Selection, combination, and evaluation of effective software sensors for detecting abnormal computer usage

KDD-2004 - Proceedings of the Tenth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining

Volumn , Issue , 2004, Pages 276-285

  Shavlik, Jude ^a   Shavlik, Mark ^b  

^a University of Wisconsin Madison   (United States)

^b Shavlik Technologies   (United States)

Author keywords

Anomaly detection; Feature selection; Intrusion detection; Machine learning; User modeling; Windows 2000; Winnow algorithm

Indexed keywords

ALGORITHMS; COMPUTER OPERATING SYSTEMS; COMPUTER SOFTWARE; DATA REDUCTION; MATHEMATICAL MODELS; PROBLEM SOLVING; SECURITY OF DATA; SENSORS;

ANOMALY DETECTION; COMPUTER OPERATING SYSTEM - WINDOWS 2000; FEATURE SELECTION; INTRUSION DETECTION; USER MODELING; WINNOW ALGORITHM;

LEARNING SYSTEMS;

EID: 12244298487     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1014052.1014084     Document Type: Conference Paper

References (13)

1. R. Agarwal & M. Joshi, PNrule: A New Framework for Learning Classifier Models in Data Mining (A Case-Study in Network Intrusion Detection,) Proc. First SIAM Intl. Conf. on Data Mining, 2001.
2. J. Anderson, Computer Security Threat Monitoring and Surveillance, J. P. Anderson Company Technical Report, Fort Washington, PA, 1980.
3. DARPA, Research and Development Initiatives Focused on Preventing, Detecting, and Responding to Insider Misuse of Critical Defense Information Systems, DARPA Workshop Report, 1999.
4. A. Ghosh, A. Schwartzbard, & M. Schatz, Learning Program Behavior Profiles for Intrusion Detection, USENIX Workshop on Intrusion Detection & Network Monitoring, April 1999.
5. T. Lane & C. Brodley, Approaches to Online Learning and Concept Drift for User Identification in Computer Security, Proc. KDD, pp 259-263, 1998.
6. A. Lazarevic, L. Ertoz, A. Ozgur, J. Srivastava & V. Kumar, A Comparative Study of Anomaly Detection Schemes in Network Intrusion Detection, Proc. SIAM Conf. Data Mining, 2003.
7. W. Lee, S.J. Stolfo, and K. Mok, A Data Mining Framework for Building Intrusion Detection Models, Proc. IEEE Symp. on Security and Privacy, 1999.
8. N. Littlestone, Learning Quickly When Irrelevant Attributes Abound. Machine Learning 2, pp. 285-318.
9. T. Lunt, A Survey of Intrusion Detection Techniques, Computers and Security 12:4, pp. 405-418, 1993.
10. T. Mitchell, Machine Learning, McGraw-Hill.
11. P. Neumann, The Challenges of Insider Misuse, SRI Computer Science Lab Technical Report, 1999
12. J. Shavlik & M. Shavlik, Final Project Report for DARPA's Insider Threat Active Profiling (ITAP) program, April 2002.
13. C. Warrender, S. Forrest, & B. Pearlmutter. Detecting Intrusions using System Calls. IEEE Symposium on Security and Privacy, pp. 133-145, 1999.