%0 Journal Article
%T Application of fuzzy window Markov chain in IDS
模糊窗口Markov链在IDS中的应用
%A ZHAO Wen-gang
%A ZHONG Le-hai
%A ZHANG Ya
%A YANG Jin
%A ZOU Hai-yang
%A
赵文刚
%A 钟乐海
%A 张娅
%A 杨金
%A 邹海洋
%J 计算机应用
%D 2008
%I
%X The traditional static Markov model is based on such premise of assumptions as transition probability distribution of system mode of t+1 moment is only interrelated with the state at time t but not with that before time t, which brings big error. Therefore, a new window Markov chain was put forward, and fuzzy measure was introduced into it. The experiment confirms that this model has a good discrimination to the normal behavior and the unusual behavior, and has a faster calculation speed, and it is suitable for the on-line detection.
%K anomaly detection
%K Markov chain
%K system call
%K fuzzy
异常检测
%K Markov链
%K 系统调用
%K 模糊
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=831E194C147C78FAAFCC50BC7ADD1732&aid=978D1E54645BC4C0AEFA1C441889DAE6&yid=67289AFF6305E306&vid=D3E34374A0D77D7F&iid=B31275AF3241DB2D&sid=C4160F9DDB7598AD&eid=14475B1A66930D94&journal_id=1001-9081&journal_name=计算机应用&referenced_num=0&reference_num=10