Under the two kinds of system operation conditions,abnormal state and normal state,indicated data on behalf of the system running status was collected by system monitoring tools such as nmon,and the obtained index data was quantitatively operated. The features of multidimensional behavior was constructed which could reflect the running state of the system. The index data has been carried on by effective feature extraction by means of the between-class and within-class distance measurement criterion,and knowledge base of behavior features was constructed which reflects the system running state. The decision tree was constructed to judge whether the system of state was secure through data features of behavior knowledge base.
ZHOU C . Study on C language memory leak under Linux [J ] . Industry and Mine Automation , 2008 ( 4 ): 137 - 139 .
HSU C W , LIN C J . A comparison of methods for multiclass support vector machines [J ] . IEEE Transactions on Neural Networks , 2002 , 13 ( 2 ): 415 - 425 .
The R project for statistical computing [EB/OL ] .[2015-01-22 ] . http://www.r-project.org/ http://www.r-project.org/ .
XUE L M . The software of power grid monitoring system based on the Linux [J ] . Electric Power Automation Equipment , 2004 , 24 ( 7 ): 126 - 127 .
BENNETT A A , LIN C J . A behavior-based approach to adaptive feature detection and following with autonomous underwater vehicles [J ] . IEEE Journal of Oceanic Engineering , 2001 , 25 ( 2 ): 218 - 220 .