388839 hasRelatedWork W2338221977 @default.
- W2917388839 hasRelatedWork W2757031247 @default.
- W2917388839 isParatext "false" @default.