应用系统调用包检测Linux容器中应用程序的异常行为
Applying Bag of System Calls for Anomalous Behavior Detection of Applications in Linux Containers
摘要:
在本文中,我们提出的结果,使用袋的系统调用学习的Linux容器的行为,用于异常检测为基础的入侵检测系统。通过使用从主机内核监视的容器的系统调用进行异常检测,系统不需要容器性质的任何先验知识,也不需要改变容器或主机内核。
英文摘要:
In this paper, we present the results of using bags of system calls for learning the behavior of Linux containers for use in anomaly-detection based intrusion detection system. By using system calls of the containers monitored from the host kernel for anomaly detection, the system does not require any prior knowledge of the container nature, neither does it require altering the container or the host kernel.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。