Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
skip to main content
10.1145/3317549.3326308acmconferencesArticle/Chapter ViewAbstractPublication PageswisecConference Proceedingsconference-collections
poster

Deep learning approach to detect malicious attacks at system level: poster

Published: 15 May 2019 Publication History
  • Get Citation Alerts
  • Abstract

    Host based intrusion detection systems monitor operations for significant deviations from normal and healthy behavior. Anomalies are patterns in data that do not conform to the expected normal behavior. System call analysis has been conclusively established as the best method to reveal details about the program behavior. Therefore, attackers create new exploits that makes major impact at the system call level. In this research, we developed an enhanced and optimized deep learning LSTM (Long Short Term Memory) network, for anomaly detection, trained on sequences of system calls. Our model detects any anomalous behavior in the system calls with 80% accuracy.

    References

    [1]
    Hochreiter, S. & Schmidhuber, J. Long short-term memory. Neural Comput. 9, 1735--1780 (1997).
    [2]
    Bayer, Justin, Osendorfer, Christian, Chen, Nutan, Urban, Sebastian, and van der Smagt, Patrick. On fast dropout and its applicability to recurrent networks. arXiv preprint arXiv:1311.0701, 2013.
    [3]
    Sutskever, Ilya, Vinyals, Oriol, and Le, Quoc VV. Sequence to sequence learning with neural networks. In Advances in Neural Information Processing Systems, pp. 3104--3112, 2014.

    Cited By

    View all
    • (2024)Vision Transformer-Based Emotion Detection in HCI for Enhanced InteractionIntelligent Human Computer Interaction10.1007/978-3-031-53827-8_8(76-86)Online publication date: 29-Feb-2024
    • (2023)Towards Predicting the Life of an EngineHandbook of Research on AI Methods and Applications in Computer Engineering10.4018/978-1-6684-6937-8.ch023(497-513)Online publication date: 3-Mar-2023
    • (2021)Comparative Analysis of LSTM, One-Class SVM, and PCA to Monitor Real-Time Malware Threats Using System Call Sequences and Virtual Machine IntrospectionInternational Conference on Communication, Computing and Electronics Systems10.1007/978-981-33-4909-4_9(113-127)Online publication date: 26-Mar-2021
    • Show More Cited By

    Recommendations

    Comments

    Information & Contributors

    Information

    Published In

    cover image ACM Conferences
    WiSec '19: Proceedings of the 12th Conference on Security and Privacy in Wireless and Mobile Networks
    May 2019
    359 pages
    ISBN:9781450367264
    DOI:10.1145/3317549
    Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

    Sponsors

    In-Cooperation

    Publisher

    Association for Computing Machinery

    New York, NY, United States

    Publication History

    Published: 15 May 2019

    Check for updates

    Author Tags

    1. LSTM
    2. anomaly detection
    3. deep learning
    4. system call

    Qualifiers

    • Poster

    Conference

    WiSec '19
    Sponsor:

    Acceptance Rates

    Overall Acceptance Rate 98 of 338 submissions, 29%

    Contributors

    Other Metrics

    Bibliometrics & Citations

    Bibliometrics

    Article Metrics

    • Downloads (Last 12 months)15
    • Downloads (Last 6 weeks)1

    Other Metrics

    Citations

    Cited By

    View all
    • (2024)Vision Transformer-Based Emotion Detection in HCI for Enhanced InteractionIntelligent Human Computer Interaction10.1007/978-3-031-53827-8_8(76-86)Online publication date: 29-Feb-2024
    • (2023)Towards Predicting the Life of an EngineHandbook of Research on AI Methods and Applications in Computer Engineering10.4018/978-1-6684-6937-8.ch023(497-513)Online publication date: 3-Mar-2023
    • (2021)Comparative Analysis of LSTM, One-Class SVM, and PCA to Monitor Real-Time Malware Threats Using System Call Sequences and Virtual Machine IntrospectionInternational Conference on Communication, Computing and Electronics Systems10.1007/978-981-33-4909-4_9(113-127)Online publication date: 26-Mar-2021
    • (2020)Visualizing High-Dimensional Data Using t-Distributed Stochastic Neighbor Embedding AlgorithmPrinciples of Data Science10.1007/978-3-030-43981-1_9(189-206)Online publication date: 9-Jul-2020
    • (2019)Behavioral Analysis of System Call Sequences Using LSTM Seq-Seq, Cosine Similarity and Jaccard Similarity for Real-Time Anomaly Detection2019 International Conference on Computational Science and Computational Intelligence (CSCI)10.1109/CSCI49370.2019.00043(214-219)Online publication date: Dec-2019

    View Options

    Get Access

    Login options

    View options

    PDF

    View or Download as a PDF file.

    PDF

    eReader

    View online with eReader.

    eReader

    Media

    Figures

    Other

    Tables

    Share

    Share

    Share this Publication link

    Share on social media