21st International Conference on Advanced Information Networking and Applications Workshops (AINAW'07) On the Contribution of Preamble to Information Hiding in Mimicry Attacks Niagara Falls, Ontario, Canada May 21-May 23 ISBN: 0-7695-2847-3
In this paper, we aim to determine the significance of different stages of an attack, namely the preamble and the exploit, on an achieved anomaly rate. To this end, we analyze four UNIX applications that have been used by the previous researchers against Stide anomaly detector. Our results show that the effect of the preamble on the anomaly rate is much greater when the size of the preamble component of an attack is greater than the size of the exploit component. Furthermore, we investigate the impact of training set selection and the length of sliding window on detector performance.
Index Terms:
Information hiding, anomaly detection, benchmarking
Citation:
H. Gunes Kayacik, A. Nur Zincir-Heywood, "On the Contribution of Preamble to Information Hiding in Mimicry Attacks," ainaw, vol. 1, pp.632-638, 21st International Conference on Advanced Information Networking and Applications Workshops (AINAW'07), 2007 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb