关键词: 异常检测, 隐Markov模型, 系统调用, 滑动窗口

Abstract: An algorithm was given to making a kind of HMM(Hidden Markov Model) for anomaly detection. The application in anomaly detetction of the model was introduced from analyzing on support of sequence and sequence prediction.Factions which inflect results and efficiency were discussed by the experiments. And the experiments also show that the method can detect intrusion without any security knowledge.

Key words: anomaly detection, hidden Markov model, system call, slide window