KT metrics are calculated only from papers uploaded or published on KnowledgeTrend and citations matched between those KnowledgeTrend papers. Imported metadata and external citation counts are excluded.
Research interests
Research interests have not yet been added.
Publications
1 research record shown
A model of a real-time intrusion-detection expert system capable of detecting break-ins, penetrations, and other forms of computer abuse is described. The model is based on the hypothesis that security violations can be detected by monitoring a system's audit records for abnormal patterns of system usage. The model includes profiles for representing the behavior of subjects with respect to objects in terms of metrics and statistical models, and rules for acquiring knowledge about this behavior from audit records and for detecting anomalous behavior. The model is independent of any particular system, application environment, system vulnerability, or type of intrusion, thereby providing a framework for a general-purpose intrusion-detection expert system.
Read paper