Neural network approach for user activity monitoring in computer networks

A system is proposed for user activity monitoring in computer networks. The system is based on the use of neural networks and is implemented using agent approach. The monitoring system allows to detect anomalies in user activity, and consists of two components-on-line and off-line. On-line monitoring is carried out in real time and is used to predict the processes started by an user on the basis of previous ones. Off-line monitoring is carried out at the end of the day and is based on the analysis of statistical parameters of user behavior (user signature). Both on-line and off-line monitoring use neural network approach to detect anomalies in user behavior. Proposed system was verified on real data obtained in Intranet of Space Research Institute of NASU-NSAU and Institute of Physics and Technologies of National Technical University of Ukraine "Kiev Polytechnic Institute".