A first step toward detecting SSH identity theft in HPC cluster environments: Discriminating masqueraders based on command behavior

2005 IEEE International Symposium on Cluster Computing and the Grid, CCGrid 2005

Volumn 1, Issue , 2005, Pages 111-120

  Yurcik, William ^a   Liu, Chao ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Cluster security; Masquerading; SSH identity theft

Indexed keywords

CLUSTER SECURITY; MASQUERADING; SSH IDENTITY THEFTS; SUPPORT VECTOR MACHINE;

INFORMATION MANAGEMENT; LEARNING SYSTEMS; MULTI AGENT SYSTEMS; PRECISION ENGINEERING; SECURITY OF DATA; USER INTERFACES;

COMPUTER CRIME;

EID: 33845484215     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CCGRID.2005.1558542     Document Type: Conference Paper

References (16)

1. M. Brown, W. Grundy, D. Lin, N. Cristianini, C. Sugnet, T. Furey, M. Jr, and D. Haussler. Knowledge-based analysis of microarray gene expression data by using suport vector machines. In Proc. Natl. Acad. Sci., volume 97, pages 262-267, 2000.
2. C. Burges. A tutorial on support vector machines for pattern recognition. Data Mining and Knowledge Discovery, 2(2): 121-167, 1998.
3. K. Chin. Support vector machines applied to speech pattern classification. Master's thesis, Engineering Department, Cambridge University, 1999.
4. A. Cockcroft. Processing Accounting Data into Workloads. Sun BluePrints, 1999.
5. R. Cooley. Classification of news stories using support vector machines. In Proc. 16th International Joint Conference on Artificial Intelligence Text Mining Workshop, 1999.
6. H. Drucker, D. Wu, and V. Vapnik. Support vector machines for Spam categorization. IEEE-NN, 10(5): 1048-1054, 1999.
7. V. Hazelwood. Unix accounting magic. In SysAdmin Magazine, Volume 8, 1999.
8. T. Joachims. Learning to Classify Text Using Support Vector Machines: Methods, Theory and Algorithms. Kluwer Academic Publishers, 2002.
9. C. Leslie, E. Eskin, and W. Noble. The spectrum kernel: A string kernel for SVM protein classification. In the Pacific Symposium on Biocomputing, pages 564-575, 2002.
10. C. Liu, X. Yan, H. Yu, J. Han, and P. S. Yu. Mining behavior graphs for "backtrace" of noncrashing bugs. In Proc. of 2005 SIAM Int. Conf. on Data Mining (SDM05), 2005.
11. G. Paass, E. Leopold, M. Larson, J. Kindermann, and S. Eickeler. SVM classification using sequences of phonemes and syllables. In Proceedings of the 6th European Conference on Principles of Data Mining and Knowledge Discovery, pages 373-384. Springer-Verlag, 2002.
12. G. Salton and C. Buckley. Term-weighting approaches in automatic text retrieval. Information Processing Management, 24(5):513-523, 1988.
13. A. Singhal. Modern information retrieval: A brief overview. IEEE Data Eng. Bull., 24(4):35-43, 2001.
14. A. Singhal, C. Buckley, and M. Mitra. Pivoted document length normalization. In Research and Development in Information Retrieval, pages 21-29, 1996.
15. A. Tam. Enabling Process Accounting on Linux HOWTO, version 1.1, 2001. 〈http://www.tldp.org/HOWTO/Process-Accounting/〉.
16. W. Yurcik, X. Meng, and N. Kiyanclar. NVisionCC: A visualization framework for high performance cluster security. In ACM Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004.