Workshop on Statistical and Machine
Learning Techniques in Computer
Intrusion Detection
User Profiling With Window Titles
Kristen Devault and Nicholas Tucey
Abstract:
We will discuss the use of window titles and window event
data in detecting masqueraders on Windows NT machines. A login session
is considered to have been created by a masquerader if it has properties
that do not match the
profile for the user currently logged in. Our focus will be on visualization
of the data, the extraction of noteworthy features, and classifier performance
based on these features.