由授权进程产生的系统调用短序列可作为计算机免疫系统中的“自我”标识。
The short sequences of system calls made by privileged processes can be seen as symbols of"self"in com-puter immune system.
文章针对满足支持度要求的系统调用短序列,给出了特征模式的概念,并以此为基础提出了基于改进的隐马尔科夫方法(IHMM)。
In this model, the authors defined the short sequence of system calls as a character pattern if this sequence satisfied the certain support degree, and propose an improved HMM (IHMM) on this basis.
应用推荐