Study on HMM Based Anomaly Intrusion Detection Using System Calls

摘要：

　　In order to improve the detection accuracy,we study on the HMM model based on system calls anomaly detection.We starting from the program semantics issued system call,analysis that the state hidden behind system calls is the program execution state.Then put forward that hidden state must greater than the number of unique system calls when training HMM.And observation probability can be as 01 vector form.HMM trained in our way is better than other models on detection accuracy.

关键词： anomaly detection system call HMM hidden state

作者: SHI Shang-zhe SUN Mei-feng

作者单位: Information and Engineering College,Yangzhou University,Yangzhou Jiangsu 225127

会议类型: 国际会议

会议名称: the 2nd International Conference on Electronic & Mechanical Engineering and Information Technology (EMEIT-2012)(2012年电机工程与信息技术国际会议)

会议地点: 沈阳

会议语种:英文

页码: 139-144

在线出版日期: 2012-09-26（万方平台首次上网日期，不代表论文的发表时间）