Intrusion Detection Based on Sub-Set of System Calls
Zhao Qing-song · Dianzi xuebao · 2004
Intrusion detection (ID) techniques are important to intrusion detection systems (IDS).Based on the ID technique using system call sequences,a new detection technique was put forward that uses a subset of system calls (named W -subset).Experiments show that the new technique has low false positive rate,low storage-cost,high computing efficiency and hence is applicable to real-time intrusion detection.