.png){kind=icon}
返回
Masquerade detection using profile hidden Markov models
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2011.08.003.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
In this paper, we consider the problem of masquerade detection, based on user-issued UNIX commands. We present a novel detection technique based on profile hidden Markov models (PHMMs). For comparison purposes, we implement an existing modeling technique based on hidden Markov models (HMMs). We compare these approaches and show that, in general, our PHMM technique is competitive with HMMs. However, the standard test data set lacks positional information. We conjecture that such positional information would give our PHMM a significant advantage over HMM-based detection. To lend credence to this conjecture, we generate a simulated data set that includes positional information. Based on this simulated data, experimental results show that our PHMM-based approach outperforms other techniques when limited training data is available. (C) 2011 Elsevier Ltd. All rights reserved.
Keyword:
Masquerade detection
Hidden Markov model
Profile hidden Markov models
Intrusion detection
N-gram
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
A TUTORIAL ON HIDDEN MARKOV-MODELS AND SELECTED APPLICATIONS IN SPEECH RECOGNITION关于语音识别中的隐马尔可夫模型和选定应用的教程.png)
PROCEEDINGS OF THE IEEE
PROCEEDINGS OF THE IEEEIF25.9
PREAI
分享收藏分享收藏Empirical evaluation of SVM-based masquerade detection using UNIX commandsCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
没有更多内容
没有更多内容