The Use of Personal Adaptive Behavior Profile for Detecting Anomalous Activity of Electronic Information System User
2015
Pāvels Osipovs

Defending
01.06.2015. 14:30, Meža ielā 1, 3. korpusā, 202. auditorijā

Supervisor
Arkādijs Borisovs

Reviewers
Valerijs Zagurskis, Mihails Savrasovs, Aleksandrs Koļesņikovs

This research focuses on the problem of anomaly level calculation in the behavior of the user of an electronic information system. This type of problem is important for a variety of electronic systems that provide access to financial, medical, military and similar sensitive data. Such systems are well protected against external threats; however monitoring of internal, already authorized users, is less effective at the moment. To solve the problem, an approach is implemented that allows specifics of interests of the users to be represented as a graph of the Markov chain. Having this self−learning Behavioral Profile of the User (UBP), it is possible to calculate the level of abnormality of each its request to the system. A method for improving the accuracy of calculating the level of anomalous behavior through using a Personal Adaptive UBP (PAUBP) is developed. A method that uses a dynamic threshold for the anomaly level in order to increase the efficiency of classification between the "normal" and "abnormal" behavior is elaborated. A method of estimating the possibility of introducing the approach developed into the information systems having different structures is established. An approach to evaluate the effectiveness of UBP is proposed. A software system that enables making experiments with all the required characteristics of UBP is created. The experimental results show that PAUBP is more effective in solving the considered problem than the general UBP.


Keywords
Markova ķedes, anomāliju atklāšana,informācijas sistēmās

Osipovs, Pāvels. The Use of Personal Adaptive Behavior Profile for Detecting Anomalous Activity of Electronic Information System User. PhD Thesis. Rīga: [RTU], 2015. 144 p.

Publication language
English (en)
The Scientific Library of the Riga Technical University.
E-mail: uzzinas@rtu.lv; Phone: +371 28399196