Event log based dependability analysis of Windows NT and 2K systems

Simache, Cristina; Kaâniche, Mohamed; Saidane, Ayda

doi:10.1109/prdc.2002.1185651

Cited by 26 publications

(15 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The past decade has produced several studies in root-cause analysis for Operating Systems (OS) ranging from Guardian OS and Tandem Non-Stop UX OS to VAX/VMS and Windows NT [6,8,10,14,15,16,17]. In this progression, our study of Windows' crash data gauges the evolution of PC reliability.…”

Section: Related Researchmentioning

confidence: 99%

“…We currently scrape crash dumps, and if user consents usage information such as hardware/software profiles, from users' machines and send corresponding data to our BOINC server. The (15) drawback of this mechanism is that we can only collect crash dumps that are stored in known locations on the user's computer, consequently excluding application crash dumps that are stored in unknown app-specific locations. Numerous people enthusiastically contribute data to projects on BOINC rather than corporations as they favor a research cause.…”

Section: Future Directions: Open Source Data Collection Via Boinc Cramentioning

confidence: 99%

See 1 more Smart Citation

Crash Data Collection: A Windows Case Study

Ganapathi

Patterson

2005 International Conference on Dependable Systems and Networks (DSN'05)

View full text Add to dashboard Cite

Reliability is a rapidly growing concern in contemporary Personal Computer (PC) industry, both for computer users as well as product developers. To improve dependability, systems designers and programmers must consider failure and usage data for operating systems as well as applications. In this paper, we discuss our experience with crash and usage data collection for Windows machines. We analyze results based on crashes in the UC Berkeley EECS department.

show abstract

Section: Related Researchmentioning

confidence: 99%

Section: Future Directions: Open Source Data Collection Via Boinc Cramentioning

confidence: 99%

Crash Data Collection: A Windows Case Study

Ganapathi

Patterson

2005 International Conference on Dependable Systems and Networks (DSN'05)

View full text Add to dashboard Cite

show abstract

“…Event logs are bene cial for tracking (step-by-step) state changes in the system. is paper focuses on nding causal connections among security event log entries of Microso Windows operating systems (OS) [14]. Identifying a cause and e ect relationship amongst two or more security event log entries can help in determining what problem was identi ed within the system, how it was identi ed, and what remedial action was performed.…”

Section: Introductionmentioning

confidence: 99%

Causal Connections Mining Within Security Event Logs

Khan

Parkinson

2017

Proceedings of the Knowledge Capture Conference

View full text Add to dashboard Cite

Performing both security vulnerability assessment and con guration processes are heavily reliant on expert knowledge. is requirement o en results in many systems being le insecure due to a lack of analysis expertise and access to specialist resources. It has long been known that a system's event log provides historical information depicting potential security threats, as well as recording con guration activities. In this paper, a novel technique is developed that can process security event logs on a computer that has been assessed and con gured by a security professional, and autonomously establish causality amongst event log entries to learn performed con guration tasks. is extracted knowledge can then be exploited by non-professionals to plan steps that can improve the security of a previously unseen system.

show abstract

“…Despite the large use of these techniques, several studies recognized the problem of the accuracy of log-based dependability analysis [12], [13]. As a matter of fact, a single tuple may contain events related to different failure manifestations (also known as collisions), or events related to the same failure may be wrongly coalesced in different tuples (also known as truncations).…”

Section: Introductionmentioning

confidence: 99%

Assessing time coalescence techniques for the analysis of supercomputer logs

Martino

Cinque

Cotroneo

2012

IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2012)

View full text Add to dashboard Cite

This paper presents a novel approach to assess time coalescence techniques. These techniques are widely used to reconstruct the failure process of a system and to estimate dependability measurements from its event logs. The approach is based on the use of automatically generated logs, accompanied by the exact knowledge of the ground truth on the failure process. The assessment is conducted by comparing the presumed failure process, reconstructed via coalescence, with the ground truth. We focus on supercomputer logs, due to increasing importance of automatic event log analysis for these systems. Experimental results show how the approach allows to compare different time coalescence techniques and to identify their weaknesses with respect to given system settings. In addition, results revealed an interesting correlation between errors caused by the coalescence and errors in the estimation of dependability measurements.

show abstract

Event log based dependability analysis of Windows NT and 2K systems

Cited by 26 publications

References 7 publications

Crash Data Collection: A Windows Case Study

Crash Data Collection: A Windows Case Study

Causal Connections Mining Within Security Event Logs

Assessing time coalescence techniques for the analysis of supercomputer logs

Contact Info

Product

Resources

About