Intrusion Detection Based on Sub-Set of System Calls

Intrusion detection (ID) techniques are important to intrusion detection systems (IDS).Based on the ID technique using system call sequences,a new detection technique was put forward that uses a subset of system calls (named W -subset).Experiments show that the new technique has low false positive rate,low storage-cost,high computing efficiency and hence is applicable to real-time intrusion detection.