1,609 research outputs found
Application-based anomaly intrusion detection with dynamic information flow analysis
This paper presents a new approach to detecting software security failures, whose primary goal is facilitating identification and repair of security vulnerabilities rather than permitting online response to attacks. The approach is based on online capture of executions and offline execution replay, profiling, and analysis. It employs fine-grained dynamic information flow analysis in conjunction with anomaly detection. This approach, which we call information flow anomaly detection, is capable of detecting a variety of security failures, including both ones that involve violations of confidentiality or integrity requirements and ones that do not. A prototype tool called DynFlow implementing the approach has been developed for use with Java byte code programs. To illustrate the potential of the approach, it is applied to detect security failures of four open source systems. Also, its effectiveness is compared to the effectiveness of an approach to anomaly detection that is based on analyzing method call stacks. © 2008 Elsevier Ltd. All rights reserved.Axelsson S., 2000, ACM Transactions on Information and Systems Security, V3, DOI 10.1145-357830.357849; Axelsson S., 2000, 9915 CHALM U DEP COM; *BCEL, 2003, AP JAK PROJ AP SOFTW; CHATURVEDI A, 2005, SECLAB0503 STON BROO; DENNING DE, 1977, COMMUN ACM, V20, P504, DOI 10.1145-359636.359712; DENNING DE, 1987, IEEE T SOFTWARE ENG, V13, P222, DOI 10.1109-TSE.1987.232894; DICKINSON W, 2001, 23 INT C SOFTW ENG T, P339; DICKINSON W, 2001, 10 EUR SOFTW ENG C 9, P246; FENG H, 2003, IEEE S SEC PRIV OAKL; FENTON JS, 1974, COMPUT J, V17, P143, DOI 10.1093-comjnl-17.2.143; Forrest S., 1996, IEEE S SEC PRIV, P120; HALDAR V, 2005, 0502 U CAL DEP INF C; Hofmeyr S. A., 1998, Journal of Computer Security, V6; Jain A. K., 1988, ALGORITHMS CLUSTERIN; Leon D., 2005, 27 INT C SOFTW ENG S; Liepins G., 1989, 12 NAT COMP SEC C BA, P495; MASRI W, 2005, 2005 WORKSH SOFTW EN; Masri W, 2007, IEEE T SOFTWARE ENG, V33, P454, DOI 10.1109-TSE.2007.1020; MASRI W, 2004, 15 IEEE INT S SOFTW; MASRI W, 2006, 17 IEEE INT S SOFTW; MASRI WB, 2004, THESIS; MCCAMANT S, 2007, ACM SIGPLAN WORKSH P; MCCAMANT S, 2006, MITCSAILTR2006076; MCMASTER S, 2005, 21 INT C SOFTW MAINT; NEWSOME J, 2005, 12 NETW DISTR SYST S; ORSO A, 2005, 2005 WORKSH DYN AN S; *PERL ORG, PERL DIR; Steven S., 2000, 2000 INT S SOFTW TES, P158; SUH GE, 2004, 11 INT C ARCH SUPP P; TALLAM S, 2007, ACM T ARCHITECTURE C, V4; TAN K, 2002, 5 INT S REC ADV INTR; VACHHARAJANI N, 2004, P 37 INT S MICR MICR; Vogt P., 2007, 14 ANN NETW DISTR SY; Wagner D., 2002, P 9 ACM C COMP COMM, P255; Xu W, 2005, SECLAB0505 STON BROO; Zhang XY, 2005, ACM T PROGR LANG SYS, V27, P631, DOI 10.1145-1075382.1075384; ZIMMERMANN J, 2003, LECT NOTES COMPUTER, V2808; ZIMMERMANN J, 2003, 19 COMP SEC APPL C L199
Global Media Ideas - Infinite Pathways to Creative Succes - Andy Elwood - Part One.mp4
During the X Media Lab: Global Media Ideas summit in June 2011, media and technology writer Brad Howarth conducted interviews with industry experts for Creativeinnovation. This video is part one of Brad Howarth's interview with Andy Elwood, Directory of Business Development at Gowalla. Andy Elwood discusses the idea behind the application and how their founder Josh Williams went from inspiration to launching the idea as a business and where they stand in the market today
Global Media Ideas - Infinite Pathways to Creative Succes - Andy Elwood - Part Two.mp4
During the X Media Lab: Global Media Ideas summit in June 2011, media and technology writer Brad Howarth conducted interviews with industry experts for Creativeinnovation. This video is part two of Brad Howarth's interview with Andy Elwood, Director of Business Development at Gowalla. Andy Elwood discuss how other companies should be taking advantage of the location platform to create experiences of their brand, not just using the platform as a point of data generation. Elwood also observes that Australian brands and creative companies are well positioned to become market leaders in this platform which is still relatively new world-wide
Marie and Andy Auzin visit the Old Town part of Riga Latvia
Marie and Andy Auzins visit the Old Town part of Riga with cousin Elita Petersone in 19942.1.3 Current Latvian History in Europe (Pre-Post WWII), 2.1.1 Physical Attributes of Latvi
20 x 20 : Twenty Years of Conundrum Press
"To celebrate twenty years in operation he [Andy Brown] asked one author or artist for each year of the press who had a book out that year to contribute something new, something that represented Conundrum. For some it would have been the first book he or she had ever made. So in the end twenty Conundrumites represent twenty years, hence 20×20. There will be digging deep into the archives, there will be memoirs, there will be comics, drawings, and photographs. There will be laughter and tears of joy." -- Publisher's website
Episode 62: Andy Jones: Asking the Right Questions
Andy Jones, B.A. \u2706 is a writer, pastor, and CSP alumnus who lives in the Bay Area. In this interview, he shares about his experiences as a CSP student and staff member, his ministry journey, and how he became a published author. His books bring tremendous theological insights in an accessible and understandable manner
An empirical study of test case filtering techniques based on exercising information flows
Some software defects trigger failures only when certain local or nonlocal program interactions occur. Such interactions are modeled by the closely related concepts of information flows, program dependences, and program slices. The latter concepts underlie a 78variety of proposed test data adequacy criteria, and they form a potentially important basis for filtering existing test cases. We report the results of an empirical study of several test case filtering techniques that are based on exercising information flows. Both coverage-based and profile-distribution-based filtering techniques are considered. They are compared to filtering techniques based on exercising simpler program elements, such as basic blocks, branches, function calls, and call pairs, with respect to their effectiveness for revealing defects. © 2007 IEEE.Agrawal H., 1993, Proceedings. Conference on Software Maintenance 1993. CSM-93 (Cat. No.93CH3360-5), DOI 10.1109-ICSM.1993.366927; Bates S., 1993, P 20 ACM S PRINC PRO, P384, DOI 10.1145-158511.158694; *BCEL, 2005, AP JAK PROJ; CLARKE LA, 1989, IEEE T SOFTWARE ENG, V15, P1381; DENNING DE, 1977, COMMUN ACM, V20, P504, DOI 10.1145-359636.359712; Dickinson W, 2001, PROC INT CONF SOFTW, P339, DOI 10.1109-ICSE.2001.919107; Dickinson W., 2001, P JOINT 8 EUR SOFTW, P246; Elbaum S, 2002, IEEE T SOFTWARE ENG, V28, P159, DOI 10.1109-32.988497; FERRANTE J, 1987, ACM T PROGR LANG SYS, V9, P319, DOI 10.1145-24039.24041; Frank MP, 1998, NANOTECHNOLOGY, V9, P162, DOI 10.1088-0957-4484-9-3-005; Frankl P. G., 2000, P ACM INT S SOFTW TE, P124, DOI 10.1145-347324.348926; Graves TL, 2001, ACM T SOFTW ENG METH, V10, P184, DOI 10.1145-367008.367020; Gupta KC, 1996, INT J MICROWAVE MILL, V6, P83; HAROLD MJ, 2000, J SOFTWARE TESTING V, V10, P171; Hochbaum D.S, 1997, APPROXIMATION ALGORI; KIM JM, 2002, P 24 INT C SOFTW ENG, P119; KOREL B, 1987, INFORM PROCESS LETT, V24, P103, DOI 10.1016-0020-0190(87)90102-5; KOREL B, 1994, P INT S SOFTW TEST A, P666; KOREL B, 1988, INFORM PROCESS LETT, V29, P155, DOI 10.1016-0020-0190(88)90054-3; LASKI JW, 1983, IEEE T SOFTWARE ENG, V9, P347, DOI 10.1109-TSE.1983.236871; LEON D, 2003, P INT S SOFTW REL EN, P442; Leon D, 2005, PROC INT CONF SOFTW, P412; Leon D., 2000, Proceedings of the 2000 International Conference on Software Engineering. ICSE 2000 the New Millennium, DOI 10.1109-ICSE.2000.870403; MASRI W, 2006, P 4 INT WORKSH DYN A; Masri W., 2005, P WORKSH SOFTW ENG S, P1, DOI 10.1145-1083200.1083216; MASRI W, 2006, P 17 IEEE INT S SOFT; Masri W., 2004, P 15 INT S SOFTW REL, P198; *MIT I NATL RECH I, 1998, JTIDY WORLD WID WEB; MORELL LJ, 1990, IEEE T SOFTWARE ENG, V16, P844, DOI 10.1109-32.57623; NTAFOS SC, 1984, IEEE T SOFTWARE ENG, V10, P795; Podgurski A, 2003, PROC INT CONF SOFTW, P465, DOI 10.1109-ICSE.2003.1201224; PODGURSKI A, 1990, IEEE T SOFTWARE ENG, V16, P965, DOI 10.1109-32.58784; RAPPS S, 1985, IEEE T SOFTWARE ENG, V11, P367, DOI 10.1109-TSE.1985.232226; Rothermel G, 2001, IEEE T SOFTWARE ENG, V27, P929, DOI 10.1109-32.962562; Rothermel G., 1994, P 1994 INT S SOFTW T, P169; Rothermel G., 1993, Proceedings. Conference on Software Maintenance 1993. CSM-93 (Cat. No.93CH3360-5), DOI 10.1109-ICSM.1993.366926; Rothermel G, 1998, PROC IEEE INT CONF S, P34, DOI 10.1109-ICSM.1998.738487; SINHA S, 2000, ACM T SOFTW ENG METH, P209; *SIR, 2006, SOFTW ART INFR REP; *SUN MICR, JAV LANG SPEC; Thompson Margaret C., 1993, P ACM INT S SOFTW TE, P182, DOI 10.1145-154183.154270; WEISER M, 1984, IEEE T SOFTWARE ENG, V10, P352; Wong WE, 1997, P INT COMP SOFTW APP, P522, DOI 10.1109-CMPSAC.1997.625062; 2005, XERCES APACHE XML PR39262
Recommended from our members
The Andy Stories
The four stories within, "Jim of India," "Shooting the Breeze," "Bridge," and "Point Reyes," are part of a longer work in progress, tentatively titled The Andy Stories. The stories follow Andy, a woman in her 50s, on a voyage across the continent and into herself. Of these, all are written in the present, except "Bridge," which is a memory of a visit to San Francisco when Andy was 12. Eventually, some of the Andy stories may stand on their own, though they were originally written in that wavery ground between short story and novel chapter. However, whether story collection or novel, the author intends this thesis to represent early drafts of what may eventually be a longer, and perhaps much different work
The Shape of Things That Came
HG Wells' future history novel looks back from the year 2106. Halfway through the novel's time span, Sean Street explores what the author got almost right - or terribly wrong.
In 1933, Wells published a novel which purported to be a history of the years 1929 to 2105, received from the future in dreams. He called his book The Shape of Things to Come, a phrase that has since become a part of the English language. Now, 84 years into the time scale of this prophetic book and with 88 more to go to complete the story - poet and professor of radio Sean Street goes back to the text and explores what Wells got right, what he got wrong - and what may be yet to come.
From predicting another world war to a utopian world government, he navigates a journey through Wells' future past using audio archives and contemporary news bulletins, with expert help from Christopher Frayling, Andy Sawyer and Orson Wells.
Reader: Jenny Lane
Producer: Andy Cartwright
A Soundscape production for BBC Radio 4
- …
