Open Access
Translator Disclaimer
February 2001 Computer Intrusion: Detecting Masquerades
William DuMouchel, Wen-Hua Ju, Alan F. Karr, Matthias Schonlau, Martin Theusan, Yehuda Vardi
Statist. Sci. 16(1): 58-74 (February 2001). DOI: 10.1214/ss/998929476


Masqueraders in computer intrusion detection are people who use somebody else’s computer account. We investigate a number of statistical approaches for detecting masqueraders. To evaluate them, we collected UNIX command data from 50 users and then contaminated the data with masqueraders. The experiment was blinded. We show results from six methods, including two approaches from the computer science community.


Download Citation

William DuMouchel. Wen-Hua Ju. Alan F. Karr. Matthias Schonlau. Martin Theusan. Yehuda Vardi. "Computer Intrusion: Detecting Masquerades." Statist. Sci. 16 (1) 58 - 74, February 2001.


Published: February 2001
First available in Project Euclid: 27 August 2001

zbMATH: 1059.62758
MathSciNet: MR1855740
Digital Object Identifier: 10.1214/ss/998929476

Keywords: anomaly , Bayes , compression , computer security , high­order Markov , profiling , Unix

Rights: Copyright © 2001 Institute of Mathematical Statistics


Vol.16 • No. 1 • February 2001
Back to Top