An improved feature extraction algorithm for insider threat using hidden Markov model on user behavior detection
- Authors
- Ye, Xiaoyun; Han, Myung-Mook
- Issue Date
- Jan-2022
- Publisher
- Emerald Group Holdings Ltd.
- Keywords
- Anomaly detection; Hidden Markov model; Insider threat detection; Viterbi algorithm
- Citation
- Information and Computer Security, v.30, no.1, pp.19 - 36
- Journal Title
- Information and Computer Security
- Volume
- 30
- Number
- 1
- Start Page
- 19
- End Page
- 36
- URI
- https://scholarworks.bwise.kr/gachon/handle/2020.sw.gachon/83465
- DOI
- 10.1108/ICS-12-2019-0142
- ISSN
- 2056-4961
- Abstract
- Purpose: By using a new feature extraction method on the Cert data set and using a hidden Markov model (HMM) to model and analyze the behavior of users to distinguish whether the behavior is normal within a continuous period. Design/methodology/approach: Feature extraction of five parts of the time series by rules and sorting in chronological order. Use the obtained features to calculate the probability parameters required by the HMM model and establish a behavior model for each user. When the user has abnormal behavior, the model will return a very low probability value to distinguish between normal and abnormal information. Findings: Generally, HMM parameters are obtained by supervised learning and unsupervised learning, but the hidden state cannot be clearly defined. When the hidden state is determined according to the data set, the accuracy of the model will be improved. Originality/value: This paper proposes a new feature extraction method and analysis mode, which determines the shape of the hidden state according to the situation of the data set, making subsequent HMM modeling simple and efficient and in turn improving the accuracy of user behavior detection. © 2020, Emerald Publishing Limited.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - IT융합대학 > 소프트웨어학과 > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/gachon/handle/2020.sw.gachon/83465)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.