Poster: Deep learning approach to detect malicious attacks at system level

Abstract

Host based intrusion detection systems monitor operations for significant deviations from normal and healthy behavior. Anomalies are patterns in data that do not conform to the expected normal behavior. System call analysis has been conclusively established as the best method to reveal details about the program behavior. Therefore, attackers create new exploits that makes major impact at the system call level. In this research, we developed an enhanced and optimized deep learning LSTM (Long Short Term Memory) network, for anomaly detection, trained on sequences of system calls. Our model detects any ano malous behavior in thesystem calls with 80% accuracy.