System Audit

Xanthus: Push-button Orchestration of Host Provenance Data Collection
Host-based anomaly detectors generate alarms by inspecting audit logs for suspicious behavior. Unfortunately, evaluating these …
Xueyuan Michael Han-Vanbastelaer, James Mickens, Ashish Gehani, Margo Seltzer, Thomas Pasquier
PDF Cite DOI Code
Xanthus: Push-button Orchestration of Host Provenance Data Collection