Hybrid method for detecting masqueraders using session folding and hidden Markov models

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4293 LNAI, Issue , 2006, Pages 622-631

  Posadas, Román ^a   Mex Perera, Carlos ^a   Monroy, Raúl ^a   Nolazco Flores, Juan ^a  

^a SCHOOL OF ENGINEERING AND SCIENCES   (Mexico)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEMS; DATA STRUCTURES; KNOWLEDGE ACQUISITION; MARKOV PROCESSES;

HIDDEN MARKOV MODELS; MASQUERADERS; USERS SESSIONS;

COMPUTER SYSTEMS PROGRAMMING;

EID: 33845941202     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11925231_59     Document Type: Conference Paper

References (7)

1. Schonlau, M., DuMouchel, W., Ju, W., Karr, A., Theus, M., Vardi, Y.: Computer Intrusion: Detecting Masquerades. Statistical Science 16 (2001) 1-17.
2. Schonlau, M., Theus, M.: Detecting masquerades in intrusion detection based on unpopular commands. Information Processing Letters 76 (2000) 33-38
3. Latendresse, M.: Masquerade detection via customized grammars. In Julisch, K., Krügel, C., eds.: Second International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment. Volume 3548 of Lecture Notes in Computer Science., Springer(2005) 141-159
4. Nevill-Manning, G.G., Witten, I.H.: Identifying hierarchical structure in sequences: a linear-time algorithm. Journal of Artificial Intelligence Research, JAIR 7 (1997) 67-82
5. Rabiner, L.R., Juang, B.H.: An introduction to Hidden Markov Models. IEEE ASSP Magazine 3 (1986) 4-16
6. Godínez, F. Hutter, D., Monroy, R.: Audit File Reduction Using N-Gram Models (Work in Progress). In patrick, A., Young, M., eds.: Proceedings of the Ninth International Conference on Finantial Cryptography and Data Security, FC'05. Volume 3570 of Lecture Notes in Computer Science., Roseau, The Commonwealth Of Dominicana, Springer-Verlag (2005) 336-340
7. Schonlau, M.: Masquerading used data. (Matthias Schonlau's home page) http://www.schonlau.net.