Title
The Evolution of System-Call Monitoring
Abstract
Computer security systems protect computers and networks from unauthorized use by external agents and insiders. The similarities between computer security and the problem of protecting a body against damage from externally and internally generated threats are compelling and were recognized as early as 1972 when the term computer virus was coined. The connection to immunology was made explicit in the mid 1990s, leading to a variety of prototypes, commercial products, attacks, and analyses. The paper reviews one thread of this active research area, focusing on system-call monitoring and its application to anomaly intrusion detection and response. The paper discusses the biological principles illustrated by the method, followed by a brief review of how system call monitoring was used in anomaly intrusion detection and the results that were obtained. Proposed attacks against the method are discussed, along with several important branches of research that have arisen since the original papers were published. These include other data modeling methods, extensions to the original system call method, and rate limiting responses. Finally, the significance of this body of work and areas of possible future investigation are outlined in the conclusion.
Year
DOI
Venue
2008
10.1109/ACSAC.2008.54
ACSAC
Keywords
Field
DocType
anomaly intrusion detection,active research area,computer security,original paper,system-call monitoring,original system call method,computer security system,intrusion detection,term computer virus,system call monitoring,biology,immune system,system monitoring,computer virus,servers,data model,rate limiting,security
Data modeling,Computer security,Computer science,Computer virus,Server,Thread (computing),System monitoring,System call,Intrusion detection system,Limiting
Conference
ISSN
Citations 
PageRank 
1063-9527
44
1.55
References 
Authors
62
3
Name
Order
Citations
PageRank
Stephanie Forrest164481102.07
Steven A. Hofmeyr22096258.76
Anil Somayaji31842217.22