We present a component anomaly detector for a host-based intrusion detection system (IDS) for Microsoft Windows. The core of the detector is a learning-based anomaly detection algorithm that detects attacks on a host machine by looking for anomalous
No takes yet. Share an insight, caveat, or question.
Stolfo et al. (2005) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: