Abstract: A Windows-hosted intrusion detection system(IDS) based on support vector machines is presented.The framework and the feature vector selection methods of the IDS in which the Windows re-(gistry) is used as data source are discussed. The intrusion classification algorithm based on support vector(machines) is proposed and the support vector machines model is built.Experiments show that this algorithm has high detection precision for known samples and can also detect intrusion for some unknown samples.