NDLI: A Method for Detecting Abnormal Program Behavior on Embedded Devices

Content Provider	IEEE Xplore Digital Library
Author	Xiaojun Zhai Appiah, K. Ehsan, S. Howells, G. Huosheng Hu Dongbing Gu McDonald-Maier, K.D.
Copyright Year	2005
Abstract	A potential threat to embedded systems is the execution of unknown or malicious software capable of triggering harmful system behavior, aimed at theft of sensitive data or causing damage to the system. Commercial off-the-shelf embedded devices, such as embedded medical equipment, are more vulnerable as these type of products cannot be amended conventionally or have limited resources to implement protection mechanisms. In this paper, we present a self-organizing map (SOM)-based approach to enhance embedded system security by detecting abnormal program behavior. The proposed method extracts features derived from processor's program counter and cycles per instruction, and then utilises the features to identify abnormal behavior using the SOM. Results achieved in our experiment show that the proposed method can identify unknown program behaviors not included in the training set with over 98.4% accuracy.
Sponsorship	IEEE Signal Processing Society
Starting Page	1692
Ending Page	1704
Page Count	13
File Size	2962838
File Format	PDF
ISSN	15566013
Volume Number	10
Issue Number	8
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-01-01
Publisher Place	U.S.A.
Access Restriction	One Nation One Subscription (ONOS)
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Embedded systems Security Computer architecture Feature extraction Hardware Complexity theory Self-Organising Map Embedded system security abnormal behaviour detection intrusion detection self-organising map
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Safety, Risk, Reliability and Quality

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

An FPGA-Based Network Intrusion Detection Architecture

Detecting Spoofing and Anomalous Traffic in Wireless Networks via Forge-Resistant Relationships

Building a Scalable System for Stealthy P2P-Botnet Detection

Extracting malicious behaviours

Semantics-Based Online Malware Detection: Towards Efficient Real-Time Protection Against Malware

Exploring the dynamics of self-organising systems with stochastic π-calculus: Detecting abnormal behaviour in MAS (2006)

A Game Theoretical Framework on Intrusion Detection in Heterogeneous Networks

A Self-Organising Map Based Algorithm for Analysis of ICmetrics Features

Detecting Sponsored Recommendations

A Method for Detecting Abnormal Program Behavior on Embedded Devices

Similar Documents

An FPGA-Based Network Intrusion Detection Architecture

Detecting Spoofing and Anomalous Traffic in Wireless Networks via Forge-Resistant Relationships

Building a Scalable System for Stealthy P2P-Botnet Detection

Extracting malicious behaviours

Semantics-Based Online Malware Detection: Towards Efficient Real-Time Protection Against Malware

Exploring the dynamics of self-organising systems with stochastic π-calculus: Detecting abnormal behaviour in MAS (2006)

A Game Theoretical Framework on Intrusion Detection in Heterogeneous Networks

A Self-Organising Map Based Algorithm for Analysis of ICmetrics Features

Detecting Sponsored Recommendations

A Method for Detecting Abnormal Program Behavior on Embedded Devices