Fixed vs. Variable-Length Patterns for Detecting Suspicious Process Behavior

This paper addresses the problem of creating patterns that can be used to model the normal behavior of a given process. The models can be used for intrusion-detection purposes. First, we present a novel method to generate input data sets that enable us ...

In 2012 Bna showed the rather surprising fact that the cumulative number of occurrences of the classical patterns 231 and 213 is the same on the set of permutations avoiding 132, even though the pattern based statistics 231 and 213 do not have the same ...

A bijection which preserves five classical set-valued permutation statistics between ( 31245 , 32145 , 31254 , 32154 )-avoiding permutations and ( 31425 , 32415 , 31524 , 32514 )-avoiding permutations is constructed. Combining this bijection with ...