NDLI: Pattern and Policy Driven Log Analysis for Software Monitoring

Content Provider	IEEE Xplore Digital Library
Author	Razavi, A. Kontogiannis, K.
Copyright Year	2008
Description	Author affiliation: Dept. of Electr. & Comput. Eng., Unversity of Waterloo, Waterloo, ON (Razavi, A.)
Abstract	The component-based nature of large industrial software systems that consist of a number of diverse collaborating applications, pose significant challenges with respect to system maintenance, monitoring, auditing, and diagnosing. In this context, a monitoring and diagnostic system interprets log data to recognize patterns of significant events that conform to specific threat models. Threat models have been used by the software industry for analyzing and documenting a systempsilas risks in order to understand a systempsilas threat profile. In this paper, we propose a framework whereby patterns of significant events are represented as expressions of a specialized monitoring language that are used to annotate specific threat models. An approximate matching technique that is based on the Viterbi algorithm is then used to identify whether system generated events, fit the given patterns. The technique has been applied and evaluated considering threat models and monitoring policies in logs that have been obtained from multi-user MS-Windows based systems.
Starting Page	108
Ending Page	111
File Size	339791
Page Count	4
File Format	PDF
ISBN	9780769532622
ISSN	07303157
DOI	10.1109/COMPSAC.2008.81
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2008-07-28
Publisher Place	Finland
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Hidden Markov models Monitoring Intrusion detection Pattern matching Viterbi algorithm Software Analytical models Trace Analysis Software Monitoring Software Auditing
Content Type	Text
Resource Type	Article
Subject	Computer Science Applications Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Viterbi algorithm for detecting DDoS attacks

Analyzing Log Files for Postmortem Intrusion Detection

Efficacy of Hidden Markov Models Over Neural Networks in Anomaly Intrusion Detection

On efficient Viterbi decoding for hidden semi-Markov models

Hidden Markov Model based anomaly intrusion detection

Study on the applications of hidden Markov models to computer intrusion detection

Domain Independent Event Analysis for Log Data Reduction

Correlating alerts with a data mining based approach

Anomaly detection with high deviations for system security

Pattern and Policy Driven Log Analysis for Software Monitoring

Similar Documents

Viterbi algorithm for detecting DDoS attacks

Analyzing Log Files for Postmortem Intrusion Detection

Efficacy of Hidden Markov Models Over Neural Networks in Anomaly Intrusion Detection

On efficient Viterbi decoding for hidden semi-Markov models

Hidden Markov Model based anomaly intrusion detection

Study on the applications of hidden Markov models to computer intrusion detection

Domain Independent Event Analysis for Log Data Reduction

Correlating alerts with a data mining based approach

Anomaly detection with high deviations for system security

Pattern and Policy Driven Log Analysis for Software Monitoring