Detection of anomalous computer session activity

@inproceedings{citeulike:422226, abstract = {The authors discusses Wisdom and Sense (W\&S), a computer security anomaly detection system. W\&S is statistically based. It automatically generates rules from historical data and, in terms of those rules, identifies computer transactions that are at variance with historically established usage patterns. Issues addressed include how W\&S generates rules from a necessarily small sample of all possible transactions, how W\&S deals with inherently categorical data, and how W\&S assists system security officers in their review of audit logs. Preliminary results with W\&S show that the software does periodically detect anomalies of high interest even in data though to be free of such events}, author = {Vaccaro, H. S. and Liepins, G. E. }, citeulike-article-id = {422226}, journal = {Security and Privacy, 1989. Proceedings., 1989 IEEE Symposium on}, pages = {280--289}, posted-at = {2005-12-05 16:07:10}, priority = {2}, title = {Detection of anomalous computer session activity}, url = {http://ieeexplore.ieee.org/xpls/abs\_all.jsp?arnumber=36302}, year = {1989} }

TY - CONF ID - citeulike:422226 L3 - citeulike-article-id:422226 TI - Detection of anomalous computer session activity JF - Security and Privacy, 1989. Proceedings., 1989 IEEE Symposium on SP - 280 EP - 289 N2 - The authors discusses Wisdom and Sense (W&S), a computer security anomaly detection system. W&S is statistically based. It automatically generates rules from historical data and, in terms of those rules, identifies computer transactions that are at variance with historically established usage patterns. Issues addressed include how W&S generates rules from a necessarily small sample of all possible transactions, how W&S deals with inherently categorical data, and how W&S assists system security officers in their review of audit logs. Preliminary results with W&S show that the software does periodically detect anomalies of high interest even in data though to be free of such events AU - Vaccaro, HS AU - Liepins, GE PY - 1989/// UR - http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=36302 ER -