A Network Intrusion Detection Algorithm Based on FSA Model

Abstract

At present network attack technology is constantly updated,which bring network security workers huge challenges. In view of the fact that the existing intrusion detection technology is difficult to detect multi-step fragmentation attacks, distributed attacks and evading attacks,a network intrusion detection algorithm called FSA algorithm is proposed based on finite state automaton (FSA) model in this paper, and the key implementation technology is analyzed.The state transition diagram is used to illustrate the attack triggering and transfer process,and according to different protocol data,four different mechanisms are designed to detect invasion based on FSA.Experiments show that the algorithm not only can more precisely detect common attacks,but also can detect the unobvious attacks such as distributed and fragment attack very well,which can not be detected by other detection technologies.It is believe that it removes the limitations of the current intrusion detection technology and has an important research and practice value.

User-Oriented File Restoration for Operating Systems

“…In order to learn normal user or system behaviours, most techniques analyze program behaviours. Typical examples of analyzing program behaviours are the N-gram and FSA-based algorithms (Sun et al, 2005;Wu et al, 2016;Yu et al, 2005), which are usually applied to server programs. Both algorithms characterize normal program behaviours in terms of sequences of system calls.…”