Detecting masquerades in intrusion detection based on unpopular commands

Information Processing Letters

Volumn 76, Issue 1-2, 2000, Pages 33-38

  Schonlau, Matthias ^a   Theus, Martin ^b  

^a NATIONAL INSTITUTE OF ENVIRONMENTAL HEALTH SCIENCES   (United States)

^b AT AND T LABS RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DATA PRIVACY; DATA STRUCTURES; UNIX;

COMPUTER INTRUSION DETECTION;

SECURITY OF DATA;

EID: 0034325396     PISSN: 00200190     EISSN: None     Source Type: Journal    
DOI: 10.1016/S0020-0190(00)00122-8     Document Type: Article

References (7)

1. Amoroso E. Intrusion detection: An introduction to Internet surveillance, correlation, trace back, traps, and response. Intrusion. Net Books, Sparta, NJ:1999.
2. Computer Security Institute. CSI/FBI computer crime and security survey results quantify financial losses. Comput. Security Alert. Vol. 181:1998.
3. Denning D. An intrusion-detection model. Proc. IEEE Symposium on Security and Privacy, Oakland, CA. 1986;222-232.
4. Denning D.E., Denning P.J. Internet Besieged. 1997;ACM Press, New York.
5. DuMouchel W., Schonlau M. A comparison of test statistics for computer intrusion detection based on principal components regression of transition probabilities. Proc. 30th Symposium on the Interface, Computing Science and Statistics. Vol. 30:1999;404-413.
6. Lunt T. Automated audit trail analysis and intrusion detection. Proc. 11th National Computer Security Conference. 1988.
7. Theus M., Schonlau M. Intrusion detection based on structural zeroes. Statist. Comput. Graphics Newslett. Vol. 9:(1):1998;12-17.