Detection of Insider Attack in Distributed Systems

7 Pages Posted: 12 Jul 2019 Last revised: 30 Sep 2019

See all articles by Vikar Shaikh

Vikar Shaikh

CoE, Shivajinagar, Pune

Prof. Tanuja R Pattanshetti

CoE, Shivajinagar, Pune

Date Written: May 18, 2019

Abstract

The Insider (masquerade) attack, where an attacker takes on the identity of a authenticate user, such as valid usernames and passwords, to bypass safeguards ensuring confidentiality, integrity, and availability of information resources. Such attacks completely undermine traditional security mechanisms due to the trust imparted to user accounts once they have been authenticated. Attackers using valid credentials are difficult to detect without first generating a profile for the user credentials and then comparing user activity against established patterns. Many attempts have been made at detecting these attacks, yet achieving high levels of accuracy remains an open challenge. In this paper, we discuss the use the alignment algorithm to align sequences of monitored audit data with sequences known to have been produced by the user, the alignment algorithm can discover areas of similarity that indicates the presence or absence of masquerade attacks. This technique is evaluated against the data set comprised of truncated UNIX command sequences to detect masquerades based on the probability of commands.

Keywords: Big Data, Internal Attack Detection, Intrusion Detection, Security

JEL Classification: Y60

Suggested Citation

Shaikh, Vikar and Pattanshetti, Prof. Tanuja R, Detection of Insider Attack in Distributed Systems (May 18, 2019). Proceedings of International Conference on Communication and Information Processing (ICCIP) 2019, Available at SSRN: https://ssrn.com/abstract=3418487 or http://dx.doi.org/10.2139/ssrn.3418487

Vikar Shaikh

CoE, Shivajinagar, Pune ( email )

India

Prof. Tanuja R Pattanshetti (Contact Author)

CoE, Shivajinagar, Pune ( email )

India

Here is the Coronavirus
related research on SSRN

Paper statistics

Downloads
18
Abstract Views
174
PlumX Metrics