Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Model-based anomaly detection systems restrict program execution by a predefined model of allod system call sequences. These systems are useful only if they detect actual attacks. Previous research developed manually-constructed mimicry and evasion attacks that avoided detection by hiding a malicious series of system calls within a valid sequence allod by the model. Our work helps to automate the discovery of such attacks.  start with two models: a program model of the application's system call behavior and a model of security-critical operating system state. Given unsafe OS state configurations that describe the goals of an attack,  then find system call sequences allod as valid execution by the program model that produce the unsafe configurations. Our experiments show that  can automatically find attack sequences in models of programs such as wu - f tpd and passwd that previously have only been discovered manually. When undetected attacks are present,  frequently find the sequences with less than 2 seconds of computation.
['Jonathon T. Giffin', 'Somesh Jha', 'Barton P. Miller']
I am writing a research paper on a idea Automated discovery of mimicry attacks
[{"from": "human", "value": "I am writing a research paper on a idea Automated discovery of mimicry attacks"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Model-based anomaly detection systems restrict program execution by a predefined model of allod system call sequences. These systems are useful only if they detect actual attacks. Previous research developed manually-constructed mimicry and evasion attacks that avoided detection by hiding a malicious series of system calls within a valid sequence allod by the model. Our work helps to automate the discovery of such attacks.  start with two models: a program model of the application's system call behavior and a model of security-critical operating system state. Given unsafe OS state configurations that describe the goals of an attack,  then find system call sequences allod as valid execution by the program model that produce the unsafe configurations. Our experiments show that  can automatically find attack sequences in models of programs such as wu - f tpd and passwd that previously have only been discovered manually. When undetected attacks are present,  frequently find the sequences with less than 2 seconds of computation."}]