An Intrusion-Detection Model 论文

1987IEEE Transactions on Software Engineering引用 3338
DOI
Network Security and Intrusion DetectionAdvanced Malware Detection TechniquesInformation and Cyber Security
Network Security and Intrusion DetectionInformation and Cyber SecurityAdvanced Malware Detection Techniques
相关技术:Network Security and Intrusion DetectionAdvanced Malware Detection Techniques
关系图谱

1

作者

2

相关技术

0

相关事件

0

相关文章

详细信息

发表期刊/会议
IEEE Transactions on Software Engineering
发表日期
1987-02-01
发表年份
1987

关键词

Network Security and Intrusion DetectionAdvanced Malware Detection TechniquesInformation and Cyber Security
DOIOpenAlex

摘要

A model of a real-time intrusion-detection expert system capable of detecting break-ins, penetrations, and other forms of computer abuse is described. The model is based on the hypothesis that security violations can be detected by monitoring a system's audit records for abnormal patterns of system usage. The model includes profiles for representing the behavior of subjects with respect to objects in terms of metrics and statistical models, and rules for acquiring knowledge about this behavior from audit records and for detecting anomalous behavior. The model is independent of any particular system, application environment, system vulnerability, or type of intrusion, thereby providing a framework for a general-purpose intrusion-detection expert system.

作者查看全部 (1)

D

Dorothy E. Denning

相关技术查看全部 (2)

Network Security and Intrusion DetectionAdvanced Malware Detection Techniques

相关事件

暂无数据

相关文章

暂无数据