Network Security White Papers
Intrusion Detection Using Text Processing Techniques With a Binary-Weighted Cosine Metric
Overview This paper introduces a new similarity measure, termed Binary Weighted Cosine (BWC) metric, for anomaly-based intrusion detection schemes that rely on using sequences of system calls. The new similarity measure considers both the number of shared system calls between two processes as well as frequencies of those calls. The k Nearest Neighbor (kNN) classifier is used to categorize a process as either normal or abnormal. The proposed BWC metric enhances the capabilities of simple kNN classifier significantly -especially in the context of intrusion detection.
| Publisher | University of California | File Format | |
|---|---|---|---|
| Date Published | November 2005 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 4 out of 8 users found this white paper useful
White Paper RSS
Download
Register
