Frequency-sensitive Abnormal Detection Algorithm in Security Audit System
Guiqiang Ni · Jisuanji gongcheng · 2008
Traditional algorithms using sequences of system calls often pay close attention to the length of the sequences while ignoring the importance of their occurring frequency.A new detection algorithm using sequences of system calls is put forward based on their occurring frequency,the classifier may pay more attention to the importance of different sequences which is defined by their occurring frequency.Experiments using IS data sets show that the new model has a low false positive rate compared with the traditional model.And hence,adjusting some parameters can make the false positive rate better.