Abstract: Because of the high instantaneous frequency of the intrusion windows native API sequence, a novel method based on graph theory was proposed to solve the problem of the host-based intrusion detection. In our algorithm, each native API is considered as a no

Key words: Intrusion detection, Windows native API, Graph