Detecting cyberattacks by profiling "normal" computer habits
An early version of a new software system developed by University at Buffalo researchers that detects cyberattacks while they are in progress by drawing highly personalized profiles of users has proven successful 94 percent of the time in simulated attacks.
The "user-level anomaly detection system" was described Oct. 10, 2002 at the military communications conference known as MILCOM 2002 in Anaheim, CA.
"We have developed a new paradigm, proactively encapsulating user intent where you basically generate a profile for every single user in the system where security is a major concern," said Shambhu Upadhyaya, Ph.D., associate professor of computer science and engineering at UB and co-author of the paper.
[ Read more ]