AI lessons learned from experiments in insider threat detection

AAAI Spring Symposium - Technical Report

Volumn SS-06-08, Issue , 2006, Pages 49-55

  Liu, Alexander ^a   Martin, Cheryl ^a   Hetherington, Tom ^a   Matzner, Sara ^a  

^a UNIVERSITY OF TEXAS AT AUSTIN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLASSIFICATION PROBLEM; PROBLEM DOMAIN; THREAT DETECTION;

ARTIFICIAL INTELLIGENCE; INTELLIGENT AGENTS; LEARNING SYSTEMS; RESEARCH AND DEVELOPMENT MANAGEMENT; SECURITY OF DATA;

PROBLEM SOLVING;

EID: 33747175399     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (10)

1. Bay, S., and Schwabacher, M. 2003. Mining distance-based outliers in near linear time with randomization and a simple pruning rule. In Ninth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining.
2. Forrest, S.; Hofmeyr, S.; Somayaji, A.; and Longstaff, T. A. 1996. A sense of self for unix processes. In IEEE Symposium on Computer Security and Privacy.
3. Hofmeyr, S.; Forrest, S.; and Somayaji, A. 1998. Intrusion detection using sequences of system calls. In Journal of Computer Security, 151-180.
4. Kang, D.-K.; Fuller, D.; and Honavar, V. 2005. Learning classifiers for misuse and anomaly detection using a bag of system calls representation. In 2005 IEEE Workshop on Information Assurance.
5. Kruegel, C.; Mutz, D.; Valeur, F.; and Vigna, G. 2003. On the detection of anomalous system call arguments. In 8th European Symposium on Research in Computer Security.
6. Liao, Y., and Vemuri, V. R. 2002. Using text categorization techniques for intrusion detection. In USENIX Security Symposium.
7. Liu, A.; Martin, C.; Hetherington, T.; and Matzner, S. 2005. A comparison of system call feature representations for insider threat detection. In 2005 IEEE Workshop on Information Assurance.
8. Maxion, R. 2003. Masquerade detection using enriched command lines. In International Conference on Dependable Systems & Networks.
9. Nguyen, N.; Reiher, P.; and Kuenning, G. H. 2003. Detecting insider threats by monitoring system call activity. In 2003 IEEE Workshop on Information Assurance.
10. Tandon, G., and Chan, P. 2003. Learning rules from system call arguments and sequences for anomaly detection. In ICDM Workshop on Data Mining for Computer Security.