Combining Baiting and User Search Profiling Techniques for Masquerade Detection

Masquerade attacks are characterized by an adversary stealing a legitimate user's credentials and using them to impersonate the victim and perform malicious activities, such as stealing information. Prior work on masquerade attack detection has focused on profiling legitimate user behavior and detecting abnormal behavior indicative of a masquerade attack. Like any anomaly-detection based techniques, detecting masquerade attacks by profiling user behavior suffers from a significant number of false positives. The authors extend prior work and provide a novel integrated detection approach in this paper.

Provided by: Columbia University Topic: Security Date Added: May 2012 Format: PDF

Find By Topic