{"id":"https://openalex.org/W2079818165","doi":"https://doi.org/10.1145/1229285.1229340","title":"Masquerade detection based on SVM and sequence-based user commands profile","display_name":"Masquerade detection based on SVM and sequence-based user commands profile","publication_year":2007,"publication_date":"2007-03-20","ids":{"openalex":"https://openalex.org/W2079818165","doi":"https://doi.org/10.1145/1229285.1229340","mag":"2079818165"},"language":"en","primary_location":{"id":"doi:10.1145/1229285.1229340","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1229285.1229340","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd ACM symposium on Information, computer and communications security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020345625","display_name":"Jeongseok Seo","orcid":"https://orcid.org/0000-0003-0584-0394"},"institutions":[{"id":"https://openalex.org/I2801339556","display_name":"Government of the Republic of Korea","ror":"https://ror.org/019xm3p48","country_code":"KR","type":"government","lineage":["https://openalex.org/I2801339556"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jeongseok Seo","raw_affiliation_strings":["Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Republic of Korea","institution_ids":["https://openalex.org/I2801339556"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022851404","display_name":"Sungdeok Cha","orcid":"https://orcid.org/0000-0002-8401-317X"},"institutions":[{"id":"https://openalex.org/I2801339556","display_name":"Government of the Republic of Korea","ror":"https://ror.org/019xm3p48","country_code":"KR","type":"government","lineage":["https://openalex.org/I2801339556"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sungdeok Cha","raw_affiliation_strings":["Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Republic of Korea","institution_ids":["https://openalex.org/I2801339556"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2801339556"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"398","last_page":"400"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.8326163291931152},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.775422990322113},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.733608067035675},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.7064236402511597},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5986625552177429},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.5703437328338623},{"id":"https://openalex.org/keywords/complement","display_name":"Complement (music)","score":0.5541841983795166},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4704631268978119},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.463326632976532},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4444524645805359},{"id":"https://openalex.org/keywords/radial-basis-function-kernel","display_name":"Radial basis function kernel","score":0.43279343843460083},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.4245151877403259},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.36994463205337524},{"id":"https://openalex.org/keywords/kernel-method","display_name":"Kernel method","score":0.3059313893318176},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09742134809494019},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.0648140013217926}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.8326163291931152},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.775422990322113},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.733608067035675},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.7064236402511597},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5986625552177429},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.5703437328338623},{"id":"https://openalex.org/C112313634","wikidata":"https://www.wikidata.org/wiki/Q7886648","display_name":"Complement (music)","level":5,"score":0.5541841983795166},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4704631268978119},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.463326632976532},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4444524645805359},{"id":"https://openalex.org/C75866337","wikidata":"https://www.wikidata.org/wiki/Q7280263","display_name":"Radial basis function kernel","level":4,"score":0.43279343843460083},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.4245151877403259},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36994463205337524},{"id":"https://openalex.org/C122280245","wikidata":"https://www.wikidata.org/wiki/Q620622","display_name":"Kernel method","level":3,"score":0.3059313893318176},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09742134809494019},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0648140013217926},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0},{"id":"https://openalex.org/C188082640","wikidata":"https://www.wikidata.org/wiki/Q1780899","display_name":"Complementation","level":4,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C127716648","wikidata":"https://www.wikidata.org/wiki/Q104053","display_name":"Phenotype","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1229285.1229340","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1229285.1229340","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd ACM symposium on Information, computer and communications security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W6091113","https://openalex.org/W16836940","https://openalex.org/W1480643256","https://openalex.org/W1525451939","https://openalex.org/W1563088657","https://openalex.org/W1601740268","https://openalex.org/W1760565668","https://openalex.org/W1804908000","https://openalex.org/W1973704753","https://openalex.org/W2139212933","https://openalex.org/W2142638723","https://openalex.org/W2143989995","https://openalex.org/W2160992701","https://openalex.org/W2166017159","https://openalex.org/W3193477162","https://openalex.org/W4285719527","https://openalex.org/W6637902766"],"related_works":["https://openalex.org/W11100131","https://openalex.org/W1969635302","https://openalex.org/W2183313954","https://openalex.org/W1805274772","https://openalex.org/W127070535","https://openalex.org/W3152476155","https://openalex.org/W2376046849","https://openalex.org/W3146948916","https://openalex.org/W1973375107","https://openalex.org/W2140869420"],"abstract_inverted_index":{"Masqueraders,":[0],"despite":[1],"widespread":[2],"use":[3],"of":[4,50,64,84,91,98],"security":[5,33],"products":[6],"such":[7],"as":[8,26],"firewalls":[9],"and":[10,46,66],"intrusion":[11],"detection":[12,21],"systems,":[13],"are":[14,36],"serious":[15],"threats":[16],"to":[17,30,43],"organizations.":[18],"Although":[19],"anomaly":[20],"techniques":[22],"have":[23],"been":[24],"considered":[25],"an":[27,58],"effective":[28],"approach":[29],"complement":[31],"existing":[32],"solutions,":[34],"they":[35],"not":[37],"widely":[38],"used":[39],"in":[40],"practice":[41],"due":[42],"poor":[44],"accuracy":[45],"relatively":[47],"high":[48],"degree":[49],"false":[51,85,99],"alarms.":[52,86],"In":[53,87],"this":[54],"paper,":[55],"we":[56],"performed":[57],"empirical":[59],"study":[60],"investigating":[61],"the":[62,89],"effectiveness":[63],"SVM":[65],"sequence-based":[67],"kernel":[68,71,80,93],"methods.":[69],"Sequence-based":[70],"methods":[72,94],"showed":[73,95],"slightly":[74],"better":[75],"performance":[76],"than":[77],"generic":[78],"RBF":[79],"with":[81],"same":[82],"frequency":[83,97],"addition,":[88],"composition":[90],"two":[92],"that":[96],"alarms":[100],"could":[101],"be":[102],"further":[103],"reduced.":[104]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}