Masquerade Detection Using Support Vector Machine  

作　　者：YANG Min WANG Li-na ZHANG Huan-guo CHEN Wei 

机构地区：[1]School of Computer,Wuhan University,Wuhan 430072,Hubei,China

出　　处：《Wuhan University Journal of Natural Sciences》2005年第1期103-106,共4页武汉大学学报（自然科学英文版）

基　　金：Supported by the National Natural Science Foundation of China(90104005,66973034,60473023).

摘　　要：A new method using support vector data description (SVDD) to distinguishlegitimate users from mas-queradcrs based on UNIX user command sequences is proposed Sliding windowsare used to get low detection delay. Experiments demonstrate that the detection effect usingenriched sequences is better than that of using truncated sequences. As a SVDD profile is composedof a small amount of support vectors, our SVDD-based method can achieve computation and storageadvantage when the detection performance issimilar to existing method.A new method using support vector data description (SVDD) to distinguishlegitimate users from mas-queradcrs based on UNIX user command sequences is proposed Sliding windowsare used to get low detection delay. Experiments demonstrate that the detection effect usingenriched sequences is better than that of using truncated sequences. As a SVDD profile is composedof a small amount of support vectors, our SVDD-based method can achieve computation and storageadvantage when the detection performance issimilar to existing method.

关 键 词：computer security intrusion detection masquerade detection user profiling support vector machine 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]