Intrusion detection based on system call finite-state automation machine

With our human beings entering the information age, information security has already become the new problem as the development of human society. This paper first review the application of system call for intrusion detection, and highlight the problems in few commonly cited papers such as Forrest et al and Sekar et al. Then, propose some improvements for finite-state automation machine algorithm, which are technical sound and original. It uses system calls regarded as input, and creates a finite-state automation machine for the functions in the program. Last, the finite-state automation machine is used to detect the attack. Moreover, It can find the place of the vulnerability which exists in the program. This can help to alter the source program