INTRUSION DETECTION BASED ON THE SECOND-ORDER STOCHASTIC MODEL  

作　　者：Zhang Xiaoqiang Zhu Zhongliang Fan Pingzhi 

机构地区：[1]School of Logistics, Southwest Jiaotong University, Chengdu 610031, China

出　　处：《Journal of Electronics(China)》2007年第5期679-685,共7页电子科学学刊（英文版）

基　　金：Supported by the National Natural Science Foundation of China (No.60473030).

摘　　要：This paper presents a new method based on a second-order stochastic model for computer intrusion detection.The results show that the performance of the second-order stochastic model is better than that of a first-order stochastic model.In this study,different window sizes are also used to test the performance of the model.The detection results show that the second-order stochastic model is not so sensitive to the window size,comparing with the first-order stochastic model and other previous researches.The detection result of window sizes 6 and 10 is the same.This paper presents a new method based on a second-order stochastic model for computer intrusion detection. The results show that the performance of the second-order stochastic model is better than that of a first-order stochastic model. In this study, different window sizes are also used to test the performance of the model. The detection results show that the second-order stochastic model is not so sensitive to the window size, comparing with the first-order stochastic model and other previous researches. The detection result of window sizes 6 and 10 is the same.

关 键 词：Second-order stochastic Intrusion detection System calls 

分 类 号：TN91[电子电信—通信与信息系统]