IEEE Transactions on Network and Service Management · 2024 · 13 citations · 42 references
ComputingComputer ScienceCybersecurityComputer SecurityMachine LearningNetwork SecurityBehavioral AnalysisThreat AnalysisThreat DetectionThreat ModelingAccuracyFalse Positive Rate AnalysisFalse Positive Rate EvaluationFalse Positive Rate ReductionFalse-positive ResultsSliding Window AlgorithmsUser Activity DetectionUser Behavior Modeling
User behavior threat detection is important for the protection of network system security. Traditional supervised modeling methods and unbalanced sample data lead to a high false positive rate in user behavior detection. In addition, network user behaviors are complex, changeable, and difficult to predict, and existing detection methods are facing ever greater challenges. Effectively detecting user behavior remains a challenge. In this paper, we propose a user behavior threat detection method based on an Adaptive Sliding Window Generative Adversarial Network(ASW-GAN). This method designs an adaptive sliding window mechanism to process behavior data and uses the GAN model to detect threat behavior, finally uses the maximum interclass variance algorithm Otsu to optimize test detection result. Compared with other typical methods, the proposed method achieves a higher accuracy rate and a markedly lower false positive rate, and can effectively evaluate user threat behaviors.
42
Computer Intrusion: Detecting Masquerades
William DuMouchel, Wen‐Hua Ju, Alan F. Karr et al. · Statistical Science · 2001 · 378 citations · Full text
Masquerade detection using truncated command lines
Roy A. Maxion, Tahlia Townsend · 2003 · 222 citations