Application of users' abnormal behavior detection in security auditing system
Wei Jiang, Chen Long, Guoyin Wang · Journal of Computer Applications · 2006
A method for auditing users' abnormal behavior based on data mining technology was proposed.Through preprocessing normal auditing data,some additional normal patterns were found.Then,users' behavior profiles were discovered with association rules and sequence pattern mining methods.Users' behavior could be further audited with these profiles.Simulation results show that this method is valid in real security auditing systems.