DDSGA: A Data-Driven Semi-Global Alignment Approach for Detecting Masquerade Attacks

DDSGA: A Data-Driven Semi-Global Alignment Approach for Detecting Masquerade Attacks

Abstract— DDSGA: A Data-Driven Semi-Global Alignment Approach for Detecting Masquerade Attacks. A masquerade attacker impersonates a legal user to utilize the user services and privileges. The semi-global alignment algorithm < Final Year Projects 2016 > is one of the most effective and efficient techniques to detect these attacks but it has not reached yet the accuracy and performance required by large scale, multiuser systems. To improve both the effectiveness and the performances of this algorithm, we propose the Data-Driven Semi-Global Alignment, DDSGA approach. From the security effectiveness view point, DDSGA improves the scoring systems by adopting distinct alignment parameters for each user. Furthermore, it tolerates small mutations in user command sequences by allowing small changes in the low-level representation of the commands functionality. It also adapts to changes in the user behaviour by updating the signature of a user according to its current behaviour.