Indirect human computer interaction-based biometrics for intrusion detection systems

Proceedings - International Carnahan Conference on Security Technology

Volumn , Issue , 2007, Pages 138-145

  Yampolskiy, Roman V ^a,b  

^a IEEE

^b the State University of New York   (United States)

Author keywords

ANN; HCI. system calls; IDS; Indirect biometrics; network traffic

Indexed keywords

BIOMETRICS; COMPUTER CRIME; COMPUTER SYSTEMS; ELECTRIC CURRENTS; FLOW INTERACTIONS; HUMAN COMPUTER INTERACTION; INTERNET; SECURITY OF DATA; SENSORS; SIGNAL DETECTION; TECHNOLOGY; WORD PROCESSING;

ANN; AUDIT LOGS; HCI. SYSTEM CALLS; IDS; INDIRECT BIOMETRICS; INTRUSION DETECTION SYSTEM; INTRUSION DETECTION SYSTEMS; NETWORK TRAFFIC; NETWORK TRAFFIC ANALYSIS; NETWORK TRAFFICS; SECURITY TECHNOLOGIES; SOFTWARE APPLICATIONS; STACK DATA; SYSTEM CALLS;

INTRUSION DETECTION;

EID: 47849105422     PISSN: 10716572     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CCST.2007.4373481     Document Type: Conference Paper

References (76)

1. A. K. Jain, A. Ross, and S. Prabhakar, "An introduction to biometric recognition," presented at IEEE Trans. Circuits Syst. Video Technol, 2004.
2. R. V. Yampolskiy, "Human Computer Interaction Based Intrusion Detection," presented at 4th International Conference on Information Technology: New Generations (ITNG 2007), Las Vegas, Nevada, USA, April 2-4, 2007.
3. R. V. Yampolskiy, "Motor-Skill Based Biometrics," presented at In Assuring Business processes, Proceedings of the 6th Annual Security Conference, Ed. G. Dhillon. Global Publishing, Las Vegas, NV, USA., April 11-12, 2007.
4. BioPassword, "Biopassword," Available at: http://www. biopassword.com/bp2/welcome.asp, Retrieved October 24, 2005.
5. J. Ilonen, "Keystroke dynamics," Available at: www.it.lut.fi/kurssit/03-04/010970000/seminars/Ilonen.pdf, Retrieved July 12, 2006.
6. A. K. Jain, R. Bolle, and S. Pankanti, "BIOMETRICS: Personal Identification in Networked Society," 1999.
7. F. Monrose and A. D. Rubin, "Keystroke Dynamics as a Biometric for Authentication," presented at Future Generation Computing Systems (FGCS) Journal: Security on the Web (special issue), March 2000.
8. F. Bergadano, D. Gunetti, and C. Picardi, "User authentication through keystroke dynamics," presented at ACM Transactions on Information and System Security (TISSEC), November 2002.
9. D. Gunetti, C. Picardi, and G. Ruffo, "Keystroke Analysis of Different Languages: a Case Study," presented at Proc. of the Sixth Symposium on Intelligent Data Analysis (IDA 2005), Madrid, Spain, 2005.
10. M. Curtin, C. C. Tappert, M. Villani, G. Ngo, J. Simone, H. S. Fort, and S. Cha, "Keystroke Biometric Recognition on Long-Text Input: A Feasibility Study," presented at Proc. Int. Workshop Sci Comp/Comp Stat (IWSCCS 2006), Hong Kong, June 2006.
11. G. Bartolacci, M. Curtin, M. Katzenberg, N. Nwana, S.-H. Cha, and C. C. Tappert, " Long-Text Keystroke Biometric Applications over the Internet," presented at MLMTA, 2005.
12. M. Pusara and C. E. Brodley, "User reauthentication via mouse movements," presented at VizSEC/DMSEC '04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, Washington DC, USA, 2004.
13. A. A. E. Ahmed and I. Traore, "Detecting Computer Intrusions Using Behavioral Biometrics," presented at Third Annual Conference on Privacy, Security and Trust, St. Andrews, New Brunswick, Canada, October, 2005.
14. A. A. E. Ahmed and I. Traore, "Anomaly Intrusion Detection based on Biometrics," presented at Workshop on Information Assurance, United States Military Academy, West Point, NY, June 2005.
15. H. Gamboa and V.-. A. Fred., "A Behavioral Biometric System Based on Human Computer Interaction," In Proceedings of SPIE, 2004.
16. H. Gamboa and A. Fred, "An identity authentication system based on human computer interaction behaviour," presented at Proc. of the 3rd Intl. Workshop on Pattern Recognition in Information Systems, 2003.
17. M. Orozco, Y. Asfaw, A. Adler, S. Shirmohammadi, and A. E. Saddik, "Automatic Identification of Participants in Haptic Systems," presented at 2005 IEEE Instrumentation and Measurement Technology Conference, Ottawa, Canada, 17-19 May 2005.
18. M. Orozco, Y. Asfaw, S. Shirmohammadi, A. Adler, and A. E. Saddik, "Haptic-Based Biometrics: A Feasibility Study," presented at IEEE Virtual Reality Conference, Alexandria, Virginia, USA, March 25-29, 2006.
19. M. O. Trujillo, I. Shakra, and A. E. Saddik, "Haptic: the new biometrics-embedded media to recognizing and quantifying human patterns," Proceedings of the 13th annual ACM international conference on Multimedia, Hilton, Singapore, 2005.
20. Caslon-Analytics, presented at Available at: http://www.caslon.com.au/ biometricsnote6.htm, Retrieved October 2, 2005.
21. S. J. Stolfo, S. Hershkop, K. Wang, O. Nimeskern, and C.-W. Hu, "A Behavior-based Approach to Securing Email Systems," presented at Mathematical Methods, Models and Architectures for Computer Networks Security, Sept. 2003.
22. S. J. Stolfo, C.-W. Hu, W.-J. Li, S. Hershkop, K. Wang, and O. Nimeskern, "Combining Behavior Models to Secure Email Systems," presented at CU Tech Report, Available at: www1.cs.columbia.edu/ids/publications/EMT-weijen.pdf, April 2003.
23. E. H. Spafford and S. A. Weeber., "Software Forensics: Can We Track Code to its Authors?" presented at 15th National Computer Security Conference, Oct 1992.
24. A. Gray, P. Sallis, and S. MacDonell, "Software Forensics: Extending Authorship Analysis Techniques to Computer Programs," presented at In Proc. 3rd Biannual Conf. Int. Assoc. of Forensic Linguists (IAFL'97), 1997.
25. G. Frantzeskou, S. Gritzalis, and S. MacDonell, "Source Code Authorship Analysis for Supporting the Cybercrime Investigation Process," presented at 1st International Conference on eBusiness and Telecommunication Networks - Security and Reliability in Information Systems and Networks Track, Setubal Portugal, August 2004.
26. R. V. Yampolskiy, "Behavior Based Identification of Network Intruders," presented at 19th Annual CSE Graduate Conference (Grad-Conf2006), Buffalo, NY, February 24, 2006.
27. R. V. Yampolskiy and V. Govindaraju, "Use of Behavioral Biometrics in Intrusion Detection and Online Gaming," presented at Biometric Technology for Human Identification III. SPIE Defense and Security Symposium, Orlando, Florida, 17-22 April 2006.
28. J. Ramon and N. Jacobs, "Opponent modeling by analysing play," presented at Proceedings of the Computers and Games workshop on Agents in Computer Games, Edmonton, Albera, Canada, 2002.
29. A. Brömnme and S. Al-Zubi, "Multifactor Biometric Sketch Authentication," presented at In A. Brömme and C. Busch, editors, Proceedings of the BIOSIG 2003, Darmstadt, Germany, 24. July 2003.
30. S. Al-Zubi, A. Brömme, and K. Tönnies, "Using an Active Shape Structural Model for Biometric Sketch Recognition," presented at In Proceedings of DAGM, Magdeburg, Germany, September 2003.
31. D. Y. Yeung and Y. Ding, "Host-based intrusion detection using dynamic and static behavioral models," presented at Pattern Recognition.
32. J. Marin, D. Ragsdale, and J. Surdu, "A hybrid approach to the profile creation and intrusion detection," presented at DARPA Information Survivability Conference and Exposition (DISCEX II'01), 2001.
33. T. Lane and C. E. Brodley, "An Application of Machine Learning to Anomaly Detection," presented at 20th Annual National Information Systems Security Conference, 1997.
34. T. Lane and C. E. Brodley, "Detecting the Abnormal: Machine Learning in Computer Security," presented at Department of Electrical and Computer Engineering, Purdue University Technical Report ECE-97-1, West Lafayette, January 1997.
35. A. Garg, R. Rahalkar, S. Upadhyaya, and K. Kwiat, "Profiling Users in GUI Based Systems for Masquerade Detection," presented at The 7th IEEE Information Assurance Workshop (IAWorkshop 2006), West Point, New York, USA, June 21-23, 2006.
36. T. Lunt, "Detecting Intruders in Computer Systems," presented at In Proceedings of the 1993 Conference on Auditing and Computer Technology, 1993.
37. A. Wespi, M. Dacier, and H. Debar, "Intrusion Detection Using Variable-Length Audit Trail Patterns," presented at In Recent Advances in Intrusion Detrection (RAID), 2000.
38. J. P. Anderson, "Computer Security Threat Monitoring and Surveillance," presented at Technical Report. James P. Anderson Company, Fort Washington, Pennsylvania, April 1980.
39. N. Ye, "A markov chain model of temporal behavior for anomaly detection," presented at In Proceedings of the 2000 IEEE Systems, Man, and Cybernetics Information Assurance and Security Workshop, 2000.
40. A. Seleznyov and S. Puuronen, "Anomaly Intrusion Detection Systems: Handling Temporal Relations between Events," presented at Web proceedings of the 2nd International Workshop on Recent Advances in Intrusion Detection (RAID'99), 1999.
41. C. C. Michael, "Finding the vocabulary of program behavior data for anomaly detection," presented at DARPA Information Survivability Conference and Exposition, 2003, 22-24 April 2003.
42. W. Lee, S. J. Stolfo, and K. W. Mok, "A Data Mining Framework for Building Intrusion Detection Models," presented at IEEE Symposium on Security and Privacy, Okland, CA, 1999.
43. D. E. Denning, "An intrusion-detection model," presented at IEEE Transactions on Software Engineering, 1987.
44. Y. Li, N. Wu, S. Jajodia, and X. S. Wang, "Enhancing Profiles for Anomaly Detection Using Time Granularities," presented at Journal of Computer Security, 2002.
45. K. Ilgun, R. A. Kemmerer, and P. A. Porras, "State transition analysis: A rule-based intrusion detection approach," presented at Software Engineering, 1995.
46. C. Ko, G. Fink, and K. Levitt, "Automated detection of vulnerabilities in privileged programs by execution monitoring," presented at In Proceedings of the 10th Annual Computer Security Applications Conference, December 1994.
47. C. C. Michael and A. Ghosh, "Using finite automata to mine execution data for intrusion detection: A preliminary report," presented at In Proceedings of the Third International Workshop in Recent Advances in Intrusion Detection, Toulouse, France, October 2000.
48. H. Feng, O. Kolesnikov, P. Fogla, W. Lee, and W. Gong, "Anomaly Detection using Call Stack Information," presented at Proceedings of the IEEE Security and Privacy, Oakland, CA, USA, May 11-14, 2003.
49. J. Giffin, S. Jha, and B. Miller, "Efficient context-sensitive intrusion detection," presented at In 11th Annual Network and Distributed Systems Security Symposium (NDSS), San Diego, California, February 2004.
50. Y. Kim, J.-Y. Jo, and K. Suh, "Baseline Profile Stability for Network Anomaly Detection," presented at IEEE ITNG 2006, Internet and Wireless Network Security track, Las Vegas, NV, April 2006.
51. L. d. S. Silva, A. F. d. Santos, J. D. d. Silva, and A. Montes, "A Neural Network Application for Attack Detection in Computer Networks," Instituto Nacional de Pesquisas Espanciais, 2004.
52. Z. Zhang and C. Manikopoulos, "Investigation of neural network classification of computer network attacks," presented at Proceedings of International Conference on Information Technology: Research and Education, 11-13 Aug. 2003.
53. R. Sommer and V. Paxson, "Enhancing Byte-Level Network Intrusion Detection Signatures with Context," presented at Proc. of 10th ACM Conference on Computer and Communications Security, 2003.
54. D. Novikov, R. V. Yampolskiy, and L. Reznik, "Artificial Intelligence Approaches for Intrusion Detection," presented at Long Island Systems Applications and Technology Conference (LISAT2006). Long Island, New York., May 5, 2006.
55. D. Novikov, R. V. Yampolskiy, and L. Reznik, "Anomaly Detection Based Intrusion Detection," presented at Third International Conference on Information Technology: New Generations (ITNG 2006), Las Vegas, Nevada, USA, April 10-12, 2006.
56. D. Novikov., "Neural Networks to Intrusion Detection.," presented at MS thesis, Rochester Institute of Technology. Rochester, NY, October 2005.
57. D. Liu and F. Huebner, "Application Profiling of IP Traffic," presented at 27th Annual IEEE Conference on Local Computer Networks, Nov. 6-8, 2002.
58. K. Thompson, G. Miller, and R. Wilder, "Wide area Internet traffic patterns and characteristics," presented at In IEEE Network, November 1997.
59. F. Apap, A. Honig, S. Hershkop, E. Eskin, and S. Stolfo, "Detecting malicious software by monitoring anomalous windows registry accesses," presented at Technical report, CUCS Technical Report, 2001.
60. A. G. Pennington, J. D. Strunk, J. L. Griffin, C. A. N. Soules, G. R. Goodson, and G. R. Ganger, "Storage-based intrusion detection: Watching storage activity for suspicious behavior," presented at Technical report CMU - CS - 02 - 179. Carnegie Mellon University, October 2002.
61. M. Banikazemi, D. Poff, and B. Abali, "Storage-based intrusion detection for storage area networks (SANs)," presented at Proceedings. 22nd IEEE / 13th NASA Goddard Conference on Mass Storage Systems and Technologies, 2005., 11-14 April 2005.
62. Y. Zhang and D. Wang, "Research on Object-Storage-Based Intrusion Detection," presented at 12th International Conference on Parallel and Distributed Systems (ICPADS), 12-15 July 2006.
63. J. L. Griffin, A. G. Pennington, J. S. Bucy, D. Choundappan, N. Muralidharan, and G. R. Ganger, "On the Feasibility of Intrusion Detection Inside Workstation Disks," presented at Technical Report CMU-PDL-03-106, Carnegie Mellon University, 2003.
64. L.-c. Lam, W. Li, and T.-c. Chiueh, "Accurate and Automated System Call Policy-Based Intrusion Prevention," presented at in Proceedings of 2006 International Conference on Dependable Systems and Networks (DSN 2006), June 2006.
65. S. A. Hofmeyr, S. Forrest, and A. Somayaji, "Intrusion detection using sequences of system calls," presented at Journal of Computer Security, 1998.
66. C. Warrender, S. Forrest, and B. Pearlmutter, "Detecting intrusions using system calls: alternative data models," presented at Proceedings of the 1999 IEEE Symposium on Security and Privacy, Oakland, CA, USA, 05/09/1999-05/12/1999.
67. N. Nguyen, P. Reiher, and G. H. Kuenning, "Detecting insider threats by monitoring system call activity," presented at IEEE Systems, Man and Cybernetics Society Information Assurance Workshop, 18-20 June 2003.
68. C. Marceau, "Characterizing the Behavior of a Program Using Multiple-Length N-grams," presented at Proceedings of the New Security Paradigms Workshop 2000, Cork, Ireland, Sept. 19-21, 2000.
69. D. Wagner and D. Dean, "Intrusion detection via static analysis," presented at In IEEE Symposium on Security and Privacy, 2001.
70. A. K. Ghosh, A. Schwatzbard, and M. Shatz, "Learning Program Behavior Profiles for Intrusion Detection," presented at in Proceedings 1 st USENIX Workshop on Intrusion Detection and Network Monitoring, Santa Clara, California, April 1999.
71. S. Bhatkar, A. Chaturvedi, and R. Sekar, "Dataflow Anomaly Detection," presented at IEEE Symposium on Security and Privacy, May 2006.
72. DARPA, "Intrusion Detection Evaluation," presented at MIT Lincoln Laboratory, Available at: http://www.II.mit.edu/ist/ideval, 1998.
73. W. Lee, S. Stolfo, and K. Mok, "Mining in a Data-Flow Environment: Experience in Network Intrusion Detection," presented at In Proceedings of the 5th ACM SIGKDD, San Diego, CA, 1999.
74. R. V. Yampolskiy, "Feature Extraction Methods for Character Recognition," presented at Master's Thesis. Rochester Institute of Technology, Rochester, NY, May 10, 2004.
75. H. H. Feng, O. M. Kolesnikov, P. Fogla, W. Lee, and W. Gong, "Anomaly detection using call stack information," presented at In Proceedings of IEEE Symposium on Security and Privacy, 2003.
76. P. T. Stanton, W. Yurcik, and L. Brumbaugh, "FABS: file and block surveillance system for determining anomalous disk accesses," presented at Proceedings from the Sixth Annual IEEE Information Assurance Workshop, 15-17 June 2005.