%0 Journal Article
%T Enhanced Approach to Anomalous Program Behaviors Detection<br>一种增强的程序行为异常检测方法
%A XIE Feng
%A XIE Li-xia
%A <br>谢丰
%A 谢丽霞
%J 计算机科学
%D 2010
%I 
%X Anomaly detection is an important method for protecting program.Traditionally a program is protected by means of monitoring system call,but the invoked address is often ignored.This paper presented a new audit event named as L-Call to describe the program behavior,which is the system call with invoked address in nature.A Chebyshev inequality-based method was also presented to evaluate the deviation of program behavior from normal.The deviation degree that we named as anomaly degree is based on the likelihoo...
%K L-Call
%K Chebyshev inequality
%K Anomaly degree
%K LC-ADS<br>L-Call
%K 切比雪夫不等式
%K 异常度量化
%K LC-ADS
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=64A12D73428C8B8DBFB978D04DFEB3C1&aid=9B752AB3AFE2E8A62BEA35931041D07C&yid=140ECF96957D60B2&vid=42425781F0B1C26E&iid=38B194292C032A66&sid=0401E2DB1F51F8DE&eid=5C3443B19473A746&journal_id=1002-137X&journal_name=计算机科学&referenced_num=0&reference_num=10