Safeguarding academic accounts and resources with the University Credential Abuse Auditing System

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2012, Pages

  Zhang, Jing ^a   Berthier, Robin ^b   Rhee, Will ^a   Bailey, Michael ^a   Pal, Partha ^c   Jahanian, Farnam ^a   Sanders, William H ^b  

^a UNIVERSITY OF MICHIGAN   (United States)

^b University of Illinois at Urbana Champaign   (United States)

^c BBN TECHNOLOGIES   (United States)

Author keywords

authentication; compromised account; university; Virtual Private Network (VPN)

Indexed keywords

ACADEMIC INSTITUTIONS; AUDITING SYSTEMS; COMPROMISED ACCOUNT; FALSE POSITIVE; FINANCIAL GAINS; MALWARES; ONLINE IDENTITY; PHISHING; RESEARCH UNIVERSITIES; UNIVERSITY;

AUTHENTICATION; COMPUTER CRIME; VIRTUAL PRIVATE NETWORKS;

MANAGEMENT;

EID: 84866697061     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2012.6263961     Document Type: Conference Paper

References (23)

1. Trend Micro, "Data-stealing malware on the rise: Solutions to keep businesses and consumers safe," http://us.trendmicro.com/imperia/md/ content/us/pdf/threats/securitylibrary/, 2009.
2. Anti-Phishing Working Group, "Phishing activity trends report," http://www.antiphishing.org/phishReportsArchive.html, 2010.
3. B. Stone-Gross, M. Cova, L. Cavallaro, B. Gilbert, M. Szydlowski, R. Kemmerer, C. Kruegel, and G. Vigna, "Your botnet is my botnet: Analysis of a botnet takeover," in Proc. of the 16th ACM Conference on Computer and Communications Security, 2009, pp. 635-647.
4. J. R. Young, "Academic publisher steps up efforts to stop piracy of its online products," http://chronicle.com/article/Academic-Publisher- Steps-Up/128031, 2011.
5. R. J. Bolton and D. J. H, "Statistical fraud detection: A review," Statistical Science, vol. 17, pp. 235-249, 2002.
6. "Weka 3 - Data Mining with Open Source Machine Learning Software," http://www.cs.waikato.ac.nz/ml/weka/.
7. J. G. Orme and T. Combs-Orme, Multiple Regression with Discrete Dependent Variables. Oxford University Press, 2009.
8. MaxMind. http://www.maxmind.com/app/ip-location, 2011.
9. Y. Wang, D. Burgener, M. Flores, A. Kuzmanovic, and C. Huang, "Towards street-level client-independent IP geolocation," in Proc. of the 8th USENIX Symposium on Networked Systems Design and Implementation, Mar. 2011.
10. A. Sharma, Z. Kalbarczyk, R. Iyer, and J. Barlow, "Analysis of credential stealing attacks in an open networked environment," in Proc. of the Fourth International Conference on Network and System Security. Washington, DC, USA: IEEE Computer Society, 2010, pp. 144-151.
11. E. Aleskerov, B. Freisleben, and B. Rao, "Cardwatch: A neural network based database mining system for credit card fraud detection," Proc. of the IEEE IAFE 1997 conference on Computational Intelligence for Financial Engineering, pp. 220-226, 1997.
12. S. Panigrahi, A. Kundu, S. Sural, and A. K. Majumdar, "Credit card fraud detection: A fusion approach using Dempster-Shafer theory and Bayesian learning," Inf. Fusion, vol. 10, pp. 354-363, Oct. 2009.
13. R. Chen, T. Chen, Y. Chien, and Y. Yang, "Novel questionnaire- responded transaction approach with SVM for credit card fraud detection," in Proc. of the 2nd International Conference on Advances in Neural Networks, vol. 2, 2005, pp. 916-921.
14. D. Agarwal, "An empirical Bayes approach to detect anomalies in dynamic multidimensional arrays," in Proc. of the Fifth IEEE International Conference on Data Mining. IEEE Computer Society, 2005, pp. 26-33.
15. K. C. Cox, S. G. Eick, G. J. Wills, and R. J. Brachman, "Visual data mining: Recognizing telephone calling fraud," Data Mining and Knowledge Discovery, vol. 1, pp. 225-231, 1997.
16. C. Phua, D. Alahakoon, and V. Lee, "Minority report in fraud detection: Classification of skewed data," SIGKDD Explor. Newsl., vol. 6, no. 1, pp. 50-59, 2004.
17. F. Esponda, S. Forrest, and P. Helman, "A formal framework for positive and negative detection schemes," IEEE Transactions on Systems, Man, and Cybernetics, Part B: Cybernetics, vol. 34, no. 1, pp. 357-373, 2004.
18. K. A. Heller, K. M. Svore, A. D. Keromytis, and S. J. Stolfo, "One class support vector machines for detecting anomalous windows registry accesses," in Proc. of the Workshop on Data Mining for Computer Security, 2003.
19. J. D. Brutlag, "Aberrant behavior detection in time series for network monitoring," Proc. of the 14th Systems Administration Conference (LISA 2000), Dec. 2000.
20. C. Whittaker, B. Ryner, and M. Nazif, "Large-scale automatic classification of phishing pages," in Proc. of 17th Annual Network and Distributed System Security Symposium, 2010.
21. M. Antonakakis, R. Perdisci, W. Lee, V. Nikolaos, and D. Dagon, "Detecting malware domains at the upper DNS hierarchy," pp. 1-16, 2011.
22. J. Ma, L. K. Saul, S. Savage, and G. M. Voelker, "Beyond blacklists: Learning to detect malicious web sites from suspicious URLs," in Proc. of the SIGKDD Conference., 2009.
23. M. Chapple, N. Chawla, and A. Striegel, "Authentication anomaly detection: A case study on a virtual private network," in Proc. of the 3rd Annual ACM Workshop on Mining Network Data. New York, NY, USA: ACM, 2007, pp. 17-22.