{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,28]],"date-time":"2025-10-28T03:14:33Z","timestamp":1761621273636},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2016,7,27]],"date-time":"2016-07-27T00:00:00Z","timestamp":1469577600000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Soft Comput"],"published-print":{"date-parts":[[2017,2]]},"DOI":"10.1007\/s00500-016-2278-8","type":"journal-article","created":{"date-parts":[[2016,7,27]],"date-time":"2016-07-27T13:00:36Z","timestamp":1469624436000},"page":"557-569","update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":22,"title":["Bagging-TPMiner: a classifier ensemble for masquerader detection based on typical objects"],"prefix":"10.1007","volume":"21","author":[{"given":"Miguel Angel","family":"Medina-P\u00e9rez","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ra\u00fal","family":"Monroy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"J. Benito","family":"Cami\u00f1a","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Milton","family":"Garc\u00eda-Borroto","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2016,7,27]]},"reference":[{"key":"2278_CR1","unstructured":"Bache K, Lichman M (2013) UCI machine learning repository. http:\/\/archive.ics.uci.edu\/ml"},{"key":"2278_CR2","doi-asserted-by":"crossref","unstructured":"Ben-Salem S, Stolfo S (2010) Modeling user search behavior for masquerade detection. Computer Science technical reports 033. Columbia University","DOI":"10.1007\/978-3-642-23644-0_10"},{"key":"2278_CR3","unstructured":"Bertacchini M, Fierens P (2008) A survey on masquerader detection approaches. In: Proceedings of V Congreso Iberoamericano de Seguridad Inform\u00e1tica. Universidad de la Rep\u00fablica de Uruguay, pp 46\u201360"},{"key":"2278_CR4","doi-asserted-by":"crossref","unstructured":"Cami\u00f1a B, Monroy R, Trejo L, S\u00e1nchez E (2011) Towards building a masquerade detection method based on user file system navigation. In: Batyrshin I, Sidorov G (eds) Proceedings of the Mexican international conference on artificial intelligence, pp 174\u2013186, MICAI\u201911","DOI":"10.1007\/978-3-642-25324-9_15"},{"key":"2278_CR5","doi-asserted-by":"crossref","first-page":"919","DOI":"10.1016\/j.eswa.2013.08.022","volume":"41","author":"JB Cami\u00f1a","year":"2014","unstructured":"Cami\u00f1a JB, Hern\u00e1ndez-Gracidas C, Monroy R, Trejo L (2014) The windows-users and -intruder simulations logs dataset (wuil): an experimental framework for masquerade detection mechanisms. Expert Syst Appl 41:919\u2013930","journal-title":"Expert Syst Appl"},{"key":"2278_CR6","first-page":"1","volume":"7","author":"J Dem\u0161ar","year":"2006","unstructured":"Dem\u0161ar J (2006) Statistical comparisons of classifiers over multiple data sets. J Mach Learn Res 7:1\u201330","journal-title":"J Mach Learn Res"},{"issue":"2","key":"2278_CR7","doi-asserted-by":"crossref","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"13","author":"DE Denning","year":"1987","unstructured":"Denning DE (1987) An intrusion\u2013detection model. IEEE Trans Softw Eng 13(2):222\u2013232","journal-title":"IEEE Trans Softw Eng"},{"key":"2278_CR8","volume-title":"Pattern classification","author":"RO Duda","year":"2001","unstructured":"Duda RO, Hart PE, Stork DG (2001) Pattern classification. Wiley-Interscience, Hoboken"},{"key":"2278_CR9","doi-asserted-by":"crossref","first-page":"861","DOI":"10.1016\/j.patrec.2005.10.010","volume":"27","author":"T Fawcett","year":"2006","unstructured":"Fawcett T (2006) An introduction to ROC analysis. Pattern Recognit Lett 27:861\u2013874","journal-title":"Pattern Recognit Lett"},{"key":"2278_CR10","first-page":"2677","volume":"9","author":"S Garc\u00eda","year":"2008","unstructured":"Garc\u00eda S, Herrera F (2008) An extension on \u201cStatistical comparisons of classifiers over multiple data sets\u201d for all pairwise comparisons. J Mach Learn Res 9:2677\u20132694","journal-title":"J Mach Learn Res"},{"key":"2278_CR11","doi-asserted-by":"crossref","unstructured":"Garg A, Rahalkar R, Upadhyaya S, Kwiat K (2006) Profiling users in GUI based systems masquerade detection. In: Proceedings of the 7th IEEE information assurance workshop. IEEE Computer Society Press, pp 48\u201354","DOI":"10.1109\/IAW.2006.1652076"},{"issue":"1","key":"2278_CR12","doi-asserted-by":"publisher","first-page":"69","DOI":"10.1016\/j.inffus.2006.10.002","volume":"9","author":"G Giacinto","year":"2008","unstructured":"Giacinto G, Perdisci R, Del Rio M, Roli F (2008) Intrusion detection in computer networks by a modular ensemble of one-class classifiers. Inf Fusion 9(1):69\u201382. doi: 10.1016\/j.inffus.2006.10.002","journal-title":"Inf Fusion"},{"issue":"2","key":"2278_CR13","doi-asserted-by":"crossref","first-page":"164","DOI":"10.1109\/TDSC.2014.2327966","volume":"12","author":"HA Kholidy","year":"2014","unstructured":"Kholidy HA, Baiardi F, Hariri S (2014) DDSGA: a data-driven semi-global alignment approach for detecting masquerade attacks. IEEE Trans Depend Secure Comput 12(2):164\u2013178","journal-title":"IEEE Trans Depend Secure Comput"},{"key":"2278_CR14","unstructured":"Killourhy K, Maxion RA (2010) Why did my detector do that?!\u2014Predicting keystroke-dynamics error rates. In: Jha S, Sommer R, Kreibich C (eds) Recent advances in intrusion detection, 13th international symposium, RAID 2010, Lecture notes in computer science, vol 6307. Springer, pp 256\u2013276"},{"key":"2278_CR15","unstructured":"Kudlacik P, Porwik P, Wesolowski T (2015) Fuzzy approach for intrusion detection based on user\u2019s commands. Soft Comput pp.1\u201315"},{"key":"2278_CR16","doi-asserted-by":"crossref","DOI":"10.1002\/9781118914564","volume-title":"Combining pattern classifiers: methods and algorithms","author":"LI Kuncheva","year":"2014","unstructured":"Kuncheva LI (2014) Combining pattern classifiers: methods and algorithms. Wiley, Hoboken"},{"key":"2278_CR17","doi-asserted-by":"crossref","unstructured":"Latendresse M (2005) Masquerade detection via customized grammars. In: Julish K, Kruegel C (eds) Proceedings of the second international conference on detection of intrusions and malware, and vulnerability assessment, DIMVA 2005. Lecture notes in computer science, vol 3548. Springer, pp 141\u2013159","DOI":"10.1007\/11506881_9"},{"key":"2278_CR18","doi-asserted-by":"crossref","unstructured":"Maxion RA (2003) Masquerade detection using enriched command lines. In: Proceedings of the international conference on dependable systems and networks, DSN\u201903. IEEE Computer Society Press, San Francisco, CA, USA, pp 5\u201314","DOI":"10.1109\/DSN.2003.1209911"},{"key":"2278_CR19","doi-asserted-by":"crossref","unstructured":"Maxion RA, Townsend TN (2002) Masquerade detection using truncated command lines. In: Proceedings of the international conference on dependable systems and networks, DSN 2002, pp 219\u2013228","DOI":"10.1109\/DSN.2002.1028903"},{"key":"2278_CR20","doi-asserted-by":"crossref","unstructured":"Messerman A, Mustafic T, Camtepe S, Albayrak S (2011) Continuous and non-intrusive identity verification in real-time environments based on free-text keystroke dynamics. In: Proceedings of the international joint conference on biometrics, IJCB 201. IEEE Computer Society Press, pp 1\u20138","DOI":"10.1109\/IJCB.2011.6117552"},{"key":"2278_CR21","unstructured":"Morales A, Fierrez J, Ortega-Garcia J (2014) Towards predicting good users for biometric recognition based on keystroke dynamics. In: Agapito L, Bronstein MM, Rother C (eds) Computer vision workshop\u2014ECCV 2014 workshops, part II, Lecture notes in computer science, vol 8926. Springer, pp 711\u2013724"},{"key":"2278_CR22","doi-asserted-by":"crossref","first-page":"67","DOI":"10.1613\/jair.374","volume":"7","author":"CG Nevill-Manning","year":"1997","unstructured":"Nevill-Manning CG, Witten IH (1997) Identifying hierarchical structure in sequences: a linear-time algorithm. JAIR 7:67\u201382","journal-title":"JAIR"},{"key":"2278_CR23","doi-asserted-by":"crossref","unstructured":"Posadas R, Mex-Perera C, Monroy R, Nolazco-Flores J (2006) Hybrid method for detecting masqueraders using session folding and hidden markov models. In: Proceedings of the 5th Mexican international conference on artificial intelligence: advances in artificial intelligence. Lecture notes in computer science, vol 4293. Springer, pp 622\u2013631","DOI":"10.1007\/11925231_59"},{"key":"2278_CR24","doi-asserted-by":"crossref","unstructured":"Pusara M (2004) User re-authentication via mouse movements. In: Proceedings of the 2004 ACM workshop on visualization and data mining for computer security, VizSEC\/DMSEC\u201904. ACM, New York, USA, pp 1\u20138","DOI":"10.1145\/1029208.1029210"},{"issue":"11","key":"2278_CR25","doi-asserted-by":"crossref","first-page":"2640","DOI":"10.1016\/j.jss.2012.06.014","volume":"85","author":"I Razo-Zapata","year":"2012","unstructured":"Razo-Zapata I, Mex-Perera C, Monroy R (2012) Masquerade attacks based on user\u2019s profile. J Syst Softw 85(11):2640\u20132651","journal-title":"J Syst Softw"},{"key":"2278_CR26","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1007\/978-0-387-77322-3_5","volume-title":"Insider attack and cyber security: beyond the hacker, advances in information security","author":"MB Salem","year":"2008","unstructured":"Salem MB, Hershkop S, Stolfo SJ (2008) A survey of insider attack detection research. In: Stolfo SJ, Bellovin SM, Hershkop S, Keromytis A, Sinclair S, Smith SW (eds) Insider attack and cyber security: beyond the hacker, advances in information security. Springer, Berlin, pp 69\u201390"},{"issue":"1","key":"2278_CR27","doi-asserted-by":"crossref","first-page":"58","DOI":"10.1214\/ss\/998929476","volume":"16","author":"M Schonlau","year":"2001","unstructured":"Schonlau M, DuMouchel W, Ju W, Karr A, Theus M, Vardi Y (2001) Computer intrusion: detecting masquerades. Stat Sci 16(1):58\u201374","journal-title":"Stat Sci"},{"key":"2278_CR28","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1016\/S0020-0190(00)00122-8","volume":"76","author":"M Schonlau","year":"2000","unstructured":"Schonlau M, Theus M (2000) Detecting masquerades in intrusion detection based on unpopular commands. Inf Process Lett 76:33\u201338","journal-title":"Inf Process Lett"},{"key":"2278_CR29","doi-asserted-by":"crossref","unstructured":"Song Y, Ben-Salem M, Hershkop S, Stolfo S (2013) System level user behavior biometrics using fisher features and gaussian mixture models. In: Security and privacy workshops, SPW 2013. IEEE Computer Society Press, pp 52\u201359","DOI":"10.1109\/SPW.2013.33"},{"key":"2278_CR30","doi-asserted-by":"crossref","unstructured":"Tax DMJ, Duin RPW (2001) Combining one-class classifiers. In: Multiple classifier systems, 2001 (MCS). Lecture notes in computer science, vol 2096. Springer Berlin, Heidelberg, pp 299\u2013308","DOI":"10.1007\/3-540-48219-9_30"},{"key":"2278_CR31","volume-title":"Statistical learning theory","author":"V Vapnik","year":"1998","unstructured":"Vapnik V (1998) Statistical learning theory. Wiley, Hoboken"},{"key":"2278_CR32","unstructured":"Wang K, Stolfo S (2003) One-class training for masquerade detection. In: Proceedings of the 3rd IEEE conference data mining workshop on data mining for computer security. IEEE, pp 10\u201319"}],"container-title":["Soft Computing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00500-016-2278-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s00500-016-2278-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00500-016-2278-8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00500-016-2278-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,11]],"date-time":"2019-09-11T20:08:18Z","timestamp":1568232498000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s00500-016-2278-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,7,27]]},"references-count":32,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2017,2]]}},"alternative-id":["2278"],"URL":"https:\/\/doi.org\/10.1007\/s00500-016-2278-8","relation":{},"ISSN":["1432-7643","1433-7479"],"issn-type":[{"value":"1432-7643","type":"print"},{"value":"1433-7479","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,7,27]]}}}