An Alternative Approach To Computer System Security Monitoring And Enhancement Through System Call Sequence Analysis

Modern computer systems are plagued with stability and security problems: applications lose data, web servers are hacked, and systems crash under heavy load. Many of these problems or anomalies arise from rare program behavior caused by attacks or errors. A substantial percentage of the web-based attacks are due to buffer overflows. Many methods have been devised to detect and prevent anomalous situations that arise from buffer overflows. The current state-of-art of anomaly detection systems is relatively primitive and mainly depend on static code checking to take care of buffer overflow attacks. For protection, Stack Guards and I-leap Guards are also used in wide varieties.This dissertation proposes an anomaly detection system, based on frequencies of system calls in the system call trace. System call traces represented as frequency sequences are profiled using sequence sets. A sequence set is identified by the starting sequence and frequencies of specific system calls. The deviations of the current input sequence from the corresponding normal profile in the frequency pattern of system calls is computed and expressed as an anomaly score. A simple Bayesian model is used for an accurate detection.Experimental results are reported which show that frequency of system calls represented using sequence sets, captures the normal behavior of programs under normal conditions of usage. This captured behavior allows the system to detect anomalies with a low rate of false positives. Data are presented which show that Bayesian Network on frequency variations responds effectively to induced buffer overflows. It can also help administrators to detect deviations in program flow introduced due to errors.

Process profiling using frequencies of system calls

In this paper we discuss our research in developing general and systematic method for anomaly detection. The key ideas are to represent normal program behaviour using system call frequencies and to incorporate probabilistic techniques for classification to detect anomalies and intrusions. Using experiments on the sendmail system call data, we demonstrate that we can construct concise and accurate classifiers to detect anomalies. We provide an overview of the approach that we have implemented

Anomaly Detection Using System Call Sequence Sets.

This paper discusses our research in developing a generalized and systematic method for anomaly detection. The key ideas are to represent normal program behaviour using system call frequencies and to incorporate probabilistic techniques for classification to detect anomalies and intrusions. Using experiments on the sendmail system call data, we demonstrate that concise and accurate classifiers can be constructed to detect anomalies. An overview of the approach that we have implemented is provided.

International Conference on Semigroups, Algebras and Applications (ICSA 2015)

Mathematicians who make significant contributions towards development of mathematical science are not getting the recognition they deserve, according to Cusat Vice Chancellor Dr. J. Letha. She was delivering the inaugural address at the International Conference on Semigroups, Algebras and Applications (ICSA 2015) organized by Dept. of Mathematics, Cochin university of Science and Technology on Thursday. Mathematics plays an important role in the development of basic science. The academic community should not delay in accepting and appreciating this, Dr. Letha added. Dr. Godfrey Louis, Dean, Faculty of Science presided over the inaugural function. Prof. P. G. Romeo, Head, Dept. of Mathematics, Prof. John C. Meakin, University of Nebraska-Lincoln, USA, Prof. A. N. Balchand, Syndicate Member, Prof. K. A. Zakkariya, Syndicate Member, Prof. A. R. Rajan, Emeritus Professor, University of Kerala and Prof. A. Vijayakumar, Dept. of Mathematics, Cusat addressed the gathering. Around 50 research papers will be presented at the Conference.Prof. K. S. S. Nambooripad, the internationally famous mathematician with enormous contributions in the field of semigroup theory, who has attained eighty years of age will be felicitated on 18th at 5.00 pm during a function presided over by Dr. K. Poulose Jacob, Pro-Vice Chancellor. Dr. Suresh Das, Executive President, KSCSTE, Dr. A. M. Mathai, Director, CMSS and President, Indian Mathematical Society, Dr. P. G. Romeo, Head, Dept. of Mathematics and Dr. B. Lakshmi, Dept. of Mathematics will speak on the occasion.