Anomalous path detection with hardware support

Embedded systems are being deployed as a part of critical infrastructures and are vulnerable to malicious attacks due to internet accessibility. Intrusion detection systems have been proposed to protect computer systems from unauthorized penetration. Detecting an attack early on pays off since further damage is avoided and in some cases, resilient recovery could be adopted. This is especially important for embedded systems deployed in critical infrastructures such as Power Grids etc. where a timely intervention could save catastrophes. An intrusion detection system monitors dynamic program behavior against normal program behavior and raises an alert when an anomaly is detected. The normal behavior is learnt by the system through training and profiling. However, all current intrusion detection systems are purely software based and thus suffer from large performance degradation due to constant monitoring operations inserted in application code. Due to the potential performance overheads...

• Type: Conference
• Year: 2005
• Where: CASES
• Authors: Tao Zhang, Xiaotong Zhuang, Santosh Pande, Wenke Lee
• Keywords: CASES 2005, Embedded Systems, Intrusion Detection Systems, Program Behavior, System Software