{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:15:44Z","timestamp":1750306544746,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2015,4,13]],"date-time":"2015-04-13T00:00:00Z","timestamp":1428883200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,4,13]]},"DOI":"10.1145\/2695664.2695813","type":"proceedings-article","created":{"date-parts":[[2015,7,20]],"date-time":"2015-07-20T19:10:09Z","timestamp":1437419409000},"page":"548-554","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["On-device anomaly detection for resource-limited systems"],"prefix":"10.1145","author":[{"given":"Maroua Ben","family":"Attia","sequence":"first","affiliation":[{"name":"Ecole de technologie sup\u00e9rieure, Montreal, Qu\u00e9bec, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chamseddine","family":"Talhi","sequence":"additional","affiliation":[{"name":"Ecole de technologie sup\u00e9rieure, Montreal, Qu\u00e9bec, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Abdelwahab","family":"Hamou-Lhadj","sequence":"additional","affiliation":[{"name":"Concordia University Montreal, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Babak","family":"Khosravifar","sequence":"additional","affiliation":[{"name":"Ecole de technologie sup\u00e9rieure, Montreal, Qu\u00e9bec, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vincent","family":"Turpaud","sequence":"additional","affiliation":[{"name":"Ecole de technologie sup\u00e9rieure, Montreal, Qu\u00e9bec, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mario","family":"Couture","sequence":"additional","affiliation":[{"name":"Valcartier, QC, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2015,4,13]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"The BeagleBoard: $149 Linux System","author":"Frazier M.","year":"2008","unstructured":"M. Frazier , The BeagleBoard: $149 Linux System , 2008 . Available from: http:\/\/www.linuxjournal.com\/content\/beagleboard-149-linux-system M. Frazier, The BeagleBoard: $149 Linux System, 2008. Available from: http:\/\/www.linuxjournal.com\/content\/beagleboard-149-linux-system"},{"key":"e_1_3_2_1_2_1","volume-title":"TBS2910 Mini PC ARM Matrix","author":"Joly S.","year":"2014","unstructured":"S. Joly , TBS2910 Mini PC ARM Matrix , 2014 . Available from: http:\/\/domotique-info.fr\/2014\/04\/tbs2910-mini-pc-arm-matrix\/ S. Joly, TBS2910 Mini PC ARM Matrix, 2014. Available from: http:\/\/domotique-info.fr\/2014\/04\/tbs2910-mini-pc-arm-matrix\/"},{"key":"e_1_3_2_1_3_1","volume-title":"World's First Wireless Worm","author":"Millard E.","year":"2004","unstructured":"E. Millard , \"Cabir : World's First Wireless Worm \", 2004 . Available from: http:\/\/www.technewsworld.com\/story\/34542.html E. Millard, \"Cabir: World's First Wireless Worm\", 2004. Available from: http:\/\/www.technewsworld.com\/story\/34542.html"},{"key":"e_1_3_2_1_4_1","unstructured":"J. Abhishek \"Android SMS malware hosted on Google Play infects 1.2 Million users\". Available from: http:\/\/www.hackleaks.in\/2014\/02\/android-sms-malware-hosted-on-google.html  J. Abhishek \"Android SMS malware hosted on Google Play infects 1.2 Million users\" . Available from: http:\/\/www.hackleaks.in\/2014\/02\/android-sms-malware-hosted-on-google.html"},{"key":"e_1_3_2_1_5_1","unstructured":"Sophos \"Mobile Security Threat Report 2014\". Available from: http:\/\/www.sophos.com\/en-us\/medialibrary\/PDFs\/other\/sophos-mobile-security-threat-report.pdf  Sophos \"Mobile Security Threat Report 2014\" . Available from: http:\/\/www.sophos.com\/en-us\/medialibrary\/PDFs\/other\/sophos-mobile-security-threat-report.pdf"},{"key":"e_1_3_2_1_6_1","volume-title":"AntiMalDroid: an efficient SVM-based malware detection framework for Android.\" Information Computing and Applications","author":"Zhao M.","year":"2011","unstructured":"M. Zhao \" AntiMalDroid: an efficient SVM-based malware detection framework for Android.\" Information Computing and Applications . Springer Berlin Heidelberg , 2011 . 158--166. M. Zhao et al. \"AntiMalDroid: an efficient SVM-based malware detection framework for Android.\" Information Computing and Applications. Springer Berlin Heidelberg, 2011. 158--166."},{"volume-title":"Mining API-level features for robust malware detection in android.\" Security and Privacy in Communication Networks","year":"2013","key":"e_1_3_2_1_7_1","unstructured":"Aafer, Yousra, Wenliang Du, and Heng Yin. \"DroidAPIMiner : Mining API-level features for robust malware detection in android.\" Security and Privacy in Communication Networks . Springer International Publishing , 2013 . 86--103. Aafer, Yousra, Wenliang Du, and Heng Yin. \"DroidAPIMiner: Mining API-level features for robust malware detection in android.\" Security and Privacy in Communication Networks. Springer International Publishing, 2013. 86--103."},{"key":"e_1_3_2_1_8_1","unstructured":"gumstix.com \"Overo\u0151 FE COM\" 2014. Available from: https:\/\/store.gumstix.com\/index.php\/products\/256\/  gumstix.com \"Overo\u0151 FE COM\" 2014. Available from: https:\/\/store.gumstix.com\/index.php\/products\/256\/"},{"key":"e_1_3_2_1_9_1","unstructured":"apc.io \"APC 8750\" 2014. Available from: http:\/\/apc.io\/products\/8750a\/  apc.io \"APC 8750\" 2014. Available from: http:\/\/apc.io\/products\/8750a\/"},{"key":"e_1_3_2_1_10_1","unstructured":"Gary Ng \"The 16GB Samsung Galaxy S5 Has Less Than 8GB of Usable Storage\" 2014. Available from: http:\/\/www.iphoneincanada.ca\/news\/galaxy-s5-8gb-usable-storage\/  Gary Ng \"The 16GB Samsung Galaxy S5 Has Less Than 8GB of Usable Storage\" 2014. Available from: http:\/\/www.iphoneincanada.ca\/news\/galaxy-s5-8gb-usable-storage\/"},{"key":"e_1_3_2_1_11_1","volume-title":"Security and Privacy, 1999. Proceedings of the 1999 IEEE Symposium on (pp. 133--145)","author":"B.","year":"1999","unstructured":"Warrender, C., Forrest, S., & Pearlmutter, B. ( 1999 ). \" Detecting intrusions using system calls: Alternative data models \". In Security and Privacy, 1999. Proceedings of the 1999 IEEE Symposium on (pp. 133--145) . IEEE. Warrender, C., Forrest, S., & Pearlmutter, B. (1999). \"Detecting intrusions using system calls: Alternative data models\". In Security and Privacy, 1999. Proceedings of the 1999 IEEE Symposium on (pp. 133--145). IEEE."},{"key":"e_1_3_2_1_12_1","volume-title":"Communications (ICC), 2012 IEEE International Conference on (pp. 1113--1117)","author":"M.","year":"2012","unstructured":"Sultana, A., Hamou-Lhadj, A., & Couture, M. ( 2012 , June). \"An improved Hidden Markov Model for anomaly detection using frequent common patterns \". In Communications (ICC), 2012 IEEE International Conference on (pp. 1113--1117) . IEEE. Sultana, A., Hamou-Lhadj, A., & Couture, M. (2012, June). \"An improved Hidden Markov Model for anomaly detection using frequent common patterns\". In Communications (ICC), 2012 IEEE International Conference on (pp. 1113--1117). IEEE."},{"key":"e_1_3_2_1_13_1","volume-title":"Comparative Study of Hidden Markov Model and Support Vector Machine in Anomaly Intrusion Detection","author":"N.","year":"2013","unstructured":"Jain, R., & Abouzakhar, N. S. ( 2013 ). \" Comparative Study of Hidden Markov Model and Support Vector Machine in Anomaly Intrusion Detection \". Jain, R., & Abouzakhar, N. S. (2013). \"Comparative Study of Hidden Markov Model and Support Vector Machine in Anomaly Intrusion Detection\"."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39068-5_74"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.5555\/1947337.1947356"},{"key":"e_1_3_2_1_16_1","first-page":"321","volume-title":"ARES '10 International Conference on, vol., no.","author":"Hubballi N.","year":"2010","unstructured":"N. Hubballi , S. Biswas , and S. Nandi . ( 2010 ). \" Layered Higher Order N-grams for Hardening Payload Based Anomaly Intrusion Detection\". Availability, Reliability, and Security, 2010 . ARES '10 International Conference on, vol., no. , pp. 321 , 326. N. Hubballi, S. Biswas, and S. Nandi. (2010). \"Layered Higher Order N-grams for Hardening Payload Based Anomaly Intrusion Detection\". Availability, Reliability, and Security, 2010. ARES '10 International Conference on, vol., no., pp. 321, 326."},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings of the 2002 IEEE Symposium on Security and Privacy (SP '02)","author":"Kymie M. C. T.","year":"2002","unstructured":"M. C. T. Kymie and A. M Roy . 2002 . \" Why 6?\" Defining the Operational Limits of Stide, an Anomaly-Based Intrusion Detector . In Proceedings of the 2002 IEEE Symposium on Security and Privacy (SP '02) . IEEE Computer Society, Washington, DC, USA, 188-. M. C. T. Kymie and A. M Roy. 2002. \"Why 6?\" Defining the Operational Limits of Stide, an Anomaly-Based Intrusion Detector. In Proceedings of the 2002 IEEE Symposium on Security and Privacy (SP '02). IEEE Computer Society, Washington, DC, USA, 188-."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTCSA.2012.64"},{"key":"e_1_3_2_1_19_1","unstructured":"Panda labs. \"Panda Security Annual Report PandaLabs 2013 Summary\" 2013. Available from: http:\/\/m.itcafe.hu\/dl\/cnt\/2014-03\/107032\/pandalabs-annual-report-2013.pdf  Panda labs. \"Panda Security Annual Report PandaLabs 2013 Summary\" 2013. Available from: http:\/\/m.itcafe.hu\/dl\/cnt\/2014-03\/107032\/pandalabs-annual-report-2013.pdf"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2008.54"},{"key":"e_1_3_2_1_21_1","volume-title":"Springer Berlin Heidelberg","author":"Amamra A.","year":"2013","unstructured":"A. Amamra , C. Talhi , and J-M Robert . \"Impact of Dataset Representation on Smartphone Malware Detection Performance\" Trust Management VII. Springer Berlin Heidelberg , 2013 . 166--176. A. Amamra, C. Talhi, and J-M Robert. \"Impact of Dataset Representation on Smartphone Malware Detection Performance\" Trust Management VII. Springer Berlin Heidelberg, 2013. 166--176."},{"key":"e_1_3_2_1_22_1","first-page":"1","volume-title":"Communication Systems and Networks (COMSNETS)","author":"Neminath H.","year":"2011","unstructured":"H. Neminath , B. Santosh , and N. Sukumar . \" Sequencegram: n-gram modeling of system calls for program based anomaly detection \". In Communication Systems and Networks (COMSNETS) , pp. 1 -- 10 , Jan 2011 H. Neminath, B. Santosh, and N. Sukumar. \"Sequencegram: n-gram modeling of system calls for program based anomaly detection\". In Communication Systems and Networks (COMSNETS), pp. 1--10, Jan 2011"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICAC.2005.42"},{"key":"e_1_3_2_1_24_1","volume-title":"Anomaly Sequences Detection from Logs Based on Compression\". arXiv preprint arXiv:1109.1729","author":"Wang N.","year":"2011","unstructured":"N. Wang , J. Han , and J. Fang . \" Anomaly Sequences Detection from Logs Based on Compression\". arXiv preprint arXiv:1109.1729 , 2011 . N. Wang, J. Han, and J. Fang. \"Anomaly Sequences Detection from Logs Based on Compression\". arXiv preprint arXiv:1109.1729, 2011."},{"volume-title":"Data compression using Zopfli\". Tech. rep","author":"Alakuijala J.","key":"e_1_3_2_1_25_1","unstructured":"J. Alakuijala and V. Lode . \" Data compression using Zopfli\". Tech. rep . Google Inc ., Feb. J. Alakuijala and V. Lode. \"Data compression using Zopfli\". Tech. rep. Google Inc., Feb."}],"event":{"name":"SAC 2015: Symposium on Applied Computing","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"],"location":"Salamanca Spain","acronym":"SAC 2015"},"container-title":["Proceedings of the 30th Annual ACM Symposium on Applied Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2695664.2695813","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2695664.2695813","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T06:12:32Z","timestamp":1750227152000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2695664.2695813"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,4,13]]},"references-count":25,"alternative-id":["10.1145\/2695664.2695813","10.1145\/2695664"],"URL":"https:\/\/doi.org\/10.1145\/2695664.2695813","relation":{},"subject":[],"published":{"date-parts":[[2015,4,13]]},"assertion":[{"value":"2015-04-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}