Behavior Profiling of Email.PPT

Behavior Profiling of Email Columbia University Department of Computer Science IDS lab: /ids Data Mining Machine Learning in Security Behavior-based Anomaly Detection (Banks figured this out years ago. What is a fraud?) JAM project, 1996- Discover “attacks/bad behavior” via abnormal behavior Compare real-time or archived activity against models of normal (network/host/email) behavior Windows Registry Unix/Windows File System Accesses Command Lines (Masquerade) Application layer Email Can train in real-world environments over “dirty” data and does not require costly, time-intensive trainin