期刊名称：International Journal of Security and Its Applications
印刷版ISSN：1738-9976
出版年度：2016
卷号：10
期号：6
页码：261-268
DOI：10.14257/ijsia.2016.10.6.25
出版社：SERSC
摘要：This paper introduces people-oriented security vulnerability assessment techniques through pattern analysis in order to overcome the limits of the prevalent system-centered and data-centered security vulnerability assessments. This paper suggests algorithms to detect abnormal patterns due to security breach by analyzing physical and logical patterns of people who approach to IT information system. As a result of the analysis, we found that the information system users' access patterns and behaviors belong to certain categories, and by combining these patterns, it is possible to identify abnormal patterns ( ∮ = 1) which lead to security breach accidents. This research will enable a new way of user-oriented security vulnerability assessment.
关键词：Access types; abnormal pattern; history bit; command's impact
