Monitoring program behavior is one of the highlighted research topics of host-based anomaly detection recently. The key is to construct a program behavior-based anomaly detection model.
监视程序行为是近年基于主机的异常入侵检测的研究热点，构建程序行为模型是进行异常检测的关键。
This model uses not only misuse but also anomaly detection technology, and at deployment the host based subsystem cooperates with the network-based subsystem.
该系统模型既综合了基于异常行为的入侵检测和基于特征的入侵检测技术，在配置上又采用主机配置和网络配置相互配合的方式。
应用推荐