• DocumentCode
    3374172
  • Title

    A prototype real-time intrusion-detection expert system

  • Author

    Lunt, T.F. ; Jagannathan, R.

  • Author_Institution
    SRI Int., Menlo Park, CA, USA
  • fYear
    1988
  • fDate
    18-21 Apr 1988
  • Firstpage
    59
  • Lastpage
    66
  • Abstract
    The design and implementation of a prototype intrusion-detection expert system (IDES) are described. IDES is based on the concept that an intrusion manifests itself as a departure from expected behavior for a user. The prototype monitors users on a remote system, using audit records that characterize their activities. It adaptively learns the normal behavior of each user and detects and reports anomalous user behavior in real time
  • Keywords
    expert systems; real-time systems; security of data; supervisory programs; anomalous user behavior; audit records; expected behavior; normal behavior; prototype real-time intrusion-detection expert system; remote system; Access control; Computer displays; Computer science; Contracts; Control systems; Expert systems; Laboratories; Prototypes; Real time systems; Security;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Security and Privacy, 1988. Proceedings., 1988 IEEE Symposium on
  • Conference_Location
    Oakland, CA
  • Print_ISBN
    0-8186-0850-1
  • Type

    conf

  • DOI
    10.1109/SECPRI.1988.8098
  • Filename
    8098