A Proposal of File Anomaly-based Intrusion Detection System

There is an anomaly-based intrusion detection system as one of the means to detect the invasion of the malware by way of the network. Anomaly-based intrusion detection system is a system that defines the procedure and the operation when it is normal, and detects the one from the definition as abnormality. When the malware invades because anomaly-based intrusion detection system is a detection chiefly technique for paying attention to an abnormal protocol by a regular procedure, it is not possible to detect it. By this report, It proposes anomaly-based intrusion detection system that pays attention to the structure of the file like the method of attacking abnormal detection based on the protocol by cheating the user by going a step and camouflaging the extension of the picture file etc. and using a peculiar function to the invading attack and the file etc. 1. はじめに