| With the rapid development of computers and Internet technology, today's security problems have become increasingly prominent, security threats are increasing, means of attack are better. Security detection has become an indispensable security technology. Intrusion detection is a kind of technology in the detection and identification for the computer systems, information systems, network attacks and the invasion of illegal behavior. The technology has been widely used to protect information network of companies and organizations in a global scale.In this paper, the author wanted to study a better method in order to improve the detection rate of intrusion detection systems and reduce false alarm rate of them, and make detection engine system. In this paper, author used a method of analyzing intrusion through analyzing system call sequences. Author selected a method based on HMM model which can reflect the probability of states transition for detection, and added a method based on fuzzy theory to it in order that the new fusion method can have a higher detection rate and lower false alarm rate. Author additionally introduced parameters analysis into the method, this new method is called Spatio-Temporal method which improved the detecting performance further.Finally, the paper discussed the work of next step in the plan of future. |
