Masquerade detection in network environments

Proceedings - 2010 10th Annual International Symposium on Applications and the Internet, SAINT 2010

Volumn , Issue , 2010, Pages 38-44

  Strasburg, Chris ^a   Krishnan, Sandeep ^b   Dorman, Karin ^c   Basu, Samik ^b   Wong, Johnny S ^b  

^a IOWA STATE UNIVERSITY   (United States)

^b Iowa State University   (United States)

^c Iowa State University   (United States)

Author keywords

D.4.6. security and privacy protection; H.1.2. user machine systems; K.6.5. security and protection

Indexed keywords

COMMAND LINE; CONNECTED SYSTEMS; DATA ACCESSIBILITY; H.1.2. USER/MACHINE SYSTEMS; HOST-BASED; LOG ANALYSIS; MASQUERADE ATTACKS; MASQUERADE DETECTION; NETFLOW DATA; NETWORK DATA; NETWORK ENVIRONMENTS; NETWORK EVENTS; NETWORK STATISTICS; SECURITY AND PRIVACY PROTECTION; SECURITY AND PROTECTION; SYSTEM CALLS; USER NETWORKS; USER PROFILE;

INTERNET;

COMPUTER CRIME;

EID: 78649236114     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SAINT.2010.66     Document Type: Conference Paper

References (19)

1. R. A. Maxion and T. N. Townsend, "Masquerade detection using truncated command lines," 2002, p. 219.
2. M. Bertacchini and P. Fierens, "A survey on masquerader detection approaches," 2008.
3. M. Schonlau, W. Dumouchel, W. hua Ju, A. F. Karr, M. Theus, and Y. Vardi, "Computer intrusion: Detecting masquerades," Statistical Science, vol. 16, pp. 58-74, 2001.
4. S. Greenberg, "Using unix: Collected traces of 168 users," 88/333/45, Department of Computer Science, University of Calgary, Alberta, Canada, Tech. Rep., 1998.
5. R. Posadas, J. C. Mex-Perera, R. Monroy, and J. A. Nolazco-Flores, "Hybrid method for detecting masqueraders using session folding and hidden markov models," in MICAI, 2006, pp. 622-631.
6. T. Okamoto, T. Watanabe, and Y. Ishida, "Towards an immunitybased system for detecting masqueraders," in KES, 2003, pp. 488-495.
7. T. Okamoto and Y. Ishida, "Framework of an immunity-based anomaly detection system for user behavior," in KES (3), 2007, pp. 821-829.
8. T. Lane and C. E. Brodley, "Approaches to online learning and concept drift for user identificatio in computer security," in In KDD. AAAI Press, 1998, pp. 259-263.
9. S. Coull, J. Branch, B. Szymanski, and E. Breimer, "Intrusion detection: A bioinformatics approach," 2003.
10. S. Coull and B. Szymanski, "Sequence alignment for masquerade detection." Comput. Stat. Data Anal., vol. 52, no. 8, pp. 4116-4131, 2008.
11. R. A. Maxion and T. N. Townsend, "Masquerade detection augmented with error analysis," vol. 53, Mar. 2004.
12. K. S. Killhourhy and R. A. Maxion, "Investigating a possible fl w in a masquerade detection system," Technical Report 869, Newcastle University, School of Computing Science, Tech. Rep., 2004.
13. H.-S. Kim and S. D. Cha, "Empirical evaluation of svm-based masquerade detection using unix commands," Computers & Security, vol. 24, no. 2, pp. 160-168, 2005.
14. K. Wang and S. Stolfo, "One-class training for masquerade detection," in 3rd IEEE Conference Data Mining Workshop on Data Mining for Computer Security, 2003.
15. C.-C. Chang and C.-J. Lin, LIBSVM: a library for support vector machines, 2001, software available at http://www.csie.ntu.edu.tw/ cjlin/libsvm.
16. J. B. MacQueen, "Some methods for classificatio and analysis of multivariate observations," in Proceedings of the 5th Berkeley Symposium on Mathematical Statistics and Probability. University of California Press, 1967, pp. 281-297.
17. R Development Core Team, R: A Language and Environment for Statistical Computing, R Foundation for Statistical Computing, Vienna, Austria, 2009, ISBN 3-900051-07-0. [Online]. Available: http://www.R-project.org
18. K.-M. Chung, W.-C. Kao, C.-L. Sun, L.-L. Wang, and C.-J. Lin, "Radius margin bounds for support vector machines with the rbf kernel," Neural Comput., vol. 15, no. 11, pp. 2643-2681, 2003.
19. Y. wei Chen and C. jen Lin, "Combining svms with various feature selection strategies," in Taiwan University. Springer-Verlag, 2005.