Authentication graphs: Analyzing user behavior within an enterprise network

作者：Kent Alexander D^*; Liebrock Lone M; Neil Joshua C

来源：Computers & Security, 2015, 48: 150-166.

DOI：10.1016/j.cose.2014.09.001

• User authentication
• Network authentication
• Graph analysis
• Intrusion detection
• Cyber security
• Enterprise security

User authentication over the network builds a foundation of trust within large-scale computer networks. The collection of this network authentication activity provides valuable insight into user behavior within an enterprise network. Representing this authentication data as a set of user-specific graphs and graph features, including time-constrained attributes, enables novel and comprehensive analysis opportunities. We show graph-based approaches to user classification and intrusion detection with practical results. We also show a method for assessing network authentication trust risk and cyber attack mitigation within an enterprise network using bipartite authentication graphs. We demonstrate the value of these graph-based approaches on a real-world authentication data set collected from an enterprise network.

• 出版日期2015-2