Title :
A prototype real-time intrusion-detection expert system
Author :
Lunt, T.F. ; Jagannathan, R.
Author_Institution :
SRI Int., Menlo Park, CA, USA
Abstract :
The design and implementation of a prototype intrusion-detection expert system (IDES) are described. IDES is based on the concept that an intrusion manifests itself as a departure from expected behavior for a user. The prototype monitors users on a remote system, using audit records that characterize their activities. It adaptively learns the normal behavior of each user and detects and reports anomalous user behavior in real time
Keywords :
expert systems; real-time systems; security of data; supervisory programs; anomalous user behavior; audit records; expected behavior; normal behavior; prototype real-time intrusion-detection expert system; remote system; Access control; Computer displays; Computer science; Contracts; Control systems; Expert systems; Laboratories; Prototypes; Real time systems; Security;
Conference_Titel :
Security and Privacy, 1988. Proceedings., 1988 IEEE Symposium on
Conference_Location :
Oakland, CA
Print_ISBN :
0-8186-0850-1
DOI :
10.1109/SECPRI.1988.8098
