Matches in SemOpenAlex for { <https://semopenalex.org/work/W2163345053> ?p ?o ?g. }
- W2163345053 endingPage "1077" @default.
- W2163345053 startingPage "1063" @default.
- W2163345053 abstract "A considerable effort has been recently devoted to the development of Database Management Systems (DBMS) which guarantee high assurance and security. An important component of any strong security solution is represented by Intrusion Detection (ID) techniques, able to detect anomalous behavior of applications and users. To date, however, there have been few ID mechanisms proposed which are specifically tailored to function within the DBMS. In this paper, we propose such a mechanism. Our approach is based on mining SQL queries stored in database audit log files. The result of the mining process is used to form profiles that can model normal database access behavior and identify intruders. We consider two different scenarios while addressing the problem. In the first case, we assume that the database has a Role Based Access Control (RBAC) model in place. Under a RBAC system permissions are associated with roles, grouping several users, rather than with single users. Our ID system is able to determine role intruders, that is, individuals while holding a specific role, behave differently than expected. An important advantage of providing an ID technique specifically tailored to RBAC databases is that it can help in protecting against insider threats. Furthermore, the existence of roles makes our approach usable even for databases with large user population. In the second scenario, we assume that there are no roles associated with users of the database. In this case, we look directly at the behavior of the users. We employ clustering algorithms to form concise profiles representing normal user behavior. For detection, we either use these clustered profiles as the roles or employ outlier detection techniques to identify behavior that deviates from the profiles. Our preliminary experimental evaluation on both real and synthetic database traces shows that our methods work well in practical situations." @default.
- W2163345053 created "2016-06-24" @default.
- W2163345053 creator A5000023738 @default.
- W2163345053 creator A5005972547 @default.
- W2163345053 creator A5061694501 @default.
- W2163345053 date "2007-05-17" @default.
- W2163345053 modified "2023-09-27" @default.
- W2163345053 title "Detecting anomalous access patterns in relational databases" @default.
- W2163345053 cites W1497959280 @default.
- W2163345053 cites W1763154064 @default.
- W2163345053 cites W1817561967 @default.
- W2163345053 cites W1980452149 @default.
- W2163345053 cites W2060690494 @default.
- W2163345053 cites W2073583237 @default.
- W2163345053 cites W2078867609 @default.
- W2163345053 cites W2082600559 @default.
- W2163345053 cites W2103378897 @default.
- W2163345053 cites W2104103390 @default.
- W2163345053 cites W2136011367 @default.
- W2163345053 cites W2140506849 @default.
- W2163345053 cites W2140785063 @default.
- W2163345053 cites W2145332315 @default.
- W2163345053 cites W2168683140 @default.
- W2163345053 cites W2176363081 @default.
- W2163345053 cites W3021135929 @default.
- W2163345053 cites W91434149 @default.
- W2163345053 doi "https://doi.org/10.1007/s00778-007-0051-4" @default.
- W2163345053 hasPublicationYear "2007" @default.
- W2163345053 type Work @default.
- W2163345053 sameAs 2163345053 @default.
- W2163345053 citedByCount "175" @default.
- W2163345053 countsByYear W21633450532012 @default.
- W2163345053 countsByYear W21633450532013 @default.
- W2163345053 countsByYear W21633450532014 @default.
- W2163345053 countsByYear W21633450532015 @default.
- W2163345053 countsByYear W21633450532016 @default.
- W2163345053 countsByYear W21633450532017 @default.
- W2163345053 countsByYear W21633450532018 @default.
- W2163345053 countsByYear W21633450532019 @default.
- W2163345053 countsByYear W21633450532020 @default.
- W2163345053 countsByYear W21633450532021 @default.
- W2163345053 countsByYear W21633450532022 @default.
- W2163345053 countsByYear W21633450532023 @default.
- W2163345053 crossrefType "journal-article" @default.
- W2163345053 hasAuthorship W2163345053A5000023738 @default.
- W2163345053 hasAuthorship W2163345053A5005972547 @default.
- W2163345053 hasAuthorship W2163345053A5061694501 @default.
- W2163345053 hasBestOaLocation W21633450532 @default.
- W2163345053 hasConcept C119857082 @default.
- W2163345053 hasConcept C144024400 @default.
- W2163345053 hasConcept C148840519 @default.
- W2163345053 hasConcept C149923435 @default.
- W2163345053 hasConcept C17744445 @default.
- W2163345053 hasConcept C199539241 @default.
- W2163345053 hasConcept C2776633304 @default.
- W2163345053 hasConcept C2778971194 @default.
- W2163345053 hasConcept C2908647359 @default.
- W2163345053 hasConcept C30775581 @default.
- W2163345053 hasConcept C38652104 @default.
- W2163345053 hasConcept C41008148 @default.
- W2163345053 hasConcept C45567728 @default.
- W2163345053 hasConcept C510870499 @default.
- W2163345053 hasConcept C527821871 @default.
- W2163345053 hasConcept C5655090 @default.
- W2163345053 hasConcept C5968703 @default.
- W2163345053 hasConcept C73555534 @default.
- W2163345053 hasConcept C77088390 @default.
- W2163345053 hasConcept C78161392 @default.
- W2163345053 hasConceptScore W2163345053C119857082 @default.
- W2163345053 hasConceptScore W2163345053C144024400 @default.
- W2163345053 hasConceptScore W2163345053C148840519 @default.
- W2163345053 hasConceptScore W2163345053C149923435 @default.
- W2163345053 hasConceptScore W2163345053C17744445 @default.
- W2163345053 hasConceptScore W2163345053C199539241 @default.
- W2163345053 hasConceptScore W2163345053C2776633304 @default.
- W2163345053 hasConceptScore W2163345053C2778971194 @default.
- W2163345053 hasConceptScore W2163345053C2908647359 @default.
- W2163345053 hasConceptScore W2163345053C30775581 @default.
- W2163345053 hasConceptScore W2163345053C38652104 @default.
- W2163345053 hasConceptScore W2163345053C41008148 @default.
- W2163345053 hasConceptScore W2163345053C45567728 @default.
- W2163345053 hasConceptScore W2163345053C510870499 @default.
- W2163345053 hasConceptScore W2163345053C527821871 @default.
- W2163345053 hasConceptScore W2163345053C5655090 @default.
- W2163345053 hasConceptScore W2163345053C5968703 @default.
- W2163345053 hasConceptScore W2163345053C73555534 @default.
- W2163345053 hasConceptScore W2163345053C77088390 @default.
- W2163345053 hasConceptScore W2163345053C78161392 @default.
- W2163345053 hasIssue "5" @default.
- W2163345053 hasLocation W21633450531 @default.
- W2163345053 hasLocation W21633450532 @default.
- W2163345053 hasOpenAccess W2163345053 @default.
- W2163345053 hasPrimaryLocation W21633450531 @default.
- W2163345053 hasRelatedWork W1502610062 @default.
- W2163345053 hasRelatedWork W151398235 @default.
- W2163345053 hasRelatedWork W1537857413 @default.
- W2163345053 hasRelatedWork W1825086818 @default.
- W2163345053 hasRelatedWork W2092246601 @default.