Anomaly Detection for malware identification using Hardware Performance Counters

Papi: A portable interface to hardware performance counters

Philip J. Mucci, Shirley Browne, Christine Deane, and George Ho · 1999

Earlier work this paper cites.

Lof: Identifying density-based local outliers

Markus M. Breunig, Hans-Peter Kriegel, Raymond T. Ng, and Jörg Sander · 2000

Earlier work this paper cites.

Buffer overflows: attacks and defenses for the vulnerability of the decade

C. Cowan, F. Wagle, Calton Pu, S. Beattie, and J. Walpole · 2000

Earlier work this paper cites.

A geometric framework for unsupervised anomaly detection: Detecting intrusions in unlabeled data

Eleazar Eskin, Andrew Arnold, Michael Prerau, Leonid Portnoy, and Sal Stolfo · 2002

Earlier work this paper cites.

Anomaly detection: A survey

Varun Chandola, Arindam Banerjee, and Vipin Kumar · 2009

Earlier work this paper cites.

Feature selection for effective anomaly-based intrusion detection

Neveen I. Ghali · 2009

Earlier work this paper cites.

An ensemble approach for feature selection of cyber attack dataset

Original

Shailendra Singh and Sanjay Silakari · 2009

Cited alongside, same era.

A detailed analysis of the kdd cup 99 data set

Mahbod Tavallaee, Ebrahim Bagheri, Wei Lu, and Ali A. Ghorbani · 2009

Cited alongside, same era.

Accuracy of performance counter measurements

Dmitrijs Zaparanuks, Milan Jovic, and Matthias Hauswirth · 2009

Cited alongside, same era.

Monitoring for security intrusion using performance signatures

Alberto Avritzer, Rajanikanth Tanikella, Kiran James, Robert G. Cole, and Elaine Weyuker · 2010

Cited alongside, same era.

Automatic analysis of malware behavior using machine learning

Konrad Rieck, Philipp Trinius, Carsten Willems, and Thorsten Holz · 2011

Cited alongside, same era.

Return-oriented programming

Marco Prandini and Marco Ramilli · 2012

On the feasibility of online malware detection with performance counters

John Demme, Matthew Maycock, Jared Schmitz, Adrian Tang, Adam Waksman, Simha Sethumadhavan, and Salvatore Stolfo · 2013

Later among the works it cites.

A close look on n-grams in intrusion detection: Anomaly detection vs. classification

Christian Wressnegger, Guido Schwenk, Daniel Arp, and Konrad Rieck · 2013

Later among the works it cites.

Unsupervised anomaly-based malware detection using hardware features

Original

Adrian Tang, Simha Sethumadhavan, and Salvatore J. Stolfo · 2014

Later among the works it cites.

perf patch

Stephane Eranian · 2015

Closest in time.

nweb: a tiny, safe web server

Nigel Griffiths · 2015

Closest in time.