Title: Comparative evaluation of different classification techniques for masquerade attack detection

Authors: Wisam Elmasry; Akhan Akbulut; Abdul Halim Zaim

Addresses: Department of Computer Engineering, Istanbul Commerce University, Istanbul 34840, Turkey ' Department of Computer Engineering, Istanbul Kultur University, Istanbul 34158, Turkey ' Department of Computer Engineering, Istanbul Commerce University, Istanbul 34840, Turkey

Abstract: Masquerade detection is a special type of intrusion detection problem. Effective and early intrusion detection is a crucial basis for computer security. Although of considerable work has been focused on masquerade detection for more than a decade, achieving a high level of accuracy and a comparatively low degree of false alarm rate is still a big challenge. In this paper, we present an extensive empirical study in the area of user behaviour profiling-based masquerade detection using six of different existed machine learning methods in Azure Machine Learning (AML) studio. In order to surpass previous studies on this subject, we used four free and publicly available datasets with seven data configurations are implemented from them. Moreover, eight well-known masquerade detection evaluation metrics are used to assess methods performance against each data configuration. Finally, intensive quantitative and ROC curves analyses of results are provided at the end of this paper.

Keywords: masquerade detection; anomaly-based detection; machine learning; intrusion detection; computer security.

DOI: 10.1504/IJICS.2020.108848

International Journal of Information and Computer Security, 2020 Vol.13 No.2, pp.187 - 209

Received: 06 Oct 2017
Accepted: 02 Oct 2018
Published online: 05 Aug 2020 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article