Preliminary Results on Masquerader Detection using Compression Based Similarity Metrics

Autores
Bertacchini, Maximiliano; Fierens, Pablo I.
Año de publicación
2007
Idioma
inglés
Tipo de recurso
artículo
Estado
versión publicada
Descripción
This paper extends a series of experiments performed by Schonlau et al. [1] on the detection of computer masqueraders (i.e. illegitimate users trying to impersonate legitimate ones). A compression-based classication algorithm called Normalized Compression Distance or NCD, developed by Vitányi et al. [2] is applied on the same data set. It is shown that the NCD-based approach performs as well as the methods previously tried by Schonlau et al. Future work, possible enhancements and directions of further research on this topic are presented as well.
Sociedad Argentina de Informática e Investigación Operativa
Materia
Ciencias Informáticas
Kolmogorov complexity
command behavior
masquerade detection
normalized compression distance
similarity metrics
Nivel de accesibilidad
acceso abierto
Condiciones de uso
http://creativecommons.org/licenses/by/4.0/
Repositorio
SEDICI (UNLP)
Institución
Universidad Nacional de La Plata
OAI Identificador
oai:sedici.unlp.edu.ar:10915/135730
Acceder
id SEDICI_9b00af30c857908832b41fabd8c11435
oai_identifier_str oai:sedici.unlp.edu.ar:10915/135730
network_acronym_str SEDICI
repository_id_str 1329
network_name_str SEDICI (UNLP)
spelling Preliminary Results on Masquerader Detection using Compression Based Similarity MetricsBertacchini, MaximilianoFierens, Pablo I.Ciencias InformáticasKolmogorov complexitycommand behaviormasquerade detectionnormalized compression distancesimilarity metricsThis paper extends a series of experiments performed by Schonlau et al. [1] on the detection of computer masqueraders (i.e. illegitimate users trying to impersonate legitimate ones). A compression-based classication algorithm called Normalized Compression Distance or NCD, developed by Vitányi et al. [2] is applied on the same data set. It is shown that the NCD-based approach performs as well as the methods previously tried by Schonlau et al. Future work, possible enhancements and directions of further research on this topic are presented as well.Sociedad Argentina de Informática e Investigación Operativa2007-06-26info:eu-repo/semantics/articleinfo:eu-repo/semantics/publishedVersionArticulohttp://purl.org/coar/resource_type/c_6501info:ar-repo/semantics/articuloapplication/pdf31-42http://sedici.unlp.edu.ar/handle/10915/135730enginfo:eu-repo/semantics/altIdentifier/url/https://publicaciones.sadio.org.ar/index.php/EJS/article/view/95info:eu-repo/semantics/altIdentifier/issn/1514-6774info:eu-repo/semantics/openAccesshttp://creativecommons.org/licenses/by/4.0/Creative Commons Attribution 4.0 International (CC BY 4.0)reponame:SEDICI (UNLP)instname:Universidad Nacional de La Platainstacron:UNLP2026-01-07T13:18:06Zoai:sedici.unlp.edu.ar:10915/135730Institucionalhttp://sedici.unlp.edu.ar/Universidad públicaNo correspondehttp://sedici.unlp.edu.ar/oai/snrdalira@sedici.unlp.edu.arArgentinaNo correspondeNo correspondeNo correspondeopendoar:13292026-01-07 13:18:07.171SEDICI (UNLP) - Universidad Nacional de La Platafalse
dc.title.none.fl_str_mv Preliminary Results on Masquerader Detection using Compression Based Similarity Metrics
title Preliminary Results on Masquerader Detection using Compression Based Similarity Metrics
spellingShingle Preliminary Results on Masquerader Detection using Compression Based Similarity Metrics
Bertacchini, Maximiliano
Ciencias Informáticas
Kolmogorov complexity
command behavior
masquerade detection
normalized compression distance
similarity metrics
title_short Preliminary Results on Masquerader Detection using Compression Based Similarity Metrics
title_full Preliminary Results on Masquerader Detection using Compression Based Similarity Metrics
title_fullStr Preliminary Results on Masquerader Detection using Compression Based Similarity Metrics
title_full_unstemmed Preliminary Results on Masquerader Detection using Compression Based Similarity Metrics
title_sort Preliminary Results on Masquerader Detection using Compression Based Similarity Metrics
dc.creator.none.fl_str_mv Bertacchini, Maximiliano
Fierens, Pablo I.
author Bertacchini, Maximiliano
author_facet Bertacchini, Maximiliano
Fierens, Pablo I.
author_role author
author2 Fierens, Pablo I.
author2_role author
dc.subject.none.fl_str_mv Ciencias Informáticas
Kolmogorov complexity
command behavior
masquerade detection
normalized compression distance
similarity metrics
topic Ciencias Informáticas
Kolmogorov complexity
command behavior
masquerade detection
normalized compression distance
similarity metrics
dc.description.none.fl_txt_mv This paper extends a series of experiments performed by Schonlau et al. [1] on the detection of computer masqueraders (i.e. illegitimate users trying to impersonate legitimate ones). A compression-based classication algorithm called Normalized Compression Distance or NCD, developed by Vitányi et al. [2] is applied on the same data set. It is shown that the NCD-based approach performs as well as the methods previously tried by Schonlau et al. Future work, possible enhancements and directions of further research on this topic are presented as well.
Sociedad Argentina de Informática e Investigación Operativa
description This paper extends a series of experiments performed by Schonlau et al. [1] on the detection of computer masqueraders (i.e. illegitimate users trying to impersonate legitimate ones). A compression-based classication algorithm called Normalized Compression Distance or NCD, developed by Vitányi et al. [2] is applied on the same data set. It is shown that the NCD-based approach performs as well as the methods previously tried by Schonlau et al. Future work, possible enhancements and directions of further research on this topic are presented as well.
publishDate 2007
dc.date.none.fl_str_mv 2007-06-26
dc.type.none.fl_str_mv info:eu-repo/semantics/article
info:eu-repo/semantics/publishedVersion
Articulo
http://purl.org/coar/resource_type/c_6501
info:ar-repo/semantics/articulo
format article
status_str publishedVersion
dc.identifier.none.fl_str_mv http://sedici.unlp.edu.ar/handle/10915/135730
url http://sedici.unlp.edu.ar/handle/10915/135730
dc.language.none.fl_str_mv eng
language eng
dc.relation.none.fl_str_mv info:eu-repo/semantics/altIdentifier/url/https://publicaciones.sadio.org.ar/index.php/EJS/article/view/95
info:eu-repo/semantics/altIdentifier/issn/1514-6774
dc.rights.none.fl_str_mv info:eu-repo/semantics/openAccess
http://creativecommons.org/licenses/by/4.0/
Creative Commons Attribution 4.0 International (CC BY 4.0)
eu_rights_str_mv openAccess
rights_invalid_str_mv http://creativecommons.org/licenses/by/4.0/
Creative Commons Attribution 4.0 International (CC BY 4.0)
dc.format.none.fl_str_mv application/pdf
31-42
dc.source.none.fl_str_mv reponame:SEDICI (UNLP)
instname:Universidad Nacional de La Plata
instacron:UNLP
reponame_str SEDICI (UNLP)
collection SEDICI (UNLP)
instname_str Universidad Nacional de La Plata
instacron_str UNLP
institution UNLP
repository.name.fl_str_mv SEDICI (UNLP) - Universidad Nacional de La Plata
repository.mail.fl_str_mv alira@sedici.unlp.edu.ar
_version_ 1853683192489312256
score 13.25844

Publicaciones similares