Hidden Markov model for masquerade detection based on sequence alignment

• Main Authors: Wei, Qiu, Khong, Andy Wai Hoong, Tay, Wee Peng
• Other Authors: School of Electrical and Electronic Engineering
• Format: Conference or Workshop Item
• Language: English
• Published: 2023
• Subjects: Engineering::Computer science and engineering::Computing methodologies::Artificial intelligence; Masquerade Detection; Sequence Alignment; Hidden Markov Models
• Online Access: https://hdl.handle.net/10356/165579
• Institution: Nanyang Technological University

A masquerade attack, in which an attacker impersonates a legitimate user to utilize the user's privileges, can be triggered either by someone within the organization or by an outsider. We propose the sequence alignment based hidden Markov model (SA-HMM) approach, where we incorporate the benefits of both the sequence alignment and continuous hidden Markov model (HMM). The sequence alignment module for the proposed algorithm allows the algorithm to tolerate variations in user activity sequence. The HMM module takes the positional information between the observations of users into account. The proposed approach achieves a high hit ratio of 94.1% outperforming existing masquerade detection approaches.