DOE OSTI · 1459424
Detecting anomalous behavior via user authentication graphs
Abstract
Significant and aggregate user authentication activity may be analyzed across a population of users and computers in one or more networks to differentiate between authorized users and intruders in a network, and/or to detect inappropriate behavior by otherwise authorized users. Dynamic graphs and graph models over user and computer authentication activity, including time-constrained models, may be used for the purposes of profiling and analyzing user behavior in computer networks. More specifically, an edge-based breadth first search of graphs may be used that enforces time-constraints while maintaining traditional breadth first search computational complexity equivalence.
Explore related subjects
Keep this discovery
Explore connections, maps & timelines
Kent, Alexander, Neil, Joshua, Liebrock, Lorie. 2018-07-03. Detecting anomalous behavior via user authentication graphs. https://www.osti.gov/biblio/1459424
Cite the original work for its findings. Save a collection to share your selection of sources.