|
| This Article | ||
| ||
| Share | ||
| Bibliographic References | ||
| Add to: | ||
| | ||
| Search | ||
| ||
20th Annual Computer Security Applications Conference (ACSAC'04)
RACOON: Rapidly Generating User Command Data For Anomaly Detection From Customizable Templates
Tucson, Arizona
December 06-December 10
ISBN: 0-7695-2252-1
| ASCII Text | x | ||
| Ramkumar Chinchani, Aarthie Muthukrishnan, Madhusudhanan Chandrasekaran, Shambhu Upadhyaya, "RACOON: Rapidly Generating User Command Data For Anomaly Detection From Customizable Templates," Computer Security Applications Conference, Annual, pp. 189-204, 20th Annual Computer Security Applications Conference (ACSAC'04), 2004. | |||
| BibTex | x | ||
| @article{ 10.1109/CSAC.2004.28, author = {Ramkumar Chinchani and Aarthie Muthukrishnan and Madhusudhanan Chandrasekaran and Shambhu Upadhyaya}, title = {RACOON: Rapidly Generating User Command Data For Anomaly Detection From Customizable Templates}, journal ={Computer Security Applications Conference, Annual}, volume = {0}, year = {2004}, issn = {1063-9527}, pages = {189-204}, doi = {http://doi.ieeecomputersociety.org/10.1109/CSAC.2004.28}, publisher = {IEEE Computer Society}, address = {Los Alamitos, CA, USA}, } | |||
| RefWorks Procite/RefMan/Endnote | x | ||
| TY - CONF JO - Computer Security Applications Conference, Annual TI - RACOON: Rapidly Generating User Command Data For Anomaly Detection From Customizable Templates SN - 1063-9527 SP189 EP204 A1 - Ramkumar Chinchani, A1 - Aarthie Muthukrishnan, A1 - Madhusudhanan Chandrasekaran, A1 - Shambhu Upadhyaya, PY - 2004 KW - null VL - 0 JA - Computer Security Applications Conference, Annual ER - | |||
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CSAC.2004.28
One of the biggest obstacles faced by user command based anomaly detection techniques is the paucity of data. Gathering command data is a slow process often spanning months or years. In this paper, we propose an approach for data generation based on customizable templates, where each template represents a particular user profile. These templates can either be user-defined or created from known data sets. We have developed an automated tool called RACOON, which rapidly generates large amounts of user command data from a given template. We demonstrate that our technique can produce realistic data by showing that it passes several statistical similarity tests with real data. Our approach offers significant advantages over passive data collection in terms of being non-intrusive and enabling rapid generation of site-specific data. Finally, we report the benchmark results of some well-known algorithms against an original data set and a generated data set.
Citation:
Ramkumar Chinchani, Aarthie Muthukrishnan, Madhusudhanan Chandrasekaran, Shambhu Upadhyaya, "RACOON: Rapidly Generating User Command Data For Anomaly Detection From Customizable Templates," acsac, pp.189-204, 20th Annual Computer Security Applications Conference (ACSAC'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.
