An Alternative Approach To Computer System Security Monitoring And Enhancement Through System Call Sequence Analysis

Modern computer systems are plagued with stability and security problems: applications lose data, web servers are hacked, and systems crash under heavy load. Many of these problems or anomalies arise from rare program behavior caused by attacks or errors. A substantial percentage of the web-based attacks are due to buffer overflows. Many methods have been devised to detect and prevent anomalous situations that arise from buffer overflows. The current state-of-art of anomaly detection systems is relatively primitive and mainly depend on static code checking to take care of buffer overflow attacks. For protection, Stack Guards and I-leap Guards are also used in wide varieties.This dissertation proposes an anomaly detection system, based on frequencies of system calls in the system call trace. System call traces represented as frequency sequences are profiled using sequence sets. A sequence set is identified by the starting sequence and frequencies of specific system calls. The deviations of the current input sequence from the corresponding normal profile in the frequency pattern of system calls is computed and expressed as an anomaly score. A simple Bayesian model is used for an accurate detection.Experimental results are reported which show that frequency of system calls represented using sequence sets, captures the normal behavior of programs under normal conditions of usage. This captured behavior allows the system to detect anomalies with a low rate of false positives. Data are presented which show that Bayesian Network on frequency variations responds effectively to induced buffer overflows. It can also help administrators to detect deviations in program flow introduced due to errors.

Channel Adaptive MAC Protocol with Traffic-Aware Distributed Power Management in Wireless Sensor Networks-Some Performance Issues

In Wireless Sensor Networks (WSN), neglecting the effects of varying channel quality can lead to an unnecessary wastage of precious battery resources and in turn can result in the rapid depletion of sensor energy and the partitioning of the network. Fairness is a critical issue when accessing a shared wireless channel and fair scheduling must be employed to provide the proper flow of information in a WSN. In this paper, we develop a channel adaptive MAC protocol with a traffic-aware dynamic power management algorithm for efficient packet scheduling and queuing in a sensor network, with time varying characteristics of the wireless channel also taken into consideration. The proposed protocol calculates a combined weight value based on the channel state and link quality. Then transmission is allowed only for those nodes with weights greater than a minimum quality threshold and nodes attempting to access the wireless medium with a low weight will be allowed to transmit only when their weight becomes high. This results in many poor quality nodes being deprived of transmission for a considerable amount of time. To avoid the buffer overflow and to achieve fairness for the poor quality nodes, we design a Load prediction algorithm. We also design a traffic aware dynamic power management scheme to minimize the energy consumption by continuously turning off the radio interface of all the unnecessary nodes that are not included in the routing path. By Simulation results, we show that our proposed protocol achieves a higher throughput and fairness besides reducing the delay

Nutrient Mobility in Chalakudy River,Typified With Riparian Buffer Zone and Its Adjoining Estuary:Spatiotemporal Manifestation

This study was aimed at to characterize the spatio-temporal trends in the distributional characteristics of various species of nitrogen and phosphorus as well as to elucidate the factors and processes aflecting these nutrients in the dissolved, particulate and sedimentary phases of a river estuarine system. The main area of study is Chalakudy river in Kerala, which is a fresh water system originating from Anamalai hills and ending at Arabian Sea. Its basin is between I00 05 ’ to I00 35’ North latitude and 76” 15 ’ to 760 55’ East longitude. Being a riparian bufler zone, the dynamics of nutrient mobility tend to be more complex and variable in this river-estuarine system.The diflerent species of nitrogen estimated from the filtrate were nitrite-N, nitrateN, ammonia-N, urea-N, total nitrogen and residual nitrogen. The diflerent forms of phosphorus estimated from the filtrate were phosphate-P, total-P and residualP. Pre weighed sediments as well as particulate matter were analysed for quantijying nitrite-N, nitrate-N, ammonia-N and urea-N. Total nitrogen was estimated after digestion with potassium persulfate. Fractionation of phosphorus in sediment/particulate matter was performed by applying sequential extraction procedure. The dijferent forms of phosphorus thus estimated were loosely bound (exchangeable) P, Fe/Al bound P, polyphosphates, Ca bound P and refractory P. Sedimental total P was also measured directly by applying digestion method.The analyses carried out in this bimonthly annual survey have revealed specific information on the latent factors influencing the water quality pattern ofthe river. There was dependence among the chemical components of the river sediment and suspended matter, reflecting the water quality. A period of profound environmental change occurred and changes in various species had been noted in association with seasonal variations in the waterway, especially following enhanced river runoff during the monsoon. The results also successfully represented the distribution trend of nutrients during the rainy as well as dry season. Thus, the information gathered in this work will also be beneficial for those interested or involved in river management, conservation, regulation and policy making in regional and national levels.