| 基于支持向量机的Windows主机入侵检测系统 |
| |
| 引用本文： | 张雪芹,顾春华,林家骏.基于支持向量机的Windows主机入侵检测系统[J].医学教育探索,2006(3):341-345. |
| |
| 作者姓名： | 张雪芹 顾春华 林家骏 |
| |
| 作者单位： | 华东理工大学信息科学与工程学院 上海200237 |
| |
| 摘 要： | 提出了一种基于支持向量机的W indow s主机入侵检测方法。讨论了以W indow s注册表作为数据源的入侵检测系统的结构及特征向量的提取方法。给出了基于支持向量机的入侵分类算法,通过建立支持向量描述模型进行预测。实验表明:该方法对已知样本有很高的检测率,对未知样本也有一定检测能力。
|
| 关 键 词： | 异常检测 Windows注册表 支持向量机 |
| 收稿时间： | 2005/8/30 0:00:00 |
Windows-Hosted Intrusion Detection System Based on Support Vector Machines |
| |
| ZHANG Xue-qin,GU Chun-hu,LIN Jia-jun.Windows-Hosted Intrusion Detection System Based on Support Vector Machines[J].Researches in Medical Education,2006(3):341-345. |
| |
| Authors: | ZHANG Xue-qin GU Chun-hu LIN Jia-jun |
| |
| Abstract: | A Windows-hosted intrusion detection system(IDS) based on support vector machines is presented.The framework and the feature vector selection methods of the IDS in which the Windows re-(gistry) is used as data source are discussed. The intrusion classification algorithm based on support vector(machines) is proposed and the support vector machines model is built.Experiments show that this algorithm has high detection precision for known samples and can also detect intrusion for some unknown samples. |
| |
| Keywords: | anomaly detection Windows registry support vector machines |
|
| 点击此处可从《医学教育探索》浏览原始摘要信息 |
| 点击此处可从《医学教育探索》下载免费的PDF全文 |
