Autor: |
DUAN Xue-tao, JIA Chun-fu, LIU Chun-bo |
Jazyk: |
čínština |
Rok vydání: |
2010 |
Předmět: |
|
Zdroj: |
Tongxin xuebao, Vol 31, Pp 109-114 (2010) |
Druh dokumentu: |
article |
ISSN: |
1000-436X |
Popis: |
The defects of intrusion detection using fixed-length short system call sequences were analyzed. A method of extracting variable-length short system call sequences, grounded on the function return addresses stored in the process stacks, was proposed. Based on the hierarchical relationship and the state transition characteristics of the variable-length semantic patterns, a hierarchical hidden Markov intrusion detection model was presented. The experimental results show that the hierarchical hidden Markov intrusion detection model is superior to the traditional hidden Markov model. |
Databáze: |
Directory of Open Access Journals |
Externí odkaz: |
|