An Alternative Approach To Computer System Security Monitoring And Enhancement Through System Call Sequence Analysis

Modern computer systems are plagued with stability and security problems: applications lose data, web servers are hacked, and systems crash under heavy load. Many of these problems or anomalies arise from rare program behavior caused by attacks or errors. A substantial percentage of the web-based attacks are due to buffer overflows. Many methods have been devised to detect and prevent anomalous situations that arise from buffer overflows. The current state-of-art of anomaly detection systems is relatively primitive and mainly depend on static code checking to take care of buffer overflow attacks. For protection, Stack Guards and I-leap Guards are also used in wide varieties.This dissertation proposes an anomaly detection system, based on frequencies of system calls in the system call trace. System call traces represented as frequency sequences are profiled using sequence sets. A sequence set is identified by the starting sequence and frequencies of specific system calls. The deviations of the current input sequence from the corresponding normal profile in the frequency pattern of system calls is computed and expressed as an anomaly score. A simple Bayesian model is used for an accurate detection.Experimental results are reported which show that frequency of system calls represented using sequence sets, captures the normal behavior of programs under normal conditions of usage. This captured behavior allows the system to detect anomalies with a low rate of false positives. Data are presented which show that Bayesian Network on frequency variations responds effectively to induced buffer overflows. It can also help administrators to detect deviations in program flow introduced due to errors.

Selective N-monomethylation of aniline using Zn1-x CoxFe2O4( x=0, 0.2, 0.5, 0.8 and 1.0)type systems

A series of ferrites having the general formula Zn1-xCoxFe2O4 (x=0, 0.2, 0.5, 0.8 and 1.0)were prepared by soft chemical route. The materials were characterized by adopting various physico-chemical methods. The reaction of aniline with methanol was studied in a fixed-bed reactor system as a potential source for the production of various methyl anilines. It was observed that systems possessing low ‘ x’ values are highly selective and active for N-monoalkylation of aniline leading to N-methylaniline. Reaction parameters were properly varied to optimize the reaction conditions for obtaining N-methylaniline selectively and in better yield. Among the systems Zn0.8Co0.2Fe2O4 is remarkable due to its very high activity and excellent stability. Under the optimized conditions N-methylaniline selectivity exceeded 98%. Even at a methanol to aniline molar ratio of 2, the yield of N-methylaniline was nearly 50%, whereas its yield exceeded 71% at the molar ratio of 5. ZnFe2O4, though executed better conversion than Zn0.8Co0.2Fe2O4 in the initial period of the run, deactivates quickly as the reaction proceeds. The Lewis acidity of the catalysts is mainly responsible for the good performance. Cation distribution in the spinel lattice influences their acido-basic properties and, hence, these factors have been considered as helpful parameters to evaluate the activity of the systems.