Benchmarking insider threat intrusion detection systems

摘要: Benchmarking Insider Threat Intrusion Detection Systems by Binbin Ye Abstract: An intrusion detection system generally detects unwanted manipulations to computer systems. In recent years, this technology has been used protect personal information after it collected an organization. Selecting appropriate IDS is important decision for security administrators, keep authorized employees from abusing their access the exploit sensitive information. To date, little work done create a benchmark small and mid-size organizations measure compare capability of different insider threat IDSs which are based on user profiling. It motivates us enables these IDSs. The produce useful comparisons accuracy overhead two key research implementations future algorithms, behavior.