Affiliation:
1. National Research Nuclear University MEPHI. Moscow Engineering Physics Institute
2. ICS RAS
Abstract
This paper presents an analysis of algorithms and approaches used to solve the problem of identifying insider threats using machine learning techniques. Internal threat detection in the context of this research is reduced to the task of detecting anomalies in the audit logs of access subjects' actions. The paper formalizes the main directions of insider threats detection and presents popular machine learning algorithms. The paper raises the problem of objective evaluation of research and development in the subject area. Based on the analysis recommendations for the implementation of internal threat detection systems using machine learning algorithms are developed.
Publisher
Siberian State University of Telecommunications and Informatics
Cited by
1 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献
1. Anomaly detection research using Isolation Forest in Machine Learning;Herald of Dagestan State Technical University. Technical Sciences;2024-04-16