Profiler-2000: Attacking the Insider Threat

摘要: Abstract : The Profiler project was concerned with fundamental theoretical and measurement issues in the field of anomaly/intrusion detection, particularly as directed at problem insiders. Major addressed were: scientifically sound foundations for divers anomaly detectors; tools methods assessment detector effectiveness; controlled benchmark data sets testing. accomplishments determining how interaction between architectural aspects a detection algorithm, such mechanism coverage, can result unanticipated vulnerabilities that allow an adversary to undermine detector; production calibrated test sets; rigorous error analysis insider-threat environment.