Empirical evaluation of SVM-based masquerade detection using UNIX commands

Computers and Security

Volumn 24, Issue 2, 2005, Pages 160-168

  Kim, Han Sung ^a   Cha, Sung Deok ^a  

^a Korea Advanced Institute of Science and Technology (KAIST)   (South Korea)

Author keywords

Anomaly detection; Intrusion detection; Machine learning; Masquerade detection; Support vector machine (SVM)

Indexed keywords

CODES (SYMBOLS); COMPUTER OPERATING SYSTEMS; COMPUTER SYSTEM FIREWALLS; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; INFORMATION TECHNOLOGY; LEARNING SYSTEMS;

ANOMALY DETECTION; INTRUSION DETECTION; MASQUERADE DETECTION; SUPPORT VECTOR MACHINES (SVM);

SECURITY OF DATA;

EID: 17844372755     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2004.08.007     Document Type: Article

References (18)

1. J.P. Anderson Computer security threat monitoring and surveillance Technical report April 1980 James P. Anderson Company Fort Washington, Pennsylvania
2. Christopher J.C. Burges A tutorial on support vector machines for pattern recognition Data Mining and Knowledge Discovery 2 2 1998 121 167
3. Chih-Chung Chang, and Chih-Jen Lin LIBSVM - a library for support vector machines http://www.csie.ntu.edu.tw/∼cjlin/libsvm/
4. Dumais Susan T, Chen Hao. Hierarchical classification of Web content. In: Proceedings of SIGIR-00, 23rd ACM International Conference on Research and Development in Information Retrieval; 2000. p. 256-63.
5. Mike Fugate, and James R. Gattier Anomaly detection enhanced classification in computer intrusion detection SVM 2002 LNCS 2388 May 2002 p. 186-197
6. Greenberg Saul. Using Unix: collected traces of 168 users. Research report 88/333/45, Department Computer Science, University Calgary, Calgary, Canada; 1988.
7. Chih-Wei Hsu, Chih-Chung Chang, and Chih-Jen Lin A practical guide to support vector classification http://www.csie.ntu.edu.tw/~cjlin/papers/guide/ guide.pdf 2004
8. Joachims Thorsten. Estimating the generalization performance of a SVM efficiently. In: Proceedings of ICML-00, 17th International Conference on Machine Learning; 2000. p. 431-8.
9. Lane Terran D. Machine learning techniques for the computer security domain of anomaly detection. Ph.D. thesis, Department of Electrical and Computer Engineering, Purdue University; Aug. 2000.
10. Lee Wenke, Stolfo Salvatore. Data mining approaches for intrusion detection. In: Proceedings of 7th USENIX Security Symposium, San Antonio, TX; 1998.
11. Maxion Roy. Masquerade detection using enriched command lines. In: Proceedings of international conference on dependable systems and networks (DSN-03); June 2003. p. 5-14.
12. Maxion Roy, Townsend Tahilia N. Masquerade detection using truncated command line. In: Proceedings of international conference on dependable systems and networks (DSN-02); June, 2002. p. 219-28.
13. Mukkamala S, Janowski G, Sung AH. Intrusion detection using support vector machines. In: Proceedings of IEEE international joint conference neural networks; May 2002. p. 1702-7.
14. Thomas H. Ptacek Insertion, evasion, and denial of service: eluding network intrusion detection http://secinf.net/info/ids/idspaper/idspaper.html Oct. 16, 2002
15. Rain Forest Puppy A look at whisker's anti-IDS tactics http://www.wiretrip.net/rfp/txt/whiskerids.html Dec. 1999
16. Matthias Schonlau, William DuMouchel, Wen-Hua Ju, Alan F. Karr, Martin Theus, and Yehuda Vardi Computer intrusion: detecting masquerades Statistical Science 1 16 Feb. 2001 58 74
17. Webster William H, and others. A review of FBI security programs, U.S. Dept. Justice; Mar. 2002.
18. Yang Yiming, Liu Xin. A re-examination of text categorization methods. In: Proceedings of SIGIR-99, 22nd ACM international conference on research and development in information retrieval; 1999. p. 42-9.