Real-Time Intrusion Detection Based on System Call and ARTIS Model

Abstract:

The main purpose of a computer intrusion detection system is to accurately distinguish between self and non-self. A novel intrusion detection model based on ARTIS model is proposed by introducing the Red Flower and Green Leaf concepts, and by coordinated use of RF variable length and GL fixed length detectors. Intrusion detection methods are optimized to ensure the quick detection of abnormal behaviors making the model more suitable for real-time intrusion detection and more accurately to distinguish between self-and non-self.

• Periodical: Advanced Materials Research (Volumes 926-930)
• Pages: 3157-3160
• DOI: https://doi.org/10.4028/www.scientific.net/AMR.926-930.3157
• Online since: May 2014
• Authors: Zhan Huang*, Yu Ying Jiang, Lu Bin Li
• Keywords: Immune Theory, Intrusion Detection, Red Flower Pattern, System Call Sequence

References

[1] S. Forrest, A. S. Perelson, L. Allen, and R. Cherukuri, Self-nonself discrimination in a computer, Proceedings of the 1994 IEEE Symposium on Research in Security and Privacy, Los Alamitos, CA:. IEEE Computer Society Press, pp.202-212 (1994).

DOI: 10.1109/risp.1994.296580

[2] A. Wespi, M. Dacier, and H. Debar, An intrusion detection system based on the Teiresias pattern discovery algorithm. In Proceedings of the EICAR, (1999).

[3] A. Wespi, M. Dacier, Intrusion detection using variable-length audit trail patterns. In Proceedings of the 3th International Workshop on the recent Advances in Intrusion Detection (RAID'2000), Toulous, France, 2000: 110 -129.

DOI: 10.1007/3-540-39945-3_8

[4] T. Li, Computer Immunology(in Chinese). Electronic Industry Press, Beijing, (2004).

[5] X. Lin, Host intrusion detection based on variable-length pattern of system call sequences(in Chinese). Master dissertation, University of Electronic Science and Technology, (2004).

[6] G. Xie, Intrusion detection research based on computer immune(in Chinese), Master dissertation, Beijing Jiaotong University, (2008).