Anomaly Detection Support Using Process Classification
Anomaly detection systems need to consider a lot of information when scanning for anomalies. One example is the context of the process in which an anomaly might occur, because anomalies for one process might not be anomalies for a different one. Therefore data -- such as system events -- need to be assigned to the program they originate from. This paper investigates whether it is possible to infer from a list of system events the program whose behavior caused the occurrence of these system events. To that end, we model transition probabilities between non-equivalent events and apply the $k$-nearest neighbors algorithm. This system is evaluated on non-malicious, real-world data using four different evaluation scores. Our results suggest that the approach proposed in this paper is capable of correctly inferring program names from system events.
Code (0)
등록된 구현이 없습니다.
Tasks
Anomaly DetectionClassificationGeneral ClassificationSimilar Papers 제목 키워드 기반
Supervised Anomaly Detection in Uncertain Pseudoperiodic Data Streams
Uncertain data streams have been widely generated in many Web applications. The uncertainty in data streams makes anomaly detection from sensor data streams far more challenging. In this paper, we present a novel framewo…
Anomaly DetectionComputational EfficiencyGeneral ClassificationSupervised Anomaly DetectionHolistic Features For Real-Time Crowd Behaviour Anomaly Detection
This paper presents a new approach to crowd behaviour anomaly detection that uses a set of efficiently computed, easily interpretable, scene-level holistic features. This low-dimensional descriptor combines two features …
Anomaly DetectionBinary ClassificationGeneral ClassificationOutlier DetectionMMVIAD: Multi-view Multi-task Video Understanding for Industrial Anomaly Detection
Industrial anomaly detection is critical for manufacturing quality control, yet existing datasets mainly focus on static images or sparse views, which do not fully reflect continuous inspection processes in real industri…
Anomaly DetectionDeep One-Class Classification
Despite the great advances made by deep learning in many machine learning problems, there is a relative dearth of deep learning approaches for anomaly detection. Those approaches which do exist involve networks trai…
Anomaly DetectionClassificationDeep LearningOne-Class Classification+1Localized Multiple Kernel Learning for Anomaly Detection: One-class Classification
Multi-kernel learning has been well explored in the recent past and has exhibited promising outcomes for multi-class classification and regression tasks. In this paper, we present a multiple kernel learning approach for …
Anomaly DetectionClassificationGeneral ClassificationMulti-class Classification+2