Abstract
The use of statistical anomaly detection for the purpose of computer intrusion detection is introduced, and a data analytic approach to the problem is illustrated. A preliminary study of the http daemon is used to demonstrate some of the more elementary yet informative investigations that can be carried out. We describe a sequence of findings of regularities in processes that the daemon creates, and in the system calls that comprise these processes that seem potentially useful in constructing an intrusion detection system based on traces of the daemon. General tools for studying the process traces are described.
Sign-in/Register to access full text options 
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Schedule a callDisclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.
