频繁情节挖掘算法在伪装检测中的应用

Applying frequent episode algorithm in masquerade detection

伪装攻击就是未授权用户通过伪装成合法用户来获得访问关键数据或更高层访问的权限。长久以来,检测伪装攻击在保障系统的网络安全中发挥着巨大的作用。首先讨论了一个用于评价伪装攻击检测算法有效性的方程,而后描述了频繁情节算法在检测伪装攻击中的应用,最后,采用SEA数据集对该算法进行了评估。结果证明频繁情节算法在检测伪装攻击时是行之有效的。

Masquerade attacks are attempts by unauthorized users to gain access to critical data or higher access privileges,while pretending to be legitimate users.Detection of masquerade attacks is playing an important role in system security.This paper,discusses a formula to evaluate the effectiveness of masquerade detection algorithm and also presents an effective approach to masquerade detection by using frequent episode algorithm.It evaluates the method by performing experiments over UNIX command records from the SEA dataset.The result shows that the approach is quite effective in masquerade detection.