FRINK Linked Data Fragments server

Matches in SemOpenAlex for { <https://semopenalex.org/work/W63951635> ?p ?o ?g. }

• W63951635 abstract "Two problems of importance in computer security are to 1) detect the presence of an intruder masquerading as the valid user and 2) detect the perpetration of abusive actions on the part of an otherwise innocuous user. We have developed an approach to these problems that examines sequences of user actions (UNIX commands) to classify behavior as normal or anomalous. In this paper we explore the matching function needed to compare a current behavioral sequence to a historical profile. We discuss the difficulties of performing matching in human-generated data and show that exact string matching is insufficient to this domain. We demonstrate a number of partial matching functions and examine their behavior on user command data. In particular, we explore two methods for weighting scores by adjacency of matches as well as two growth functions (polynomial and exponential) for scoring similarities. We find, empirically, that the optimal similarity measure is user dependant but that measures based on the assumption of causal linkage between user commands are superior for this domain." @default.
• W63951635 created "2016-06-24" @default.
• W63951635 creator A5020376623 @default.
• W63951635 creator A5045379675 @default.
• W63951635 date "1997-01-01" @default.
• W63951635 modified "2023-10-10" @default.
• W63951635 title "Sequence Matching and Learning in Anomaly Detection for Computer Security" @default.
• W63951635 cites W1479909838 @default.
• W63951635 cites W1483817343 @default.
• W63951635 cites W1572555258 @default.
• W63951635 cites W1596033161 @default.
• W63951635 cites W1641039719 @default.
• W63951635 cites W2010452235 @default.
• W63951635 cites W2105557138 @default.
• W63951635 cites W2117002131 @default.
• W63951635 cites W2118552280 @default.
• W63951635 cites W2125838338 @default.
• W63951635 cites W2128217000 @default.
• W63951635 cites W2138637314 @default.
• W63951635 cites W2150847526 @default.
• W63951635 cites W2151505086 @default.
• W63951635 cites W2153937392 @default.
• W63951635 cites W2338717024 @default.
• W63951635 cites W3214373139 @default.
• W63951635 hasPublicationYear "1997" @default.
• W63951635 type Work @default.
• W63951635 sameAs 63951635 @default.
• W63951635 citedByCount "81" @default.
• W63951635 countsByYear W639516352012 @default.
• W63951635 countsByYear W639516352013 @default.
• W63951635 countsByYear W639516352014 @default.
• W63951635 countsByYear W639516352015 @default.
• W63951635 countsByYear W639516352016 @default.
• W63951635 countsByYear W639516352017 @default.
• W63951635 countsByYear W639516352018 @default.
• W63951635 countsByYear W639516352019 @default.
• W63951635 countsByYear W639516352020 @default.
• W63951635 crossrefType "journal-article" @default.
• W63951635 hasAuthorship W63951635A5020376623 @default.
• W63951635 hasAuthorship W63951635A5045379675 @default.
• W63951635 hasConcept C103278499 @default.
• W63951635 hasConcept C105795698 @default.
• W63951635 hasConcept C115961682 @default.
• W63951635 hasConcept C123853557 @default.
• W63951635 hasConcept C124101348 @default.
• W63951635 hasConcept C126838900 @default.
• W63951635 hasConcept C134306372 @default.
• W63951635 hasConcept C154945302 @default.
• W63951635 hasConcept C165064840 @default.
• W63951635 hasConcept C183115368 @default.
• W63951635 hasConcept C22820288 @default.
• W63951635 hasConcept C2778112365 @default.
• W63951635 hasConcept C33923547 @default.
• W63951635 hasConcept C35525427 @default.
• W63951635 hasConcept C36503486 @default.
• W63951635 hasConcept C41008148 @default.
• W63951635 hasConcept C54355233 @default.
• W63951635 hasConcept C68859911 @default.
• W63951635 hasConcept C71924100 @default.
• W63951635 hasConcept C7757238 @default.
• W63951635 hasConcept C86803240 @default.
• W63951635 hasConceptScore W63951635C103278499 @default.
• W63951635 hasConceptScore W63951635C105795698 @default.
• W63951635 hasConceptScore W63951635C115961682 @default.
• W63951635 hasConceptScore W63951635C123853557 @default.
• W63951635 hasConceptScore W63951635C124101348 @default.
• W63951635 hasConceptScore W63951635C126838900 @default.
• W63951635 hasConceptScore W63951635C134306372 @default.
• W63951635 hasConceptScore W63951635C154945302 @default.
• W63951635 hasConceptScore W63951635C165064840 @default.
• W63951635 hasConceptScore W63951635C183115368 @default.
• W63951635 hasConceptScore W63951635C22820288 @default.
• W63951635 hasConceptScore W63951635C2778112365 @default.
• W63951635 hasConceptScore W63951635C33923547 @default.
• W63951635 hasConceptScore W63951635C35525427 @default.
• W63951635 hasConceptScore W63951635C36503486 @default.
• W63951635 hasConceptScore W63951635C41008148 @default.
• W63951635 hasConceptScore W63951635C54355233 @default.
• W63951635 hasConceptScore W63951635C68859911 @default.
• W63951635 hasConceptScore W63951635C71924100 @default.
• W63951635 hasConceptScore W63951635C7757238 @default.
• W63951635 hasConceptScore W63951635C86803240 @default.
• W63951635 hasLocation W639516351 @default.
• W63951635 hasOpenAccess W63951635 @default.
• W63951635 hasPrimaryLocation W639516351 @default.
• W63951635 hasRelatedWork W14760367 @default.
• W63951635 hasRelatedWork W1583975142 @default.
• W63951635 hasRelatedWork W1587265799 @default.
• W63951635 hasRelatedWork W1592090113 @default.
• W63951635 hasRelatedWork W1760565668 @default.
• W63951635 hasRelatedWork W181041240 @default.
• W63951635 hasRelatedWork W1884606608 @default.
• W63951635 hasRelatedWork W1941427975 @default.
• W63951635 hasRelatedWork W1973704753 @default.
• W63951635 hasRelatedWork W2082600559 @default.
• W63951635 hasRelatedWork W2107409339 @default.
• W63951635 hasRelatedWork W2128217000 @default.
• W63951635 hasRelatedWork W2129860818 @default.
• W63951635 hasRelatedWork W2132870739 @default.
• W63951635 hasRelatedWork W2141992351 @default.

• next