.png){kind=icon}
返回
A variable-length model for masquerade detection
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jss.2012.05.049.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Masquerade detection is now one of the major concerns of system security research and its difficulty is to model user behavior on the nonstationary audit data. Many previous works represent the user behavior based on fixed-length models. In this paper, we propose a variable-length model to overcome their weakness in the precision and adaptability of user profiling. In the model, the user's normal behavior is profiled by Markov chain with states of variable-length sequences. At first multiple shell command streams of different lengths are generated and different shell command sequences are hierarchically merged into several sets to form the library of general sequences. Then the variable-length behavioral patterns of a valid user are mined and the Markov chain is constructed. While performing detection, the probabilities of short state sequences are calculated, smoothed with sliding windows, and finally used to classify the monitored user's activity as normal or abnormal. Our experiments with standard datasets such as Purdue data and SEA data reveal that the proposed model can achieve higher detection accuracy, require less memory and take shorter time than the other traditional methods and is amenable for real-time intrusion detection. (c) 2012 Elsevier Inc. All rights reserved.
Keyword:
Intrusion detection
Masquerade detection
Anomaly detection
Shell command
Markov chain
期刊
IF:
4.1
论文数:
5.5K
被引数:
8.4K
机构
查看更多机构
引用论文
An empirical study of two approaches to sequence learning for anomaly detection.png)
MACHINE LEARNING
OAAI
MACHINE LEARNINGIF2.9
OAAI分享收藏Empirical evaluation of SVM-based masquerade detection using UNIX commandsCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏分享收藏分享收藏Secretory patterns of LH and FSH during development and hypothalamic and hypophysial characteristics following development of steroid-induced ovarian follicular cysts in dairy cattleReproductionOAAI
ReproductionIF0
OAAI分享收藏
没有更多内容