CSpace  > 中国科学院计算技术研究所期刊论文  > 英文
HMMs based masquerade detection for network security on with parallel computing
Liu, Jia1,2; Duan, Miyi1; Li, Wenfa3; Tian, Xinguang4
2020-04-15
发表期刊COMPUTER COMMUNICATIONS
ISSN0140-3664
卷号156页码:168-173
摘要Masquerade detection is currently an active research topic in the field of network security. This paper presents a novel method for detecting masquerade attacks based on hidden Markov models (HMMs), which applies to host-based intrusion detection systems using Unix or Linux shell commands as audit data. The method employs multiple command sequences of different lengths to represent the behavioral patterns of a legitimate user and constructs a specific HMM to characterize the normal behavior profile of the user. Moreover, the adaptability and precision of user profiling are definitely taken into account. During training, the parameters of the HMM are calculated by parallel computing that is less computationally expensive than the classic Baum-Welch algorithm. At the detection stage, the occurrence probabilities of short state sequences are first computed to analyze behavior deviations that may indicate masquerade attacks, and two alternative decision schemes can be used to classify the monitored user's behavior as normal or anomalous. The method addresses both detection accuracy and computational efficiency and is especially suitable for online detection. Our study empirically demonstrates the promising performance of the method.
关键词Masquerade detection Shell command Anomaly detection Hidden Markov model
DOI10.1016/j.comcom.2020.03.048
收录类别SCI
语种英语
资助项目National Natural Science Foundation of China[61841601] ; Science and Technology Projects of Beijing Municipal Education Commission, China[KM201911417011] ; Premium Funding Project for Academic Human Resources Development in Beijing Union University, China[BPHR2018EZ01]
WOS研究方向Computer Science ; Engineering ; Telecommunications
WOS类目Computer Science, Information Systems ; Engineering, Electrical & Electronic ; Telecommunications
WOS记录号WOS:000528265900016
出版者ELSEVIER
引用统计
被引频次:5[WOS]   [WOS记录]     [WOS相关记录]
文献类型期刊论文
条目标识符http://119.78.100.204/handle/2XEOYT63/15432
专题中国科学院计算技术研究所期刊论文_英文
通讯作者Duan, Miyi; Li, Wenfa
作者单位1.Beihang Univ, Sch Comp Sci & Engn, Beijing Key Lab Digital Media, Beijing, Peoples R China
2.Beijing Union Univ, Smart City Coll, Beijing, Peoples R China
3.Beijing Union Univ, Coll Robot, Beijing, Peoples R China
4.Chinese Acad Sci, Inst Comp Technol, Beijing, Peoples R China
推荐引用方式
GB/T 7714
Liu, Jia,Duan, Miyi,Li, Wenfa,et al. HMMs based masquerade detection for network security on with parallel computing[J]. COMPUTER COMMUNICATIONS,2020,156:168-173.
APA Liu, Jia,Duan, Miyi,Li, Wenfa,&Tian, Xinguang.(2020).HMMs based masquerade detection for network security on with parallel computing.COMPUTER COMMUNICATIONS,156,168-173.
MLA Liu, Jia,et al."HMMs based masquerade detection for network security on with parallel computing".COMPUTER COMMUNICATIONS 156(2020):168-173.
条目包含的文件
条目无相关文件。
个性服务
推荐该条目
保存到收藏夹
查看访问统计
导出为Endnote文件
谷歌学术
谷歌学术中相似的文章
[Liu, Jia]的文章
[Duan, Miyi]的文章
[Li, Wenfa]的文章
百度学术
百度学术中相似的文章
[Liu, Jia]的文章
[Duan, Miyi]的文章
[Li, Wenfa]的文章
必应学术
必应学术中相似的文章
[Liu, Jia]的文章
[Duan, Miyi]的文章
[Li, Wenfa]的文章
相关权益政策
暂无数据
收藏/分享
所有评论 (0)
暂无评论
 

除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。