loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
19th Annual Computer Security Applications Conference (ACSAC '03)
Intrusion Detection: A Bioinformatics Approach
Las Vegas, Nevada
December 08-December 12
ISBN: 0-7692-2041-3
Scott Coull, Rensselaer Polytechnic Institute
Joel Branch, Rensselaer Polytechnic Institute
Boleslaw Szymanski, Rensselaer Polytechnic Institute
Eric Breimer, Siena College
This paper addresses the problem of detecting masquerading, a security attack in which an intruder assumes the identity of a legitimate user. Many approaches based on Hidden Markov Models and various forms of Finite State Automata have been proposed to solve this problem. The novelty of our approach results from the application of techniques used in bioinformatics for a pair-wise sequence alignment to compare the monitored session with past user behavior. Our algorithm uses a semi-global alignment and a unique scoring system to measure similarity between a sequence of commands produced by a potential intruder and the user signature, which is a sequence of commands collected from a legitimate user. We tested this algorithm on the standard intrusion data collection set. As discussed in the paper, the results of the test showed that the described algorithm yields a promising combination of intrusion detection rate and false positive rate, when compared to published intrusion detection algorithms.
Index Terms:
Intrusion detection, sequence alignment, bioinformatics, masquerade detection, pattern matching
Citation:
Scott Coull, Joel Branch, Boleslaw Szymanski, Eric Breimer, "Intrusion Detection: A Bioinformatics Approach," acsac, pp.24, 19th Annual Computer Security Applications Conference (ACSAC '03), 2003
Usage of this product signifies your acceptance of the Terms of Use.