Anomaly Detection of System Call Sequence Based on Dynamic Features and Relaxed-SVM

Table 3

UNM dataset.

Data type	Sample files	Num
Normal	bounce.int, bounce1.int,plus.int, queue.int, sendmail.int, sendmail1.int	6
Code intrusion	decode-280.int, decode-314.int	2
Circular forwarding error	fwd-loops-1.int, fwd-loops-2.int, fwd-loops-3.int, fwd-loops-4.int, fwd-loops-5.int	5
forwarding error	sscp-10 763.int, sscp-10 814.int, sscp-10 801.int	3
syslogd	syslog-local-1.int, syslog-local-2.int, syslog-remote-1.int, syslog-remote-2.int	4
Failed invasion	cert-sm5x-1.int, cert-sm565a-1.int	2