序列特征提取之语义特征 Semantic feature

最新推荐文章于 2024-11-27 13:42:45 发布

yjli98

最新推荐文章于 2024-11-27 13:42:45 发布

阅读量2.7k

点赞数

分类专栏：论文学习

本文链接：https://blog.youkuaiyun.com/weixin_42345025/article/details/108144351

版权

学习论文：G. Creech and J. Hu, "A Semantic Approach to Host-Based Intrusion Detection Systems Using Contiguousand Discontiguous System Call Patterns," in IEEE Transactions on Computers, vol. 63, no. 4, pp. 807-819, April 2014, doi: 10.1109/TC.2013.13.

论文提取了一种新颖的sementic feature用于系统调用序列进行异常检测

提取方法分为三步

First, the training data must be processed to extract a dictionary containing every contiguous system call trace present in the training samples. This step is equivalent to using multiple window lengths under Forrest’s methodology [20], [25], [26], [46] and [47], where the maximum window length allowed is in fact the length of each trace. Each dictionary entry extracted at this stage forms a conceptual ‘word’, or a ‘phrase’ of length 1.

1、提取单词