Formal specification for fast automatic profiling of program behavior

Roberto Di Pietro; Antonio Durante; Luigi V. Mancini

doi:10.1007/978-0-387-77265-3_2

Formal specification for fast automatic profiling of program behavior

Roberto Di Pietro, Antonio Durante, Luigi V. Mancini

Research output: Contribution to journal › Article › peer-review

Abstract

This paper illustrates a methodology for the synthesis of the behavior of an application program in terms of the set of system calls invoked by the program. The methodology is completely automated, with the exception of the description of the high level specification of the application program which is demanded to the system analyst. The technology employed (VSP/CVS) for such synthesis minimizes the efforts required to code the specification of the application. The methodology we propose has been applied to several daemons; as a case study, we discuss it in details to the Post Office Protocol, the ipop3d daemon. Though the methodology is independent from the intrusion detection tool adopted, the results have been employed to configure the REMUS intrusion detection system and are shown in this paper.

Original language	English (US)
Pages (from-to)	17-37
Number of pages	21
Journal	Advances in Information Security
Volume	38
DOIs	https://doi.org/10.1007/978-0-387-77265-3_2
State	Published - Dec 1 2008
Externally published	Yes

Bibliographical note

Generated from Scopus record by KAUST IRTS on 2023-09-20

ASJC Scopus subject areas

Information Systems
Computer Networks and Communications

Access to Document

10.1007/978-0-387-77265-3_2

Cite this

@article{339a7860169944f484793d46e5004010,

title = "Formal specification for fast automatic profiling of program behavior",

abstract = "This paper illustrates a methodology for the synthesis of the behavior of an application program in terms of the set of system calls invoked by the program. The methodology is completely automated, with the exception of the description of the high level specification of the application program which is demanded to the system analyst. The technology employed (VSP/CVS) for such synthesis minimizes the efforts required to code the specification of the application. The methodology we propose has been applied to several daemons; as a case study, we discuss it in details to the Post Office Protocol, the ipop3d daemon. Though the methodology is independent from the intrusion detection tool adopted, the results have been employed to configure the REMUS intrusion detection system and are shown in this paper.",

author = "{Di Pietro}, Roberto and Antonio Durante and Mancini, {Luigi V.}",

note = "Generated from Scopus record by KAUST IRTS on 2023-09-20",

year = "2008",

month = dec,

day = "1",

doi = "10.1007/978-0-387-77265-3_2",

language = "English (US)",

volume = "38",

pages = "17--37",

journal = "Advances in Information Security",

issn = "1568-2633",

publisher = "Springer Science + Business Media",

}

TY - JOUR

T1 - Formal specification for fast automatic profiling of program behavior

AU - Di Pietro, Roberto

AU - Durante, Antonio

AU - Mancini, Luigi V.

N1 - Generated from Scopus record by KAUST IRTS on 2023-09-20

PY - 2008/12/1

Y1 - 2008/12/1

N2 - This paper illustrates a methodology for the synthesis of the behavior of an application program in terms of the set of system calls invoked by the program. The methodology is completely automated, with the exception of the description of the high level specification of the application program which is demanded to the system analyst. The technology employed (VSP/CVS) for such synthesis minimizes the efforts required to code the specification of the application. The methodology we propose has been applied to several daemons; as a case study, we discuss it in details to the Post Office Protocol, the ipop3d daemon. Though the methodology is independent from the intrusion detection tool adopted, the results have been employed to configure the REMUS intrusion detection system and are shown in this paper.

AB - This paper illustrates a methodology for the synthesis of the behavior of an application program in terms of the set of system calls invoked by the program. The methodology is completely automated, with the exception of the description of the high level specification of the application program which is demanded to the system analyst. The technology employed (VSP/CVS) for such synthesis minimizes the efforts required to code the specification of the application. The methodology we propose has been applied to several daemons; as a case study, we discuss it in details to the Post Office Protocol, the ipop3d daemon. Though the methodology is independent from the intrusion detection tool adopted, the results have been employed to configure the REMUS intrusion detection system and are shown in this paper.

UR - https://link.springer.com/10.1007/978-0-387-77265-3_2

UR - http://www.scopus.com/inward/record.url?scp=84882807372&partnerID=8YFLogxK

U2 - 10.1007/978-0-387-77265-3_2

DO - 10.1007/978-0-387-77265-3_2

M3 - Article

SN - 1568-2633

VL - 38

SP - 17

EP - 37

JO - Advances in Information Security

JF - Advances in Information Security

ER -

Formal specification for fast automatic profiling of program behavior

Abstract

Bibliographical note

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this