Change search
ReferencesLink to record
Permanent link

Direct link
Anomaly detection in user behavior
2009 (English)Independent thesis Advanced level (degree of Master (One Year)), 10 credits / 15 HE creditsStudent thesis
Abstract [en]

An Intrusion Detection System is a technical system that is designed to identify and respond against intrusion attempts towards an IT-system. One of the biggest challenges is the masquerader. A masquerader is an unauthorized user that pretends to be a legitimate user by using the victim’s identity. Attempts have been made to identify the masquerader with different results and accuracies. The aim with this thesis is to study how a different approach to the problem, based on examining sessions as a whole, could affect the accuracy and if it is even possible to detect the masquerader. To our help we have constructed an application that examines sessions and extracts patterns. The patterns are then used to validate the user. The conclusions we could draw from the experiment shows that it is possible to distinguish the masquerader from the legitimate user by using a session based approach.

Place, publisher, year, edition, pages
Keyword [en]
Social Behaviour Law, masquerader, user behavior, session patterns
Keyword [sv]
Samhälls-, beteendevetenskap, juridik
URN: urn:nbn:se:ltu:diva-56538ISRN: LTU-DUPP--09/043--SELocal ID: d4c87c4c-7805-4a98-920b-f07d41ebf83dOAI: diva2:1029925
Subject / course
Student thesis, at least 15 credits
Educational program
Computer and Information Systems Science, master's level
Validerat; 20101217 (root)Available from: 2016-10-04 Created: 2016-10-04Bibliographically approved

Open Access in DiVA

fulltext(2164 kB)8 downloads
File information
File name FULLTEXT01.pdfFile size 2164 kBChecksum SHA-512
Type fulltextMimetype application/pdf

Search outside of DiVA

GoogleGoogle Scholar
Total: 8 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Total: 1 hits
ReferencesLink to record
Permanent link

Direct link