首页> 外文会议>2019 Spring Simulation Conference >Window-Based Statistical Analysis Of Timing Subcomponents For Efficient Detection Of Malware In Life-Critical Systems
【24h】

Window-Based Statistical Analysis Of Timing Subcomponents For Efficient Detection Of Malware In Life-Critical Systems

机译:基于窗口的计时子组件统计分析,可在生命关键系统中有效检测恶意软件

获取原文
获取原文并翻译 | 示例

摘要

Securing life-critical embedded systems, particularly medical devices, requires both proactive security measures that prevent intrusions and reactive measures that detect intrusions. This paper presents a novel model for specifying the normal timing for operations in software applications using cumulative distribution functions of timing subcomponent within sliding execution windows. We present a probabilistic formulation for estimating the presence of malware for individual operations by monitoring the internal timing of the different components of the system, and we define thresholds to minimize false positives based on training data. Experimental results with a smart connected pacemaker and three sophisticated mimicry malware scenarios demonstrate improved performance and accuracy compared to state-of-the-art timing-based malware detection.
机译:要确保对生命至关重要的嵌入式系统(尤其是医疗设备)的安全,既需要预防入侵的主动安全措施,也需要检测入侵的被动措施。本文提出了一种新颖的模型,该模型使用滑动执行窗口内的时序子组件的累积分布函数来指定软件应用程序中操作的正常时序。我们提出了一种概率公式,用于通过监视系统不同组件的内部计时来估计单个操作的恶意软件的存在,并且我们根据训练数据定义阈值以最大程度地减少误报。与最新的基于定时的恶意软件检测相比,智能连接的起搏器和三种复杂的模仿恶意软件场景的实验结果证明了改进的性能和准确性。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号