Chapter 14

A User Behavior Monitoring and Profiling Scheme for Masquerade Detection

Ashish Garg1, Shambhu Upadhyaya1 and Kevin Kwiat2,    1Department of Computer Science and Engineering, State University of New York at Buffalo, Buffalo, NY 14260,USA, 2Air Force Research Laboratory, 525 Brooks Rd., Rome, NY 13441,USA,


Masquerading attack refers to conducting malicious activities on a computer system by impersonating another user. Such attacks are difficult to detect with standard intrusion detection sensors when they are carried out by insiders who have the knowledge of the system. One approach to detect masquerading attacks is to build user profiles and monitor for significant changes ...

Get Handbook of Statistics now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.