Advertisement
Published in:
2006 | OriginalPaper | Chapter
Learning Symbolic User Models for Intrusion Detection: A Method and Initial Results
Authors : Ryszard S. Michalski, Kenneth A. Kaufman, Jaroslaw Pietrzykowski, Bartłomiej Śnieżyński, Janusz Wojtusiak
Published in: Intelligent Information Processing and Web Mining
Publisher: Springer Berlin Heidelberg
Activate our intelligent search to find suitable subject content or patents.
Select sections of text to find matching patents with Artificial Intelligence. powered by
Select sections of text to find additional relevant content using AI-assisted search. powered by
This paper briefly describes the LUS-MT method for automatically learning user signatures (models of computer users) from datastreams capturing users’ interactions with computers. The signatures are in the form of collections of multistate templates (MTs), each characterizing a pattern in the user’s behavior. By applying the models to new user activities, the system can detect an imposter or verify legitimate user activity. Advantages of the method include the high expressive power of the models (a single template can characterize a large number of different user behaviors) and the ease of their interpretation, which makes possible their editing or enhancement by an expert. Initial results are very promising and show the potential of the method for user modeling.