该算法来自一种文本分类算法-KNN 算法,文中给出了用该算法实现的入侵检测系统模 型.利用该算法实现的基于系统调用的异常入侵检测系统,克服了传统基于系统调用入侵检测方法的缺陷,实验结果体现了该方法的有效性和检测的高效性。 关键词:入侵检测;系统调用;异常检测;KNN 算法 Abstract:This paper introduced a novel approach ——(the K Nearest Neighbor (KNN))which comes from a kind of text categorization to detecting intrusions by using system call method. We proposed the structure of intrusion detection system based on this algorithm. The problems of old intrusion detection techno logy based on systems calls have been solved by KNN algorithm. The experiments show that the proposed method is practical and efficient. Key words:intrusion detection,system call,abnormal detection,KNN algorithm.