Skip to main navigation Skip to search Skip to main content

Anomalous taint detection

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

1 Scopus citations

Abstract

We propose anomalous taint detection, an approach that combines fine-grained taint tracking with learning-based anomaly detection. Anomaly detection is used to identify behavioral deviations that manifest when vulnerabilities are exercised. Fine-grained taint-tracking is used to target the anomaly detector on those aspects of program behavior that can be controlled by an attacker. Our preliminary results indicate that the combination increases detection accuracy over either technique, and promises to offer better resistance to mimicry attacks.

Original languageEnglish
Title of host publicationRecent Advances in Intrusion Detection - 11th International Symposium, RAID 2008, Proceedings
PublisherSpringer Verlag
Pages417-418
Number of pages2
ISBN (Print)354087402X, 9783540874027
DOIs
StatePublished - 2008
EventRecent Advances in Intrusion Detection - 11th International Symposium, RAID 2008, Proceedings - Cambridge, MA, United States
Duration: Sep 15 2008Sep 17 2008

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume5230 LNCS

Conference

ConferenceRecent Advances in Intrusion Detection - 11th International Symposium, RAID 2008, Proceedings
Country/TerritoryUnited States
CityCambridge, MA
Period09/15/0809/17/08

Fingerprint

Dive into the research topics of 'Anomalous taint detection'. Together they form a unique fingerprint.

Cite this