Characterizing the behavior of a program using multiple-length N-grams

Detection and classification of intrusions and faults using sequences of system calls

ACM SIGMOD Record

Anomaly intrusion detection in dynamic execution environments

Proceedings of the 2002 workshop on New security paradigms

User re-authentication via mouse movements

Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security

Empirical privilege profiling

NSPW '05 Proceedings of the 2005 workshop on New security paradigms

Learning DFA representations of HTTP for protecting web applications

Computer Networks: The International Journal of Computer and Telecommunications Networking

Anomaly-based fault detection in pervasive computing system

Proceedings of the 5th international conference on Pervasive services

Anomaly detection: A survey

ACM Computing Surveys (CSUR)

Applying randomized projection to aid prediction algorithms in detecting high-dimensional rogue applications

Proceedings of the 47th Annual Southeast Regional Conference

Undermining an anomaly-based intrusion detection system using common exploits

RAID'02 Proceedings of the 5th international conference on Recent advances in intrusion detection

Aiding prediction algorithms in detecting high-dimensional malicious applications using a randomized projection technique

Proceedings of the 48th Annual Southeast Regional Conference

Using randomized projection techniques to aid in detecting high-dimensional malicious applications

Proceedings of the 49th Annual Southeast Regional Conference

Modular behavior profiles in systems with shared libraries (short paper)

ICICS'06 Proceedings of the 8th international conference on Information and Communications Security

Detecting unknown network attacks using language models

DIMVA'06 Proceedings of the Third international conference on Detection of Intrusions and Malware & Vulnerability Assessment

A probabilistic method for detecting anomalous program behavior

WISA'04 Proceedings of the 5th international conference on Information Security Applications

Service discrimination and audit file reduction for effective intrusion detection

WISA'04 Proceedings of the 5th international conference on Information Security Applications

On the role of information compaction to intrusion detection

ISSADS'05 Proceedings of the 5th international conference on Advanced Distributed Systems

Anagram: a content anomaly detector resistant to mimicry attack

RAID'06 Proceedings of the 9th international conference on Recent Advances in Intrusion Detection

New malicious code detection using variable length n-grams

ICISS'06 Proceedings of the Second international conference on Information Systems Security

Applying random projection to the classification of malicious applications using data mining algorithms

Proceedings of the 50th Annual Southeast Regional Conference

Data flow analysis for anomaly detection and identification toward resiliency in extreme scale systems

The Journal of Supercomputing

Applying static analysis to high-dimensional malicious application detection

Proceedings of the 51st ACM Southeast Conference