Earticle

초록

영어

With the rapid development of computer systems, intrusion attack methods have become large-scale, distributed and complex. Traditional protection means such as vulnerability database, virus database and rule matching can’t cope with the attacks hidden inside the terminals. This paper proposed a terminal anomaly detection system based on dynamic taint analysis technology from the data dimension of the terminals. Firstly we built a standard data path model based on HMM and evaluated the deviation degree of the current operating mode with it to find the abnormal working status of the terminals. The experimental results show that the structure is valid to discover the intrusion attacks with a high detection rate and low false alarm rate.

목차

Abstract
 1. Introduction
 2. Terminal Anomaly Detection Method based on Dynamic Taint Analysis Technology
  2.1. Standard Data Path Model based on Hidden Markov Model
  2.2. Terminal Anomaly Detection Method
  2.3. The Architecture of Terminal Anomaly Detection System
 3. Experiment and Analysis
  3.1. Simulated Training Experiment
  3.2. Anomaly Detection Experiment
  3.3. The Experimental Results
 4. Summary
 References

키워드

저자

• Wang Yutong [ Henan Key Laboratory of Information Security, Zhengzhou Information and Science Technology Institute ]
• Chang Chaowen [ Henan Key Laboratory of Information Security, Zhengzhou Information and Science Technology Institute ]
• Han Peisheng [ Henan Key Laboratory of Information Security, Zhengzhou Information and Science Technology Institute ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605