Creating Evolving User Behavior Profiles Automatically

Abstract

Knowledge about computer users is very beneficial for assisting them, predicting their future actions or detecting masqueraders. In this paper, a new approach for creating and recognizing automatically the behavior profile of a computer user is presented. In this case, a computer user behavior is represented as the sequence of the commands she/he types during her/his work. This sequence is transformed into a distribution of relevant subsequences of commands in order to find out a profile that defines its behavior. Also, because a user profile is not necessarily fixed but rather it evolves/changes, we propose an evolving method to keep up to date the created profiles using an Evolving Systems approach. In this paper, we combine the evolving classifier with a trie-based user profiling to obtain a powerful self-learning online scheme. We also develop further the recursive formula of the potential of a data point to become a cluster center using cosine distance, which is provided in the Appendix. The novel approach proposed in this paper can be applicable to any problem of dynamic/evolving user behavior modeling where it can be represented as a sequence of actions or events. It has been evaluated on several real data streams.

Detecting Anomalous Behaviour Using Heterogeneous Data

“…This technique can be applied to image processing, video analytics [26], fault detection [27] and also user behaviour [28]. For instance, any data sample that has high value of the standard eccentricity 2 ,…”

Contextualized Behavior Patterns for Ambient Assisted Living

“…The algorithm Evolving Agent behavior Classification based on Distributions of Relevant events (EVABCD) [3] creates evolving user profiles that are represented by a sequence of events. To solve the problem of unbounded sequences, this algorithm first segments the sequence of events in subsequences of equal length and then stores them in a trie.…”

“…Behavior learning is widely studied and different behavior models have been proposed [1][2][3][4]. One such model is sequential patterns in which a behavior is represented as an ordered set of activities.…”

Evolving systems for computer user behavior classification

“…In order to solve the second of these aspects, the method proposed in [12] is modified by Iglesias et al [13]. In that research, as a user behavior is not fixed but rather it changes and evolves, the proposed classifier is able to keep up to date the created profiles by using an Evolving Classifier.…”