Finite Automata Models for Anomaly Detection

Finite Automata Models for Anomaly Detection

Title : Finite Automata Models for Anomaly Detection
Authors :
V. Ramezani
Yang, Shahan
Baras, John, S.
Conference : 37th Conference on Information Sciences and Systems (CISS)
Date: March 12 - March 14, 2003

A fundamental problem in Intrusion detection is the fusion of dependent information sequences.In this paper ,we consider the fusion of two such sequences ,namely the sequence of system calls and the value of the instruction pointer.We introduce FAAD, a finite automation representation defined for the product alphabet of the two sequences where dependencies are implicitly taken into account by a matching procedure.

Download Full Paper