【摘要】 本文基于异常检测技术及相关理论,提出了一种综合系统调用参数及调用序列的异常检测算法,该算法通过系统调用参数和序列构建具备更多特征信息的正常行为签名,从而提高入侵检测系统的检测效率及检测准度。更多还原

【Abstract】 We put forth an algorithm from system call arguments and sequences for anomaly detection base on anomaly detection prin- ciples and technologies. The algorithm includes and utilizes the system call argument and sequences to create a richer, more valuable signature and helps to model the intrusion detection system more accurately.更多还原