作者: Yuval Elovici , Bracha Shapira , Mark Last , Omer Zaafrany , Menahem Friedman
DOI: 10.1007/11427995_20
关键词:
摘要: The Terrorist Detection System (TDS) is aimed at tracking down suspected terrorists by analyzing the content of information they access. TDS operates in two modes: a training mode and detection mode. During provided with Web pages accessed normal group users computes their typical interests. performs real-time monitoring traffic emanating from monitored users, analyzes accessed, issues an alarm if access not within interests group. In this paper we present advanced version (ATDS), where algorithm was enhanced to improve performance basic system. ATDS implemented evaluated network environment 38 comparing it TDS. Behavior simulated accessing terror related sites. evaluation included also sensitivity analysis calibrating settings parameters maximize its performance. Results are encouraging. outperformed significantly able reach very high rates when optimally tuned.