A New Audit-Based Intrusion Detection Model and Its Implement Mechanism

LIU Hai-feng; QING Si-han; Meng Yang; LIU Wen-qing

您当前的位置：

首页 >

文章列表页 >

A New Audit-Based Intrusion Detection Model and Its Implement Mechanism

更新时间：2025-07-16

- A New Audit-Based Intrusion Detection Model and Its Implement Mechanism
- Acta Electronica Sinica Vol. 30, Issue 8, Pages: 1167-1171(2002)
- 作者机构：
  
  1. 中国科学院软件研究所,北京,100080
  2. 中国科学院信息安全技术工程研究中心,北京,100080
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP309
- Published：2002
- 稿件说明：
移动端阅览
LIU Hai-feng, QING Si-han, Meng Yang, et al. A New Audit-Based Intrusion Detection Model and Its Implement Mechanism[J]. Acta Electronica Sinica, 2002, 30(8): 1167-1171.
DOI：

LIU Hai-feng, QING Si-han, Meng Yang, et al. A New Audit-Based Intrusion Detection Model and Its Implement Mechanism[J]. Acta Electronica Sinica, 2002, 30(8): 1167-1171. DOI：

摘要

文中对基于系统调用序列的入侵检测进行了深入的研究

提出了一种新的基于审计事件向量的入侵检测模型(AUDIDS).这一模型除了具有系统调用序列入侵检测模型的优点外

比之已有的模型具有更丰富的语义及更高的效率.针对此模型

文中还给出了此模型在linux上的实现机制

实现了审计事件的定义、收集和存储

并对正常库的存储及匹配方法进行了改进.

Abstract

Intrusion detection models based on system call sequence are discussed

and a new intrusion detection model based on audit event vector which is named "AUDIDS" is presented.This model has not only the merits of the previous IDS model but also richer semantics and higher efficiency.We describe its implementation mechanism on Linux which defines

collects and stores audit event and improves the storage and matching of normal database.

关键词

Keywords

references

Views

1006

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Intrusion Detection Method Based on Capsule Network for Industrial Internet

Intrusion Detection Alert Correlation Based on Choquet Fuzzy Integral

An Alert Correlation and Analysis Algorithm Based on Frequent Pattern Mining

Masquerade Detection Based on Shell Commands and High-Order Markov Chain Models

Detecting Integer Bugs Based on Static and Dynamic Program Analysis

Related Author

HU Xiang-dong

LI Zhi-han

Nurbol

CHAI Sheng

LI Hong-wei

HU Liang

DONG Xiao-mei

YU Ge

Related Institution

School of Automation/School of Industrial Internet, Chongqing University of Posts and Telecommunications

Key Laboratory for Symbol Computation and Knowledge Engineering (Jilin University)Ministry of EducationChangchunJilin 130012China

College of Computer Science and Technology Institute,Jilin University

College of Information Science and Engineering,XinJiang University

College of Computer Science and Technology InstituteJilin UniversityChangchunJilin 130012China

⁰