返回
Data leakage detection algorithm based on task sequences and probabilities
DOI:10.1016/j.knosys.2017.01.009.png)
摘要
En 中文
In this paper we propose a novel algorithm to detect anomalous user behaviour in computer sessions. We first identify the behavioural profile of each authorized user from the computational tasks they usually carry out on the files of the information system. A new session is then codified as 2-length sequences and an algorithm based on the probability of those sequences is applied. The activities classified as possible anomalies are double-checked by applying Markov chains. The procedure has been proved efficient in terms of high detection accuracy and low false positive rate. It has been validate on a real database provided by a governmental institution of Ecuador and also on a public dataset of Unix commands. Besides, the algorithm has been shown efficient regarding computational time and the overhead of this monitoring software is low. (C) 2017 Elsevier B.V. All rights reserved.
Keyword:
Anomaly detection
Computer user behaviour
Markov chains
Data leakage
Knowledge-based decision system
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
K
IF:
7.6
论文数:
1.3W
被引数:
4.5W
机构
引用论文
A negative selection algorithm with online adaptive learning under small samples for anomaly detection
NEUROCOMPUTING
IF6.5
Kinetic Properties of Polymorphic Variants and Pathogenic Mutants in Human Cystathionine γ-Lyase
Biochemistry
IF0
A novel feature-selection approach based on the cuttlefish optimization algorithm for intrusion detection systems基于墨鱼优化算法的入侵检测系统特征选择方法

