NDLI: Users' Behavior Character Analysis and Classification Approaches in Enterprise Networks

Content Provider	IEEE Xplore Digital Library
Author	Tao Qin Xiaohong Guan Yi Long Wei Li
Copyright Year	2009
Abstract	Users’ character analysis and control are important for enterprise network management and security. In this paper, we propose a novel method to classify the users’ behaviors into different security levels and control their behaviors with corresponding strategies. Firstly, Dflow model and several traffic features, including the number of packets, number of flows, flow durations, etc., are proposed to capture the users’ characters. They are obtained from different layers of the OSI communication model, such as the network layer and transport layer. Secondly, we define scores for users’ behaviors according to their traffic patterns using a flexible method with adjustable weight factors, and different monitoring aims can be achieved by adjusting the weight factors. Based on the behavior score, the users’ behaviors are classified into three security levels: low-dangerous, mid-dangerous and high-dangerous levels. Finally, the mid (high)-dangerous users’ behaviors are controlled by a dynamic quarantine method based on the principle of “assume guilty before proven innocent”. We quarantine a user whenever its behavior is classified into the mid (high)-dangerous levels by blocking its traffic. Then the quarantine is released after a short time, even if the users have not been inspected by security managers yet. In this way, we can remove the potential threats from the monitoring network without interfering the users’ normal activities severely. The experimental results based on actual traffic data show that the methods proposed in this paper are simple, flexible and of high accuracy, which can be used for real-time enterprise network monitoring and management.
Starting Page	323
Ending Page	328
File Size	560565
Page Count	6
File Format	PDF
ISBN	9780769536415
DOI	10.1109/ICIS.2009.104
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-06-01
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Telecommunication traffic Traffic control Communication system traffic control Monitoring Data security Computer networks Information science Information analysis Automation Protocols Security Traffic Flow Behavior Classification
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Traffic flow confidentiality security service in OSI computer network architecture

Network Traffic Flow Analysis

Application-Level Traffic Identification of Network Security Monitoring

Transport Layer Protocols for the Secoqc Quantum Key Distribution (QKD) Network

Research of the Network Information Monitoring System Based on P2DR Model

Traffic growth analysis over three years in enterprise networks

A queueing model for evaluating traffic police infraction registration system

Design and implementation of Enterprise Network information monitoring system

Corporate Networks: Information Security

Users' Behavior Character Analysis and Classification Approaches in Enterprise Networks

Similar Documents

Traffic flow confidentiality security service in OSI computer network architecture

Network Traffic Flow Analysis

Application-Level Traffic Identification of Network Security Monitoring

Transport Layer Protocols for the Secoqc Quantum Key Distribution (QKD) Network

Research of the Network Information Monitoring System Based on P2DR Model

Traffic growth analysis over three years in enterprise networks

A queueing model for evaluating traffic police infraction registration system

Design and implementation of Enterprise Network information monitoring system

Corporate Networks: Information Security

Users' Behavior Character Analysis and Classification Approaches in Enterprise Networks