improved edit distance method for system call anomaly detection

ISCAS OpenIR

	improved edit distance method for system call anomaly detection
	Qian Quan; Wu Jinlin; Zhu Wei; Xin Mingjun
	2012
会议名称	2012 IEEE 12th International Conference on Computer and Information Technology, CIT 2012
会议录名称	Proceedings - 2012 IEEE 12th International Conference on Computer and Information Technology, CIT 2012
页码	1097-1102
会议日期	October 27, 2012 - October 29, 2012
会议地点	Chengdu, Sichuan, China
收录类别	EI
ISBN	9780769548586
部门归属	(1) School of Computer Engineering and Science Shanghai University Shanghai China State Key Laboratory of Information Security Institute of Software Chinese Academy of Sciences Beijing China
摘要	Edit distance has been widely used in different areas to evaluate the similarity between strings of characters. In this paper, the improved edit distance is applied into the short sequence anomaly detection, a kind of host security area. Some modifications for original edit distance including the position exchange and the shortest distance algorithm are described in detail. Through experiment, it shows that the edit distance based anomaly detection method is proved to be more stable and better detection precision than the classical sequence analysis STIDE method. © 2012 IEEE.; Edit distance has been widely used in different areas to evaluate the similarity between strings of characters. In this paper, the improved edit distance is applied into the short sequence anomaly detection, a kind of host security area. Some modifications for original edit distance including the position exchange and the shortest distance algorithm are described in detail. Through experiment, it shows that the edit distance based anomaly detection method is proved to be more stable and better detection precision than the classical sequence analysis STIDE method. © 2012 IEEE.
关键词	Information Technology
主办者	IEEE Computer Society; IEEE; IEEE Technical Committee on Scalable Computing (TCSC)
语种	英语
内容类型	会议论文
URI标识	http://ir.iscas.ac.cn/handle/311060/15869
专题	中国科学院软件研究所
推荐引用方式 GB/T 7714	Qian Quan,Wu Jinlin,Zhu Wei,et al. improved edit distance method for system call anomaly detection[C],2012:1097-1102.