返回
Masquerade attacks based on user's profile
DOI:10.1016/j.jss.2012.06.014.png)
摘要
En 中文
This paper presents a set of methods for building masquerade attacks. Each method takes into account the profile of the user to be impersonated, thus capturing an intruder strategy. Knowledge about user behavior is extracted from several statistics, including the frequency at which a user types a specific group of commands. It is then expressed by rules, which are applied to synthesize computer sessions that mimic the attack as ordinary user behavior. The masquerade attack datasets have been validated by making a set of Intrusion Detection Systems (IDS) try to detect user impersonation, this way showing the capabilities of each masquerade synthesis method for evading detection. Results demonstrate that a better performance of masquerade attacks can be obtained by using methods based on behavioral rules rather than those based only on a single statistic. Summing up, masquerade attacks exhibit a good strategy for bypassing an IDS. (c) 2012 Elsevier Inc. All rights reserved.
Keyword:
Masquerade attacks
IDS systems
User profiles
期刊
IF:
4.1
论文数:
5.4K
被引数:
8.4K
机构
引用论文
没有更多内容

