Anomaly Detection of System Call Sequence Based on Dynamic Features and Relaxed-SVM

Table 7

Comparison results.

Algorithm	AUC	False positive rate
One class SVM [8]	70%	20%
Data feature retrieval and decision engine [10]	60%	23%
Semantic-based method [25]	82%	4.2%
EWR-SVM	99%	2.4%