Sökning: id:"swepub:oai:DiVA.org:mdh-58797" >
Towards Automatic A...
Towards Automatic Application Fingerprinting Using Performance Monitoring Counters
-
- Imtiaz, Shamoona (författare)
- Mälardalens universitet,Inbyggda system
-
- Danielsson, J. (författare)
- Ericsson AB and Mälardalen University, Sweden
-
- Behnam, Moris, 1973- (författare)
- Mälardalens universitet,Inbyggda system
-
visa fler...
-
- Capannini, G. (författare)
- Ericsson AB and Mälardalen University, Sweden
-
- Carlson, Jan (författare)
- Mälardalens universitet,Inbyggda system
-
- Marcus, Jägemar, 1972- (författare)
- Mälardalens universitet,Inbyggda system
-
visa färre...
-
(creator_code:org_t)
- 2021-05-27
- 2021
- Engelska.
-
Ingår i: ACM International Conference Proceeding Series. - New York, NY, USA : Association for Computing Machinery. - 9781450390576
- Relaterad länk:
-
https://urn.kb.se/re...
-
visa fler...
-
https://doi.org/10.1...
-
visa färre...
Abstract
Ämnesord
Stäng
- In this paper, we discuss a method for application fingerprinting using conventional hardware and software performance counters. Modern applications are complex and often utilizes a broad spectra of the available hardware resources, where multiple performance counters can be of significant interest. The number of performance counters that can be captured simultaneously is, however, small due to hardware limitations in most modern computers. We propose to mitigate the hardware limitations using an intelligent mechanism that pinpoints the most relevant performance counters for an application's performance. In our proposal, we utilize the Pearson correlation coefficient to rank the most relevant PMU events and filter out events of less relevance to an application's execution. Our ultimate goal is to establish a comparable application fingerprint model using performance counters, that we can use to classify applications. The classification procedure can then be used to determine the type of application's fingerprint, such as malicious software.
Ämnesord
- NATURVETENSKAP -- Data- och informationsvetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences (hsv//eng)
Nyckelord
- Computer hardware
- Correlation methods
- Application fingerprinting
- Automatic application
- Classification procedure
- Hardware and software
- Intelligent mechanisms
- Pearson correlation coefficients
- Performance counters
- Performance monitoring
- Application programs
Publikations- och innehållstyp
- ref (ämneskategori)
- kon (ämneskategori)
Hitta via bibliotek
Till lärosätets databas