摘要
研究了Linux进程行为的模式提取与异常检测问题。介绍了一种模糊神经网络Fuzzy ART及其实现,利用Fuzzy ART网络对Linux进程的系统调用序列进行模式提取,并据此进行异常检测。实验结果初步表明该方法是可行、有效的。最后说明了该方法的优点和不足。
In this paper, pattern classification and anomaly detection for Linux process behavior are investigated. The neural network, Fuzzy ART, and its algorithm are introduced, and used to classify patterns and detect anomaly for system calls sequence of Linux process. Primary experiments suggest that this method is feasible. Finally, both merits and demerits of this approach are presented.
出处
《计算机工程》
EI
CAS
CSCD
北大核心
2005年第3期183-185,共3页
Computer Engineering
基金
国家信息安全保障持续发展计划基金资助项目(2001-技-157)
国家自然科学基金资助项目(60275028)
