Intrusion detection method based on hierarchical hidden Markov model and variable-length semantic pattern

Autor: DUAN Xue-tao, JIA Chun-fu, LIU Chun-bo
Jazyk: čínština
Rok vydání: 2010
Předmět:
Zdroj: Tongxin xuebao, Vol 31, Pp 109-114 (2010)
Druh dokumentu: article
ISSN: 1000-436X
Popis: The defects of intrusion detection using fixed-length short system call sequences were analyzed. A method of extracting variable-length short system call sequences, grounded on the function return addresses stored in the process stacks, was proposed. Based on the hierarchical relationship and the state transition characteristics of the variable-length semantic patterns, a hierarchical hidden Markov intrusion detection model was presented. The experimental results show that the hierarchical hidden Markov intrusion detection model is superior to the traditional hidden Markov model.
Databáze: Directory of Open Access Journals