欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
提出一种基于控制流的程序行为扩展模型EMPDA（extended model based on push down automaton）．对控制流模型加入不变性约束扩展，该模型能够表达程序正常运行时所应保持的不变性质约束，增强了模型的监控能力；通过以实际应用区分系统调用重要性，将模型划分为核心模型和辅助模型，以降低模型整体消耗，提高模型学习效率．实验结果表明，该扩展模型较之原模型有更好的覆盖速度、误报率以及检测能力.
英文摘要：
This paper presents a control-flow-based program behavior extended model EMPDA （extended model based on push down automaton） by adding invariance constraints to control flow model, which can describe some invariance properties while a program is running safely, and enhance the ability of intrusion detection. By distinguishing the importance of system calls according to practical applications, this paper divides the program behavior model into core model and secondary model to reduce the workload of the model and improve the learning efficiency. Experimental results show that the extended model has better performances in many aspects, such as coverage speed, false positive rate and the capability of intrusion detection.
同期刊论文项目
同项目期刊论文
期刊信息
位置：