基于属性数据的系统调用过滤方法
文献类型：期刊论文
| 作者 | 郭航 ; 连一峰 |
| 刊名 | 计算机工程与设计
 |
| 出版日期 | 2014 |
| 卷号 | 35期号:8页码:2621-2627 |
| 关键词 | 系统调用 系统对象 属性数据 系统调用依赖规则 网络攻击 system call system objects attribute system call dependency rules network attack |
| ISSN号 | 1000-7024 |
| 其他题名 | Attribute-based methods for system call filtering |
| 中文摘要 | 针对现有系统调用过滤方法的局限性，对如何有效准确地精简系统调用日志进行研究，分析系统调用日志中涉及网络攻击的重要系统调用信息，提出一种基于属性数据的系统调用过滤方法。通过追踪和分析系统调用的属性数据，引入系统调用依赖规则，在确保准确性的前提下，对系统调用日志进行合理有效地精简、过滤；在此基础上，实现一个名为“系统调用分离器”的过滤工具。通过实验验证了该方法及工具的有效性和适用性。 Due to the limitations of the existing methods for system call filtering ,an issue that how to filter system call logs more efficiently was studied ,and the important information of system calls relating to network attacks was analyzed .Therefore an at-tribute-based method for system call filtering was proposed .Through tracing and analyzing all the needed attributes of system calls ,system call dependency rules were used .The huge system call logs were filtered in a more efficient and effective way on the premise of ensuring the filtering accuracy .Based on this ,a system call filtering tool called Separator was implemented and tested in experiments . |
| 英文摘要 | Due to the limitations of the existing methods for system call filtering, an issue that how to filter system call logs more efficiently was studied, and the important information of system calls relating to network attacks was analyzed. Therefore an attribute-based method for system call filtering was proposed. Through tracing and analyzing all the needed attributes of system calls, system call dependency rules were used. The huge system call logs were filtered in a more efficient and effective way on the premise of ensuring the filtering accuracy. Based on this, a system call filtering tool called Separator was implemented and tested in experiments. |
| 收录类别 | CSCD |
| 语种 | 中文 |
| CSCD记录号 | CSCD:5222484 |
| 公开日期 | 2014-12-16 |
| 源URL | [http://ir.iscas.ac.cn/handle/311060/16715]  |
| 专题 | 软件研究所_软件所图书馆_期刊论文 |
| 推荐引用方式 GB/T 7714 | 郭航,连一峰. 基于属性数据的系统调用过滤方法[J]. 计算机工程与设计,2014,35(8):2621-2627. |
| APA | 郭航,&连一峰.(2014).基于属性数据的系统调用过滤方法.计算机工程与设计,35(8),2621-2627. |
| MLA | 郭航,et al."基于属性数据的系统调用过滤方法".计算机工程与设计 35.8(2014):2621-2627. |
入库方式： OAI收割
来源：软件研究所
浏览0
下载0
收藏0
其他版本
除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。