Method of Intrusion Detection System Based on SVM

摘要

In this paper, we introduced the SVM theory and the classify tool involving to our researching system, established an intrusion detection model based on SVM and system calls of host. In the stage of designing intrusion detection system, we chose the system call sequences of live named processes, which can be downloaded from University of New Mexico web site, to be our train and detect samples. In the stage of implementing the system, we made use of great function of shell smartly to achieve all system call short sequences of named processes, and transferred the format of named processes and detected, analyzed them. This paper successfully engineered the IDS aiming to privilege process, and had good performance.