The methods are both based on data mining (DM) technique, and use sequence patterns to represent the normal behavior profile of a program according to the supports or confidences of the patterns in the training data.
英
美
- 這兩種方法均利用數據挖掘技術(shù)中的序列模式描述一個(gè)程序的正常行為,根據序列的支持度(support)或可信度(confidence)在訓練數據中提取正常序列,檢測中通過(guò)序列比較對攻擊行為進(jìn)行識別。
