메뉴 건너뛰기
소속 기관 / 학교 인증
인증하면 논문, 학술자료 등을  무료로 열람할 수 있어요.
한국대학교, 누리자동차, 시립도서관 등 나의 기관을 확인해보세요
(국내 대학 90% 이상 구독 중)
고객센터 ENG
주제분류

논문 기본 정보

저자정보
(고려대학교) (고려대학교) (고려대학교) (고려대학교) (고려대학교)
저널정보
대한산업공학회 대한산업공학회지 대한산업공학회지 제43권 제4호
오류 신고하기

피인용 5

검색

    초록·키워드

    In this paper, we propose insider threat detection methods based on user behavior modeling and novelty detection algorithms. Although traditional insider treat detection methods focus on the rule-based approaches built by domain knowledge of experts, it turns out that they are neither flexible nor robust. Recently, machine learning-based approaches have been highlighted as an alternative to rule-based approaches because data driven detection system can be more applicable to actual systems. To do so, we first design the user behavior model that transforms log records of user activities, inappropriate for machine learning algorithms, into numerical vectors to encode user behaviors to instances. Then we apply variable selection methods and novelty detection algorithms to efficiently detect the rare insider treats or malicious (suspicious) activities. Experimental results support that the proposed framework can work well for severally imbalanced data sets in which there are only a few insider threats although no domain experts’ knowledge is provided.

    최근 본 자료 전체보기

      UCI(KEPA) : I410-ECN-0101-2018-530-001173473