Handbook of Statistics

Chapter 14

A User Behavior Monitoring and Profiling Scheme for Masquerade Detection

Ashish Garg¹, Shambhu Upadhyaya¹ and Kevin Kwiat²,    ¹Department of Computer Science and Engineering, State University of New York at Buffalo, Buffalo, NY 14260,USA, ²Air Force Research Laboratory, 525 Brooks Rd., Rome, NY 13441,USA, ^{[e-mail][e-mail][e-mail]}

Abstract

Masquerading attack refers to conducting malicious activities on a computer system by impersonating another user. Such attacks are difficult to detect with standard intrusion detection sensors when they are carried out by insiders who have the knowledge of the system. One approach to detect masquerading attacks is to build user profiles and monitor for significant changes ...