摘要： 说明一种基于系统调用分析的入侵检测方法。首先介绍了此算法的原理及设计,接着介绍了一个基于此检测方法的入侵检测系统的设计。最后,通过对运行于Linux操作系统下的wu-ftpd服务程序的攻击实验,证明这种检测方法具有较高的有较性。

关键词: 入侵检测, 系统调用, 检测方法

Abstract: A kind of intrusion detection method, which uses the system call serials, is illustrated in this article. The principle and design are introduced in the first part of the article. The design and implementation of an intrusion detection system based on this method are described after that. At last, data collected from a wu-ftpd server on Linux in an attack experiment proves that this method is efficient.

中图分类号: 

• TP393.08