Computer Intrusion: Detecting Masquerades

Computer Intrusion: Detecting Masquerades

Masqueraders in computer intrusion detection are people who use somebody else's computer account. We investigate a number of statistical approaches for detecting masqueraders. To evaluate them, we collected UNIX command data from 50 users and then contaminated the data with masqueraders. The ex...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Veröffentlicht in:Statistical science 2001-02, Vol.16 (1), p.58-74
Hauptverfasser: Schonlau, Matthias, DuMouchel, William, Ju, Wen-Hua, Karr, Alan F., Theus, Martin, Vardi, Yehuda
Format: Artikel
Sprache:eng
Schlagworte:
anomaly
Bayes
compression
Computer science
computer security
Datasets
False alarms
high­order Markov
Intrusion detection systems
Markov models
Masquerades
Pattern recognition
profiling
Test data
Transition probabilities
Uniqueness
Unix
Online-Zugang:Volltext
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:Masqueraders in computer intrusion detection are people who use somebody else's computer account. We investigate a number of statistical approaches for detecting masqueraders. To evaluate them, we collected UNIX command data from 50 users and then contaminated the data with masqueraders. The experiment was blinded. We show results from six methods, including two approaches from the computer science community.
ISSN:0883-4237
2168-8745
DOI:10.1214/ss/998929476