A framework for anomaly detection in time-driven and event-driven processes using kernel traces

OM Ezeme, QH Mahmoud… - IEEE Transactions on …, 2020 - ieeexplore.ieee.org
anomalies and can detect zero-day vulnerability. Because our work centers on anomaly
detection … Discrete events anomaly detection is context-based (relies on the construction of …

Dream: deep recursive attentive model for anomaly detection in kernel events

OM Ezeme, QH Mahmoud, A Azim - IEEE Access, 2019 - ieeexplore.ieee.org
anomaly detection model that uses intra-trace and inter-trace … the challenge of online
anomaly detection in cyber-physical … [16] built an anomaly detection framework called Deeplog …

Peskea: Anomaly detection framework for profiling kernel event attributes in embedded systems

OM Ezeme, A Azim… - IEEE Transactions on …, 2020 - ieeexplore.ieee.org
… feature-based anomaly detection framework called PESKEA, … in the execution traces of an
embedded OS to perform tracetraces, and we derive the features of our anomaly framework

A geometric framework for unsupervised anomaly detection: Detecting intrusions in unlabeled data

E Eskin, A Arnold, M Prerau, L Portnoy… - Applications of data …, 2002 - Springer
framework for unsupervised anomaly detection, which are algorithms that are designed to
process unlabeled data. In our framework… spectrum kernel which we apply to system call traces

A trace abstraction approach for host-based anomaly detection

SS Murtaza, W Khreich… - … IEEE symposium on …, 2015 - ieeexplore.ieee.org
… for anomaly detection in which we transform the content of system call traces into traces of
kernel … of normal behavior for Firefox 3.5 by executing seven different testing frameworks (test …

System performance anomaly detection using tracing data analysis

I Kohyarnejadfard, M Shakeri, D Aloise - Proceedings of the 2019 5th …, 2019 - dl.acm.org
framework consists of multiple components: trace data extraction, preprocessing and
normalization, feature selection, and anomaly detection… calls using the Linux kernel tracing. Then, …

A framework for detecting system performance anomalies using tracing data analysis

I Kohyarnejadfard, D Aloise, MR Dagenais, M Shakeri - Entropy, 2021 - mdpi.com
… In this work, we propose an anomaly detection framework … problems by highlighting
anomalous parts in trace data. Our … kernel events in a trace file and transferring it into the Trace

[PDF][PDF] Anomaly detection in kernel-level process events using machine learning-based context analysis

OM Ezeme - 2020 - researchgate.net
… Furthermore, our analysis of the kernel-level event traces of an OS for anomaly detection
presents … conditions, can we build anomaly detection frameworks to detect an aberration in the …

A host-based anomaly detection approach by representing system calls as states of kernel modules

SS Murtaza, W Khreich… - 2013 IEEE 24th …, 2013 - ieeexplore.ieee.org
… of states in anomalous traces are within the range of normal traces. For example, 0.15 and
… seven different testing frameworks (test suites) [22]. Each test framework executes different …

A formal framework for program anomaly detection

X Shu, D Yao, BG Ryder - Research in Attacks, Intrusions, and Defenses …, 2015 - Springer
… We prove that \(\tilde{M}\) can characterize traces as precise as … trace level while obtaining
the trace incurs the smallest tracing overhead. White-box level traces: all (or a part of) kernel-…