Statistical Science · 2001 · 378 citations · 16 references
ComputingComputer ScienceComputer SecurityComputer IntrusionIntrusion DetectionComputer Intrusion AnalysisComputer Intrusion DetectionIntrusion Detection Evaluation MetricsNetwork Intrusion DetectionStatistical Intrusion Detection
Masqueraders are users who exploit others’ computer accounts. The study evaluates statistical methods for detecting masqueraders. The authors collected UNIX command logs from 50 users, introduced masquerader activity, and conducted a blinded evaluation. Results from six detection methods, including two from computer science, are presented.
Masqueraders in computer intrusion detection are people who use somebody else’s computer account. We investigate a number of statistical approaches for detecting masqueraders. To evaluate them, we collected UNIX command data from 50 users and then contaminated the data with masqueraders. The experiment was blinded. We show results from six methods, including two approaches from the computer science community.
16
Bro: a system for detecting network intruders in real-time
Vern Paxson · Computer Networks · 1999 · 2.4K citations
A Technique for High-Performance Data Compression
A Sense of Self for Unix Processes
1996 · 1.1K citations