Application of users'''' abnormal behavior detection in security auditing system
用户行为异常检测在安全审计系统中的应用

A method for auditing users' abnormal behavior based on data mining technology was proposed.Through preprocessing normal auditing data,some additional normal patterns were found.Then,users' behavior profiles were discovered with association rules and sequence pattern mining methods.Users' behavior could be further audited with these profiles.Simulation results show that this method is valid in real security auditing systems.