A Sensitive File Abnormal Access Detection Method Based on Application Classification

Table 4

Experimental data.

Serial number	Lag	Abnormal	Abnormal lag
1	21	0	0
2	35	0	0
3	54	0	0
4	67	0	0
5	71	0	0
6	81	0	0
7	95	0	0
8	92	1	92
9	108	0	0
10	111	0	0
11	123	0	0
12	99	1	99
13	138	1	138
14	154	0	0
15	164	1	164
16	143	0	0
17	172	0	0
Summary	1728	4	493