Visual behavior characterization for intrusion and misuse detection

Robert F. Erbacher; Deborah Frincke

doi:10.1117/12.424930

3 May 2001 Visual behavior characterization for intrusion and misuse detection

Robert F. Erbacher, Deborah Frincke

Proceedings Volume 4302, Visual Data Exploration and Analysis VIII; (2001) https://doi.org/10.1117/12.424930
Event: Photonics West 2001 - Electronic Imaging, 2001, San Jose, CA, United States

Abstract

As computer and network intrusions become more and more of a concern, the need for better capabilities, to assist in the detection and analysis of intrusions also increase. System administrators typically rely on log files to analyze usage and detect misuse. However, as a consequence of the amount of data collected by each machine, multiplied by the tens or hundreds of machines under the system administrator's auspices, the entirety of the data available is neither collected nor analyzed. This is compounded by the need to analyze network traffic data as well. We propose a methodology for analyzing network and computer log information visually based on the analysis of the behavior of the users. Each user's behavior is the key to determining their intent and overriding activity, whether they attempt to hide their actions or not. Proficient hackers will attempt to hide their ultimate activities, which hinders the reliability of log file analysis. Visually analyzing the users''s behavior however, is much more adaptable and difficult to counteract.

Citation Download Citation

Robert F. Erbacher and Deborah Frincke "Visual behavior characterization for intrusion and misuse detection", Proc. SPIE 4302, Visual Data Exploration and Analysis VIII, (3 May 2001); https://doi.org/10.1117/12.424930

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available