Recent Advances in Intrusion Detection

by Jha, Somesh; Sommer, Robin; Kreibich, Christian

• ISBN13: 9783642155116
• ISBN10: 3642155111
• Edition: 1st
• Format: Paperback
• Copyright: 2010-11-10
• Publisher: Springer-Verlag New York Inc

Summary

This book constitutes the refereed proceedings of the 13th International Symposium on Recent Advances in Intrusion Detection, RAID 2010, held in Ottawa, Canada, in September 2010. The 24 revised full papers presented together with 15 revised poster papers were carefully reviewed and selected from 102 submissions.The papers are organized in topical sections on network protection, high performance, malware detection and defence, evaluation, forensics, anomaly detection as well as web security.

Table of Contents

Network Protection
What Is the Impact of P2P Traffic on Anomaly Detection?	p. 1
A Centralized Monitoring Infrastructure for Improving DNS Security	p. 18
Behavior-Based Worm Detectors Compared	p. 38
High Performance
Improving NFA-Based Signature Matching Using Ordered Binary Decision Diagrams	p. 58
GrAVity: A Massively Parallel Antivirus Engine	p. 79
Malware Detection and Defence
Automatic Discovery of Parasitic Malware	p. 97
BotSwindler: Tamper Resistant Injection of Believable Decoys in VM-Based Hosts for Crimeware Detection	p. 118
CANVuS: Context-Aware Network Vulnerability Scanning	p. 138
HyperCheck: A Hardware-Assisted Integrity Monitor	p. 158
Kernel Malware Analysis with Un-tampered and Temporal Views of Dynamic Kernel Memory	p. 178
Bait Your Hook: A Novel Detection Technique for Keyloggers	p. 198
Evaluation
Generating Client Workloads and High-Fidelity Network Traffic for Controllable, Repeatable Experiments in Computer Security	p. 218
On Challenges in Evaluating Malware Clustering	p. 238
Why Did My Detector Do That?! Predicting Keystroke-Dynamics Error Rates	p. 256
Forensics
NetStore: An Efficient Storage Infrastructure for Network Forensics and Monitoring	p. 277
Live and Trustworthy Forensic Analysis of Commodity Production Systems	p. 297
Hybrid Analysis and Control of Malware	p. 317
Anomaly Detection
Anomaly Detection and Mitigation for Disaster Area Networks	p. 339
Community Epidemic Detection Using Time-Correlated Anomalies	p. 360
A Data-Centric Approach to Insider Attack Detection in Database Systems	p. 382
Privilege States Based Access Control for Fine-Grained Intrusion Response	p. 402
Web Security
Abusing Social Networks for Automated User Profiling	p. 422
An Analysis of Rogue AV Campaigns	p. 442
Fast-Flux Bot Detection in Real Time	p. 464
Posters
A Client-Based and Server-Enhanced Defense Mechanism for Cross-Site Request Forgery	p. 484
A Distributed Honeynet at KFUPM: A Case Study	p. 486
Aspect-Based Attack Detection in Large-Scale Networks	p. 488
Detecting Network Anomalies in Backbone Networks	p. 490
Detecting the Onset of Infection for Secure Hosts	p. 492
Eliminating Human Specification in Static Analysis	p. 494
Evaluation of the Common Dataset Used in Anti-Malware Engineering Workshop 2009	p. 496
Inferring Protocol State Machine from Real-World Trace	p. 498
MEDUSA: Mining Events to Detect Undesirable uSer Actions in SCADA	p. 500
On Estimating Cyber Adversaries' Capabilities: A Bayesian Model Approach	p. 502
Security System for Encrypted Environments (S2E2)	p. 505
Towards Automatic Deduction and Event Reconstruction Using Forensic Lucid and Probabilities to Encode the IDS Evidence	p. 508
Toward Specification-Based Intrusion Detection for Web Applications	p. 510
Toward Whole-System Dynamic Analysis for ARM-Based Mobile Devices	p. 512
Using IRP for Malware Detection	p. 514
Author Index	p. 517
Table of Contents provided by Ingram. All Rights Reserved.