Imperial College London
Portrait Picture

Professor Nick Heard

Faculty of Natural Sciences, Department of Mathematics

Chair in Statistics
 
 
 
//

Contact

 

+44 (0)20 7594 1490n.heard Website

 
 
//

Location

 

543Huxley BuildingSouth Kensington Campus

//

Summary

 

Publications

Citation

BibTex format

@inproceedings{Price-Williams:2018:10.1109/EISIC.2018.00009,
author = {Price-Williams, M and Turcotte, M and Heard, N},
doi = {10.1109/EISIC.2018.00009},
pages = {1--6},
title = {Time of Day Anomaly Detection},
url = {http://dx.doi.org/10.1109/EISIC.2018.00009},
year = {2018}
}
Download

RIS format (EndNote, RefMan)

TY  - CPAPER
AB  - Anomaly detection systems have been shown to perform well in detecting compromised user credentials within an enterprise computer network. Most existing approaches have focused on modelling activities that users perform within the network but not the time at which users are active. This article presents an approach for identifying compromised user credentials based on modelling their time of day or diurnal patterns. Anomalous behaviour in this respect would correspond to a user working during hours that deviate from their normal historical behaviour. The methodology is demonstrated using authentication data from Los Alamos National Laboratory's enterprise computer network.
AU  - Price-Williams,M
AU  - Turcotte,M
AU  - Heard,N
DO  - 10.1109/EISIC.2018.00009
EP  - 6
PY  - 2018///
SP  - 1
TI  - Time of Day Anomaly Detection
UR  - http://dx.doi.org/10.1109/EISIC.2018.00009
ER  -
Download