Masquerade detection using truncated command lines

Proceedings of the 2002 International Conference on Dependable Systems and Networks

Volumn , Issue , 2002, Pages 219-228

  Maxion, Roy A ^a   Townsend, Tahlia N ^a  

^a Carnegie Mellon University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MASQUERADE ATTACK; MASQUERADE DETECTION; TRUNCATED COMMAND LINES;

ALGORITHMS; ERROR ANALYSIS; ERROR DETECTION; SECURITY OF DATA;

COMPUTER OPERATING SYSTEMS;

EID: 0036931591     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2002.1028903     Document Type: Conference Paper

References (14)

1. B. D. Davidson and H. Hirsh. Predicting sequences of user actions. In Predicting the Future: AI Approaches to Time-Series Problems, papers from the 1998 AAAI Workshop, 27 July 1998, Madison, Wisconsin, pages 5-12. Published as AAAI Technical Report WS-98-07, AAAI Press, Menlo Park, California, 1998.
2. P. Domingos and M. Pazzani. Beyond independence: conditions for the optimality of the simple Bayesian classifier. In L. Saitta, editor, 13th International Conference on Machine Learning (ICML-96), pages 105-112, 03-06 July 1996, Bari, Italy. Morgan Kaufmann, San Francisco, California, 1996.
3. W. DuMouchel. Computer intrusion detection based on Bayes factors for comparing command transition probabilities. Technical Report 91, National Institute of Statistical Sciences, Research Triangle Park, North Carolina 27709-4006, 1999.
4. W. Ju and Y. Vardi. A hybrid high-order markov chain model for computer intrusion detection. Technical Report 92, National Institute for Statistical Sciences, Research Triangle Park, North Carolina 27709-4006, 1999.
5. T. Lane and C. E. Brodley. Temporal sequence learning and data reduction for anomaly detection. ACM Transactions on Information and System Security, 2(3):295-331, August 1999.
6. V. Loeb. Spy case prompts computer search. Washington Post, 05 March 2001, page A01.
7. T. F. Lunt. A survey of intrusion-detection techniques. Computers & Security, 12(4):405-418, June 1993.
8. T. F. Lunt and R. Jagannathan. A prototype real-time intrusion-detection expert system. In IEEE Symposium on Security and Privacy, pages 59-66. 18-21 April 1988, Oakland, California. IEEE Computer Society Press, Washington, DC, 1988.
9. C. D. Manning and H. Schutze. Foundations of Statistical Natural Language Processing. MIT Press, Cambridge, Massachusetts, 1999. Fourth printing, 2001.
10. A. McCallum and K. Nigam. A comparison of event models for naive bayes text classification. In Learning for Text Categorization, papers from the 1998 AAAI Workshop, 27 July 1998, Madison, Wisconsin, pages 41-48. Published as AAAI Technical Report WS-98-05, AAAI Press, Menlo Park, California, 1998.
11. T. M. Mitchell. Machine Learning. McGraw-Hill, Boston, Massachusetts, 1997.
12. M. Schonlau, W. DuMouchel, W.-H. Ju, A. F. Karr, M. Theus, and Y. Vardi. Computer intrusion: Detecting masquerades. Statistical Science, 16(1):58-74, February 2001.
13. M. Schonlau and M. Theus. Detecting masquerades in intrusion detection based on unpopular commands. Information Processing Letters, 76(1-2):33-38, November 2000.
14. J. Swets and R. Pickett. Evaluation of Diagnostic Systems: Methods from Signal Detection Theory. Academic Press, New York, 1992.