Eine Plattform für die Wissenschaft: Bauingenieurwesen, Architektur und Urbanistik
Eine Plattform für die Wissenschaft: Bauingenieurwesen, Architektur und Urbanistik
Experimenting with masquerade detection via user task usage
Abstract Detecting whether a given activity in a device, corresponds to a legitimate device user or not, is usually carried out by looking for deviations in behavior against a normal usage baseline. One approach to this problem, called masquerade detection, uses the file system navigation information, comprised of the files, folders, and how the user navigates between them, to construct the normal usage baseline. Atop the file system navigation approach for masquerade detection, there is an alternate representation of file system usage which abstracts away a collection of interrelated files into a single symbol, denoting a task; thus, touching any of these files amounts to simply as executing a task. In this paper, we propose a refined notion of the task abstraction, which allows for a better characterization of the user. The improved abstraction makes possible to obtain a better Masquerade Detection System with increased efficiency, resulting in a faster detection of masqueraders.
Experimenting with masquerade detection via user task usage
Abstract Detecting whether a given activity in a device, corresponds to a legitimate device user or not, is usually carried out by looking for deviations in behavior against a normal usage baseline. One approach to this problem, called masquerade detection, uses the file system navigation information, comprised of the files, folders, and how the user navigates between them, to construct the normal usage baseline. Atop the file system navigation approach for masquerade detection, there is an alternate representation of file system usage which abstracts away a collection of interrelated files into a single symbol, denoting a task; thus, touching any of these files amounts to simply as executing a task. In this paper, we propose a refined notion of the task abstraction, which allows for a better characterization of the user. The improved abstraction makes possible to obtain a better Masquerade Detection System with increased efficiency, resulting in a faster detection of masqueraders.
Experimenting with masquerade detection via user task usage
Rodríguez, Jorge (Autor:in) / Cañete, Leonardo (Autor:in) / Monroy, Raúl (Autor:in) / Medina-Pérez, Miguel Angel (Autor:in)
15.11.2016
14 pages
Aufsatz (Zeitschrift)
Elektronische Ressource
Englisch
British Library Online Contents | 2001
PRODUCTION - EXPERIMENTING WITH HISTORY
Online Contents | 2012
The Royal Danish Masquerade 1803
| British Library Conference Proceedings | 2010
REVIEW - Experimenting with houses
Online Contents | 2001