An Alternative Approach To Computer System Security Monitoring And Enhancement Through System Call Sequence Analysis

Modern computer systems are plagued with stability and security problems: applications lose data, web servers are hacked, and systems crash under heavy load. Many of these problems or anomalies arise from rare program behavior caused by attacks or errors. A substantial percentage of the web-based attacks are due to buffer overflows. Many methods have been devised to detect and prevent anomalous situations that arise from buffer overflows. The current state-of-art of anomaly detection systems is relatively primitive and mainly depend on static code checking to take care of buffer overflow attacks. For protection, Stack Guards and I-leap Guards are also used in wide varieties.This dissertation proposes an anomaly detection system, based on frequencies of system calls in the system call trace. System call traces represented as frequency sequences are profiled using sequence sets. A sequence set is identified by the starting sequence and frequencies of specific system calls. The deviations of the current input sequence from the corresponding normal profile in the frequency pattern of system calls is computed and expressed as an anomaly score. A simple Bayesian model is used for an accurate detection.Experimental results are reported which show that frequency of system calls represented using sequence sets, captures the normal behavior of programs under normal conditions of usage. This captured behavior allows the system to detect anomalies with a low rate of false positives. Data are presented which show that Bayesian Network on frequency variations responds effectively to induced buffer overflows. It can also help administrators to detect deviations in program flow introduced due to errors.

Fractal based techniques for classification of mammograms and identification of microcalcifications

After skin cancer, breast cancer accounts for the second greatest number of cancer diagnoses in women. Currently the etiologies of breast cancer are unknown, and there is no generally accepted therapy for preventing it. Therefore, the best way to improve the prognosis for breast cancer is early detection and treatment. Computer aided detection systems (CAD) for detecting masses or micro-calcifications in mammograms have already been used and proven to be a potentially powerful tool , so the radiologists are attracted by the effectiveness of clinical application of CAD systems. Fractal geometry is well suited for describing the complex physiological structures that defy the traditional Euclidean geometry, which is based on smooth shapes. The major contribution of this research include the development of • A new fractal feature to accurately classify mammograms into normal and normal (i)With masses (benign or malignant) (ii) with microcalcifications (benign or malignant) • A novel fast fractal modeling method to identify the presence of microcalcifications by fractal modeling of mammograms and then subtracting the modeled image from the original mammogram. The performances of these methods were evaluated using different standard statistical analysis methods. The results obtained indicate that the developed methods are highly beneficial for assisting radiologists in making diagnostic decisions. The mammograms for the study were obtained from the two online databases namely, MIAS (Mammographic Image Analysis Society) and DDSM (Digital Database for Screening Mammography.

Antibody Based Diagnostic for Detection Of Vibrios and their Biological Control using Antagonistic Bacteria in Macrobrachium Rosenbergii Larval Rearing Systems

The main objective of the work undertaken here was to develop an appropriate microbial technology to protect the larvae of M.rosenbergii in hatchery from vibriosis. This technology precisely is consisted of a rapid detection system of vibrios and effective antagonistic probiotics for the management of vibrios. The present work was undertaken with the realizations that to stabilize the production process of commercial hatcheries an appropriate, comprehensive and fool proof technology is required primarily for the rapid detection of Vibrio and subsequently for its management. Nine species of Vibrio have been found to be associated with larvae of M. rosenbergii in hatchery. Haemolytic assay of the Vibrio and Aeromonas on prawn blood agar showed that all isolates of V. alginolyticus and Aeromonas sp., from moribund, necrotized larve were haemolytic and the isolates of V.cholerae, V.splendidus II, V.proteolyticus and V.fluvialis from the larvae obtained from apparently healthy larval rearing systems were non-haemolytic. Hydrolytic enzymes such as lipase, chitinase and gelatinase were widespread amongst the Vibrio and Aeromonas isolates. Dominance of V.alginolyticus among the isolates from necrotic larvae and the failure in isolating them from rearing water strongly suggest that they infect larvae and multiply in the larval body and cause mortality in the hatchery. The observation suggested that the isolate V. alginolyticus was a pathogen to the larvae of M.rosenbergii. To sum up, through this work, nine species of Vibrio and genus Aeromonas associated with M.rosenbergii larval rearing systems could be isolated and segregated based on the haemolytic activity and the antibodies (PA bs) for use in diagnosis or epidemiological studies could be produced, based on a virulent culture of V.alginolyticus. This could possibly replace the conventional biochemical tests for identification. As prophylaxis to vibriosis, four isolates of Micrococcus spp. and an isolate of Pseudomonas sp. could be obtained which could possibly be used as antagonistic probiotics in the larval rearing system of M.rosenbergii.

Characterization of Selected Photonic Materials and Systems Using Photoacoustic Technique

The photoacoustic investigations carried out on different photonic materials are presented in this thesis. Photonic materials selected for the investigation are tape cast ceramics, muItilayer dielectric coatings, organic dye doped PVA films and PMMA matrix doped with dye mixtures. The studies are performed by the measurement of photoacoustic signal generated as a result of modulated cw laser irradiation of samples. The gas-microphone scheme is employed for the detection of photoacoustic signal. The different measurements reported here reveal the adaptability and utility of the PA technique for the characterization of photonic materials.Ceramics find applications in the field of microelectronics industry. Tape cast ceramics are the building blocks of many electronic components and certain ceramic tapes are used as thermal barriers. The thermal parameters of these tapes will not be the same as that of thin films of the same materials. Parameters are influenced by the presence of foreign bodies in the matrix and the sample preparation technique. Measurements are done on ceramic tapes of Zirconia, Zirconia-Alumina combination, barium titanate, barium tin titanate, silicon carbide, lead zirconate titanateil'Z'T) and lead magnesium niobate titanate(PMNPT). Various configurations viz. heat reflection geometry and heat transmission geometry of the photoacoustic technique have been used for the evaluation of different thermal parameters of the sample. Heat reflection geometry of the PA cell has been used for the evaluation of thermal effusivity and heat transmission geometry has been made use of in the evaluation of thermal diffusivity. From the thermal diffusivity and thermal effusivity values, thermal conductivity is also calculated. The calculated values are nearly the same as the values reported for pure materials. This shows the feasibility of photoacoustic technique for the thermal characterization of ceramic tapes.Organic dyes find applications as holographic recording medium and as active media for laser operations. Knowledge of the photochemical stability of the material is essential if it has to be used tor any of these applications. Mixing one dye with another can change the properties of the resulting system. Through careful mixing of the dyes in appropriate proportions and incorporating them in polymer matrices, media of required stability can be prepared. Investigations are carried out on Rhodamine 6GRhodamine B mixture doped PMMA samples. Addition of RhB in small amounts is found to stabilize Rh6G against photodegradation and addition of Rh6G into RhB increases the photosensitivity of the latter. The PA technique has been successfully employed for the monitoring of dye mixture doped PMMA sample. The same technique has been used for the monitoring of photodegradation ofa laser dye, cresyl violet doped polyvinyl alcohol also.Another important application of photoacoustic technique is in nondestructive evaluation of layered samples. Depth profiling capability of PA technique has been used for the non-destructive testing of multilayer dielectric films, which are highly reflecting in the wavelength range selected for investigations. Eventhough calculation of thickness of the film is not possible, number of layers present in the system can be found out using PA technique. The phase plot has clear step like discontinuities, the number of which coincides with the number of layers present in the multilayer stack. This shows the sensitivity of PA signal phase to boundaries in a layered structure. This aspect of PA signal can be utilized in non-destructive depth profiling of reflecting samples and for the identification of defects in layered structures.

Variation in radio refractivity index associated with formation of low - pressure systems

Numerous low - pressure systems form in the Arabian Sea and Bay of Bengal. These low-pressure systems are highly useful in bringing the rainfall over the Indian sub continent. The developments of these systems are accompanied by the reduction in air temperature and an increase in atmospheric humidity. The radio refractivity, which is a function of the atmospheric pressure, temperature and humidity, also changes following the development of these systems. Variation of radio refractive index and its vertical gradient are analysed for many low pressure systems formed over the Arabian Sea and Bay of Bengal. It is found that the atmosphere becomes super refractive associated with the formation of these systems, caused by the increase in humidity and decrease in temperature. The maximum gradient is observed near the surface layers, especially in the lowest 1 km. Super refraction leads to increased radar detection range and extension of radio horizon

Anomaly Detection Using System Call Sequence Sets.

This paper discusses our research in developing a generalized and systematic method for anomaly detection. The key ideas are to represent normal program behaviour using system call frequencies and to incorporate probabilistic techniques for classification to detect anomalies and intrusions. Using experiments on the sendmail system call data, we demonstrate that concise and accurate classifiers can be constructed to detect anomalies. An overview of the approach that we have implemented is provided.

Effectiveness Of Feature Detection Operators On The Performance Of Iris Biometric Recognition System

Iris Recognition is a highly efficient biometric identification system with great possibilities for future in the security systems area.Its robustness and unobtrusiveness, as opposed tomost of the currently deployed systems, make it a good candidate to replace most of thesecurity systems around. By making use of the distinctiveness of iris patterns, iris recognition systems obtain a unique mapping for each person. Identification of this person is possible by applying appropriate matching algorithm.In this paper, Daugman’s Rubber Sheet model is employed for irisnormalization and unwrapping, descriptive statistical analysis of different feature detection operators is performed, features extracted is encoded using Haar wavelets and for classification hammingdistance as a matching algorithm is used. The system was tested on the UBIRIS database. The edge detection algorithm, Canny, is found to be the best one to extract most of the iris texture. The success rate of feature detection using canny is 81%, False Accept Rate is 9% and False Reject Rate is 10%.

Hydrogeology and hydrochemistry of the aquifer systems of Kuttanad area, Kerala: Their role in understanding the evolution of groundwaters

This is an attempt to understand the important factors that control the occurrence, development and hydrochemical evolution of groundwater resources in sedimentary multi aquifer systems. The primary objective of this work is an integrated study of the hydrogeology and hydrochemistry with a view to elucidate the hydrochemical evolution of groundwater resources in the aquifer systems. The study is taken up in a typical coastal sedimentary aquifer system evolved under fluvio-marine environment in the coastal area of Kerala, known as the Kuttanad. The present study has been carried out to understand the aquifer systems, their inter relationships and evolution in the Kuttanad area of Kerala. The multi aquifer systems in the Kuttanad basin were formed from the sediments deposited under fluvio-marine and fluvial depositional environments and the marine transgressions and regressions in the geological past and palaeo climatic conditions influenced the hydrochemical environment in these aquifers. The evolution of groundwater and the hydrochemical processes involved in the formation of the present day water quality are elucidated from hydrochemical studies and the information derived from the aquifer geometry and hydraulic properties. Kuttanad area comprises of three types of aquifer systems namely phreatic aquifer underlain by Recent confined aquifer followed by Tertiary confined aquifers. These systems were formed by the deposition of sediments under fluvio-marine and fluvial environment. The study of the hydrochemical and hydraulic properties of the three aquifer systems proved that these three systems are separate entities. The phreatic aquifers in the area have low hydraulic gradients and high rejected recharge. The Recent confined aquifer has very poor hydraulic characteristics and recharge to this aquifer is very low. The Tertiary aquifer system is the most potential fresh water aquifer system in the area and the groundwater flow in the aquifer is converging towards the central part of the study area (Alleppey town) due to large scale pumping of water for water supply from this aquifer system. Mixing of waters and anthropogenic interferences are the dominant processes modifying the hydrochemistry in phreatic aquifers. Whereas, leaching of salts and cation exchange are the dominant processes modifying the hydrochemistry of groundwater in the confined aquifer system of Recent alluvium. Two significant chemical reactions modifying the hydrochemistry in the Recent aquifers are oxidation of iron in ferruginous clays which contributes hydrogen ions and the decomposition of organic matter in the aquifer system which consumes hydrogen ions. The hydrochemical environment is entirely different in the Tertiary aquifers as the groundwater in this aquifer system are palaeo waters evolved during various marine transgressions and regressions and these waters are being modified by processes of leaching of salts, cation exchange and chemical reactions under strong reducing environment. It is proved that the salinity observed in the groundwaters of Tertiary aquifers are not due to seawater mixing or intrusion, but due to dissolution of salts from the clay formations and ion exchange processes. Fluoride contamination in this aquifer system lacks a regional pattern and is more or less site specific in natureThe lowering of piezometric heads in the Tertiary aquifer system has developed as consequence of large scale pumping over a long period. Hence, puping from this aquifer system is to be regulated as a groundwater management strategy. Pumping from the Tertiary aquifers with high capacity pumps leads to well failures and mixing of saline water from the brackish zones. Such mixing zones are noticed from the hydrochemical studies. This is the major aquifer contamination in the Tertiary aquifer system which requires immediate attention. Usage of pumps above 10 HP capacities in wells taping Tertiary aquifers should be discouraged for sustainable development of these aquifers. The recharge areas need to be identified precisely for recharging the aquifer systems throughartificial means.