Windows NT one-class masquerade detection

Proceedings fron the Fifth Annual IEEE System, Man and Cybernetics Information Assurance Workshop, SMC

Volumn , Issue , 2004, Pages 82-87

  Li, Ling ^a   Manikopoulos, Constantine N ^a  

^a NEW JERSEY INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Masquerade detection; One class training; Support vector machines; SVM; User profiling; Windows NT

Indexed keywords

COMPUTER OPERATING SYSTEMS - WINDOWS NT; MASQUERADE DETECTION; ONE-CLASS TRAINING; SUPPORT VECTOR MACHINES (SVM); USER PROFILING;

ALGORITHMS; COMPUTER NETWORKS; COMPUTER PROGRAMMING; DATA PROCESSING; LEGACY SYSTEMS; PARAMETER ESTIMATION; SECURITY OF DATA;

UNIX;

EID: 15944403914     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. ftp://ftp.njit.edu/pub/manikopo/
2. M. Schonlau, W. DuMouchel, W. -H. Ju, A. F. Karr, M. Theus, and Y. Vardi, "Computer intrusion: Detecting masquerades", Statistical Science, 16(1):58-74, February 2001.
3. LANE, T., AND BRODLEY, C. E. 1999. Temporal sequence learning and data reduction for anomaly detection. ACMTransactions on Information and System Security 2, 3, 295-331.
4. MAXION, R. A., AND TOWNSEND, T. N. 2002. Masquerade detection using truncated command lines. In Proceedings of International Conference on Dependable Systems & Networks, Washington DC, 23-26 June 2002, 219-228.
5. GOLDRING, T. 2002. Recent experiences with user profiling for windows nt. In Workshop on Statistical and Machine Learning Techniques in Computer Intrusion Detection, Johns Hopkins University, 11-13 June 2002. http://www.mts.jhu.edu/cidwkshop/.
6. K. A. Heller, K. M. Svore, A. D. Keromytis, and S. J. Stolfo," "One Class Vector Machines for Detecting Anomalous Windows Registry Accesses", International Conference on Data Mining - ICDM 2003, Nov. 19, 2003.
7. Manikopoulos, C., and Papavassiliou, S., "Network Intrusion and Fault Detection: A Statistical Anomaly Approach", IEEE Communications Magazine, vol. 40, no. 10, pp. 76-82, October 2002.
8. th Annual IEEE SMC Information Assurance Workshop (IAW03), West Point, NY, June 18-20, 2003.
9. Zhang, Z., and Manikopoulos, C., "Investigation of Neural Network Classification of Computer Network Attacks," Proceedings of the International Conference on Information Technology.-Research and Education (ITRE2003), NJIT, Newark, NJ, Aug. 10-13, 2003.
10. rd Annual IEEE SMC Information Assurance Workshop (IAW2002), West Point, NY, June 17-19, 2002.
11. Zhang, Z., and Manikopoulos, C., "Neural Networks in Statistical Anomaly Intrusion Detection," Journal of Neural Network World, Vol. 3, 2001, pp. 305-316.
12. Chih-Chung Chang and Chih-Jen Lin, "LIBSVM: a library for support vector machines", 2001. Software available at http://www.csie.ntu.edu.tw/ ~cjlin/libsvm
13. Thorsten Joachims, "Text categorization with support vector machines: Learning with many relevant features", In Proc. of the European Conference on Machine Learning (ECML), pp. 137-142, 1998.
14. B. Scholkopf, J.C. Platt, J. Shawe-Taylor, A.J. Smola, and R.C. Williamson, "Estimating the support of a highdimensional distribution". Technique report, Microsoft Research, MSR-TR-9987, 1999.