{"doi":"10.1109/trustcom56396.2022.00164","title":"Benchmark Tool for Detecting Anomalous Program Behaviour on Embedded Devices","abstract":null,"journal":"2022 IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","year":2022,"id":640324,"datarank":0.0,"base_score":0.0,"endowment":0.0,"self_citation_contribution":0.0,"citation_network_contribution":0.0,"self_endowment_contribution":0.0,"citer_contribution":0.0,"corpus_percentile":null,"corpus_rank":null,"citation_count":0,"citer_count":0,"citers_with_citation_signal":0,"citers_with_endowment":0,"datacite_reuse_total":0,"is_dataset":false,"is_dataset_confidence":null,"is_data_producer":false,"deposit_databanks":null,"is_oa":false,"file_count":0,"downloads":0,"has_version_chain":false,"published_date":null,"fair_score":null,"fair_percentile":null,"algorithm_id":"datarank_citation_only_1hop_v6","ranking_scope":"data_only","authors":[{"id":1664091,"name":"Sangeet Saha","orcid":null,"position":1,"is_corresponding":false},{"id":1664092,"name":"Xiaojun Zhai","orcid":null,"position":2,"is_corresponding":false},{"id":1664093,"name":"Klaus McDonald-Maier","orcid":null,"position":3,"is_corresponding":false},{"id":1664090,"name":"Michal Borowski","orcid":null,"position":0,"is_corresponding":false}],"reference_count":0,"raw_metadata":{"has_enrichment":true,"resolved":true,"title":"Benchmark Tool for Detecting Anomalous Program Behaviour on Embedded Devices","abstract":"This paper presents an open-source benchmark tool for anomaly detection in program behaviour, using program counter (PC) and instruction type information. It is introducing anomalies in artificial way, allowing for fine-grained evaluation with adjustable sliding window sizes and preprocessing configuration. The usage of the benchmark, including demonstrated data collection, does not require any additional hardware other than a standard computer. The benchmark uses the output of llvm-objdump program to focus on non-library code which allows for rapid evaluation of various detection methods with different configurations. The proposed tool extracts features derived from processor’s PC and instruction type information and then utilizes the features to identify abnormal behavior using 4 different anomaly detection algorithms. New detection methods can be easily incorporated into the benchmark, which provides a solid foundation for evaluating novel, previously unseen methods against methods we selected for our experiment.","is_dataset_classified":null,"base_score":0.0,"endowment":0.0,"datacite_reuse_total":0,"file_count":0,"downloads":0,"views":0,"has_version_chain":false,"is_dataset":false,"is_oa":false,"pmid":"19767382","pmcid":null,"openalex_id":"https://openalex.org/W4328028893","authors":[],"funders":[],"total_grants":0,"fwci":0.0,"citation_percentile":0.25461499,"influential_citations":0,"citation_trend":[],"oa_status":"closed","license":"https://doi.org/10.15223/policy-029","oa_locations":[{"url":"http://xplorestaging.ieee.org/ielx7/10063338/10063342/10063530.pdf?arnumber=10063530","host_type":"publisher"},{"url":"http://dx.doi.org/10.1109/trustcom56396.2022.00164","host_type":""}],"fields_of_study":["Network Security and Intrusion Detection","Advanced Malware Detection Techniques","Anomaly Detection Techniques and Applications"],"mesh_terms":[],"keywords":["Benchmark (surveying)","Computer science","Anomaly detection","Preprocessor","Focus (optics)","Data pre-processing","Source code","Code (set theory)","Sliding window protocol","Computer engineering","Data mining","Artificial intelligence","Window (computing)","Programming language","Operating system"],"sdg_mappings":[],"linked_datasets":[],"clinical_trials":[],"software_tools":[],"database_accessions":[],"source":"live","citation_network_status":"fetched"},"created_at":"2026-08-07T11:04:24.179851Z","pmid":null,"pmcid":null,"fwci":null,"citation_percentile":null,"influential_citations":0,"oa_status":null,"license":null,"views":0,"total_file_size_bytes":0,"version_count":0,"fair_f":null,"fair_a":null,"fair_i":null,"fair_r":null,"fair_zscore":null,"fair_rationale":null,"fair_model":null,"fair_agent_version":null,"fair_fulltext_source":null,"fair_has_llm":null,"fair_computed_at":null,"clinical_trials":[],"software_tools":[],"db_accessions":[],"linked_datasets":[],"topics":[]}