{"id":"https://openalex.org/W2773175795","doi":"https://doi.org/10.1109/milcom.2017.8170835","title":"A dataset generator for next generation system call host intrusion detection systems","display_name":"A dataset generator for next generation system call host intrusion detection systems","publication_year":2017,"publication_date":"2017-10-01","ids":{"openalex":"https://openalex.org/W2773175795","doi":"https://doi.org/10.1109/milcom.2017.8170835","mag":"2773175795"},"language":"en","primary_location":{"id":"doi:10.1109/milcom.2017.8170835","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom.2017.8170835","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2017 - 2017 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023559211","display_name":"Marcus Pendleton","orcid":null},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Marcus Pendleton","raw_affiliation_strings":["Department of Computer Science, The University of Texas at San Antonio, San Antonio, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, The University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019179799","display_name":"Shouhuai Xu","orcid":"https://orcid.org/0000-0001-8034-0942"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shouhuai Xu","raw_affiliation_strings":["Department of Computer Science, The University of Texas at San Antonio, San Antonio, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, The University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I45438204"],"apc_list":null,"apc_paid":null,"fwci":2.4729,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.90917012,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"15","issue":null,"first_page":"231","last_page":"236"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.870663046836853},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6976447105407715},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6406264305114746},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.5816848278045654},{"id":"https://openalex.org/keywords/generator","display_name":"Generator (circuit theory)","score":0.573215126991272},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5645430088043213},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5081911087036133},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.48796218633651733},{"id":"https://openalex.org/keywords/call-graph","display_name":"Call graph","score":0.483762264251709},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.472076416015625},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.4172346293926239},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.27555614709854126},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.19781771302223206},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.16435346007347107},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10134798288345337}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.870663046836853},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6976447105407715},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6406264305114746},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.5816848278045654},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.573215126991272},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5645430088043213},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5081911087036133},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.48796218633651733},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.483762264251709},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.472076416015625},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.4172346293926239},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27555614709854126},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.19781771302223206},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.16435346007347107},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10134798288345337},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/milcom.2017.8170835","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom.2017.8170835","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2017 - 2017 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6700000166893005,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1591480890","https://openalex.org/W1600911019","https://openalex.org/W1602273440","https://openalex.org/W1832277845","https://openalex.org/W1962980066","https://openalex.org/W1981738628","https://openalex.org/W1988918299","https://openalex.org/W2040564948","https://openalex.org/W2064675550","https://openalex.org/W2123886726","https://openalex.org/W2129860818","https://openalex.org/W2135143063","https://openalex.org/W2167240430","https://openalex.org/W3136767761","https://openalex.org/W6635828606"],"related_works":["https://openalex.org/W2439951656","https://openalex.org/W1573526548","https://openalex.org/W1998188341","https://openalex.org/W4360982091","https://openalex.org/W3176864451","https://openalex.org/W2053632570","https://openalex.org/W2085562432","https://openalex.org/W2097474888","https://openalex.org/W2121579803","https://openalex.org/W3120011499"],"abstract_inverted_index":{"Over":[0],"the":[1,57,75,78,90,115,122,170,223],"years,":[2],"system":[3],"calls":[4],"(syscalls)":[5],"have":[6,111],"become":[7],"an":[8,183],"increasingly":[9],"popular":[10],"data":[11,163],"source":[12],"for":[13,55,96,104,125,199,226],"host":[14],"intrusion":[15],"detection":[16],"systems":[17],"(HIDS).":[18],"This":[19,52],"is":[20,53,166],"partly":[21],"due":[22],"to":[23,32,70,74,172,201,207],"their":[24,102,144,204,213],"strong":[25],"security":[26],"semantic":[27],"implications.":[28],"As":[29],"syscalls":[30,67,86,110,142],"conform":[31],"a":[33,37,40,45,48],"program's":[34,49],"control-flow":[35,50,58],"graph,":[36],"deviation":[38,46],"in":[39,47,68,130,143,221],"syscall":[41,99,116,185,227],"sequence":[42],"may":[43,134],"imply":[44],"graph.":[51],"useful":[54],"detecting":[56],"hijacking":[59],"class":[60],"of":[61,80,150],"attacks.":[62,83],"Additionally,":[63],"malware":[64],"must":[65],"utilize":[66],"order":[69],"provide":[71],"any":[72],"utility":[73],"attacker,":[76],"with":[77],"exception":[79],"some":[81],"denial-of-service":[82],"Because":[84],"all":[85],"are":[87,119,159],"observable":[88],"from":[89],"kernel,":[91],"this":[92,148,179],"makes":[93],"evasion":[94],"difficult":[95],"attackers":[97],"under":[98],"HIDS.":[100,228],"Given":[101],"suitability":[103],"HIDS,":[105],"many":[106],"approaches":[107],"based":[108],"on":[109,169],"been":[112],"proposed.":[113],"However,":[114],"datasets":[117,152],"available":[118],"not":[120],"always":[121],"most":[123],"suitable":[124],"these":[126],"and":[127,191,211],"emerging":[128],"techniques":[129],"analytics,":[131],"as":[132],"they":[133],"need":[135],"additional":[136],"structural":[137,190],"or":[138],"contextual":[139,193],"information":[140,194],"about":[141],"decision":[145],"engine.":[146],"Furthermore,":[147],"flatness":[149],"previous":[151],"often":[153],"pigeonholes":[154],"solutions":[155],"into":[156],"those":[157],"which":[158,188],"limited":[160,192],"by":[161],"that":[162],"view.":[164],"It":[165],"also":[167],"burdensome":[168],"researcher":[171],"generate":[173],"his":[174],"own":[175,205],"custom":[176],"dataset.":[177],"In":[178],"work,":[180],"we":[181],"propose":[182],"extensible":[184],"dataset":[186,216],"generator":[187,217],"includes":[189],"regarding":[195],"syscalls,":[196],"yet":[197],"allows":[198],"researchers":[200,220],"easily":[202],"add":[203],"features":[206],"more":[208],"quickly":[209],"develop":[210],"evaluate":[212],"systems.":[214],"Our":[215],"can":[218],"aid":[219],"widening":[222],"solution":[224],"space":[225]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":7}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}