Article ID | Journal | Published Year | Pages | File Type |
---|---|---|---|---|
456598 | Computers & Security | 2007 | 8 Pages |
Abstract
This paper focuses on intrusion detection based on system call sequences using text processing techniques. It introduces kernel based similarity measure for the detection of host-based intrusions. The k-nearest neighbour (kNN) classifier is used to classify a process as either normal or abnormal. The proposed technique is evaluated on the DARPA-1998 database and its performance is compared with other existing techniques available in the literature. It is shown that this technique is significantly better than the other techniques in achieving lower false positive rates at 100% detection rate.
Related Topics
Physical Sciences and Engineering
Computer Science
Computer Networks and Communications
Authors
Alok Sharma, Arun K. Pujari, Kuldip K. Paliwal,