Analyzing user behavior using keystroke dynamics to protect cloud from malicious insiders

2014 IEEE International Conference on Cloud Computing in Emerging Markets, CCEM 2014

Volumn , Issue , 2015, Pages

  Bondada, Mahesh Babu ^a   Bhanu, S Mary Saira ^a  

^a NATIONAL INSTITUTE OF TECHNOLOGY   (India)

Author keywords

Cloud; Insider threat; Keystroke dynamics; Security

Indexed keywords

CLOUD COMPUTING; CLOUDS; DIGITAL STORAGE; DYNAMICS; MOBILE SECURITY; SECURITY OF DATA;

CLOUD SERVICE PROVIDERS; INSIDER THREAT; KEYSTROKE DYNAMICS; MALICIOUS INSIDERS; SECURITY; SENSITIVE INFORMATIONS; UNDERLYING SYSTEMS; USER PROFILING TECHNIQUE;

BEHAVIORAL RESEARCH;

EID: 84923247840     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CCEM.2014.7015481     Document Type: Conference Paper

References (34)

1. Mell, Peter, and Tim Grance. "Effectively and securely using the cloud computing paradigm. " NIST, Information Technology Lab (2009).
2. Rocha, Francisco, and Miguel Correia. "Lucy in the sky without diamonds: Stealing confidential data in the cloud. " Dependable Systems and Networks Workshops (DSN-W), 2011 IEEE/IFIP 41st International Conference on. IEEE, 2011.
3. Brunette, Glenn, and Rich Mogull. "Security guidance for critical areas of focus in cloud computing v2. 1. " Cloud Security Alliance (2009): 1-76.
4. Heiser, Jay, and Mark Nicolett. "Assessing the security risks of cloud computing. " Gartner Report (2008).
5. Teh, Pin Shen, Andrew Beng Jin Teoh, and Shigang Yue. "A survey of keystroke dynamics biometrics. " The Scientific World Journal 2013 (2013).
6. Ngugi, Benjamin, Beverly K. Kahn, and Marilyn Tremaine. "Typing biometrics: impact of human learning on performance quality. " Journal of Data and Information Quality (JDIQ) 2. 2 (2011): 11.
7. Stolfo, Salvatore J., Malek Ben Salem, and Angelos D. Keromytis. "Fog computing: Mitigating insider data theft attacks in the cloud. " Security and Privacy Workshops (SPW), 2012 IEEE Symposium on. IEEE, 2012.
8. Rocha, Francisco, and Miguel Correia. "Lucy in the sky without diamonds: Stealing confidential data in the cloud. " Dependable Systems and Networks Workshops (DSN-W), 2011 IEEE/IFIP 41st International Conference on. IEEE, 2011.
9. Claycomb, William R., and Alex Nicoll. "Insider threats to cloud computing: Directions for new research challenges. " Computer Software and Applications Conference (COMPSAC), 2012 IEEE 36th Annual. IEEE, 2012.
10. Duncan, Adrian J., Sadie Creese, and Michael Goldsmith. "Insider attacks in cloud computing. " Trust, Security and Privacy in Computing and Communications (TrustCom), 2012 IEEE 11th International Conference on. IEEE, 2012.
11. Theoharidou, Marianthi, et al. "The insider threat to information systems and the effectiveness of ISO17799. " Computers & Security 24. 6 (2005): 472-484.
12. Schultz, E. Eugene. "A framework for understanding and predicting insider attacks. " Computers & Security 21. 6 (2002): 526-531.
13. Bradford, P., and Ning Hu. "A layered approach to insider threat detection and proactive forensics. " Proceedings of the Twenty-First Annual Computer Security Applications Conference (Technology Blitz). 2005.
14. Eberle, William, Jeffrey Graves, and Lawrence Holder. "Insider threat detection using a graph-based approach. " Journal of Applied Security Research 6. 1 (2010): 32-81.
15. Spitzner, Lance. "Honeypots: Catching the insider threat. " Computer Security Applications Conference, 2003. Proceedings. 19th Annual. IEEE, 2003.
16. Debar, Hervé, Marc Dacier, and Andreas Wespi. "A revised taxonomy for intrusion-detection systems. " Annales des télécommunications. Vol. 55. No. 7-8. Springer-Verlag, 2000.
17. Nguyen, Nam T., Peter L. Reiher, and Geoffrey H. Kuenning. "Detecting Insider Threats by Monitoring System Call Activity. " IAW. 2003.
18. Salem, Malek Ben, Shlomo Hershkop, and Salvatore J. Stolfo. "A survey of insider attack detection research. " Insider Attack and Cyber Security. Springer US, 2008. 69-90.
19. Magklaras, G. B., and S. M. Furnell. "Insider threat prediction tool: Evaluating the probability of IT misuse. " Computers & Security 21. 1 (2001): 62-73.
20. Magklaras, G. B., and S. M. Furnell. "A preliminary model of end user sophistication for insider threat prediction in IT systems. " Computers & Security 24. 5 (2005): 371-380.
21. Kandias, Miltiadis, et al. "An insider threat prediction model. " Trust, Privacy and Security in Digital Business. Springer Berlin Heidelberg, 2010. 26-37.
22. Magklaras, G. B., S. M. Furnell, and Phillip J. Brooke. "Towards an insider threat prediction specification language. " Information management & computer security 14. 4 (2006): 361-381.
23. Teh, Pin Shen, Andrew Beng Jin Teoh, and Shigang Yue. "A survey of keystroke dynamics biometrics. " The Scientific World Journal 2013 (2013).
24. Wang, Xuan, Fangxia Guo, and Jian-feng Ma. "User authentication via keystroke dynamics based on difference subspace and slope correlation degree. " Digital Signal Processing 22. 5 (2012): 707-712.
25. Karnan, Marcus, and N. Krishnaraj. "Bio password-keystroke dynamic approach to secure mobile devices. " Computational Intelligence and Computing Research (ICCIC), 2010 IEEE International Conference on. IEEE, 2010.
26. Lee, Hyoung-joo, and Sungzoon Cho. "Retraining a keystroke dynamics-based authenticator with impostor patterns. " Computers & Security 26. 4 (2007): 300-310.
27. Bours, Patrick. "Continuous keystroke dynamics: A different perspective towards biometric evaluation. " Information Security Technical Report 17. 1 (2012): 36-43.
28. Janakiraman Rajkumar, and Terence Sim. "Keystroke dynamics in a general setting. " Advances in Biometrics. Springer Berlin Heidelberg, 2007. 584-593.
29. http://nlp. stanford. edu/IR-book/html/htmledition/support-vectormachines-the-linearly-separable-case-1. html.
30. Bordes, Antoine, et al. "Fast kernel classifiers with online and active learning. " The Journal of Machine Learning Research 6 (2005): 1579-1619.
31. Chang, Chih-Chung, and Chih-Jen Lin. "LIBSVM: a library for support vector machines. " ACM Transactions on Intelligent Systems and Technology (TIST) 2. 3 (2011): 27.
32. Collobert, Ronan, and Samy Bengio. "SVMTorch: Support vector machines for large-scale regression problems. " The Journal of Machine Learning Research 1 (2001): 143-160.
33. V. N. Vapnik. Statistical Learning Theory. John Wiley & Sons, 1998.
34. http://www. ratatype. com/learn/average-typing-speed/