Abstract: System call based intrusion detection is currently a hot subject of research all over the world.The existing system call based intrusion detection techniques and theories with their respective challenges and research trends were discussed comprehensively,especially those(that are) newly developed. We hold that with the advent of the Tide-based commercial intrusion detection system(IDS) SanAPT, how to improve detection performance, to decrease error alarm rate and to solve issues on multiplatform,lightweight,and distribution related to practicality of the IDSs will be hot topics in this field.

Key words: Intrusion detection, System call, Multiplatform,Lightweight, Distribution