Anomaly Detection of System Call Sequence Based on Dynamic Features and Relaxed-SVM

Figure 13

The word frequency in UNM attacking traces.