@inproceedings{7755f9ef31cc4e28a9faef06d926851b,
title = "An approach for database intrusion detection based on the event sequence clustering",
abstract = "Database intrusion detection technology is an important part of the database security. The paper presents a new database intrusion detection method based on the event sequence clustering. Firstly, aiming at computing the similarity of two SQL statement sequences, an improved edit distance function is defined. The corresponding clustering results are obtained by the computed similarity. Secondly, the attack sequences are detected by calculating the similarity between user's operation sequences and cluster center. The association between two operation sequences is analyzed. At last, the experimental results show that our approach has lower false alarm rate and higher accuracy rate.",
keywords = "Clustering, Database intrusion detection, Event sequence",
author = "Li Yinzhao and Yang Dongxu and Ren Jiadong and Hu Changzhen",
year = "2009",
doi = "10.1109/NCM.2009.30",
language = "English",
isbn = "9780769537696",
series = "NCM 2009 - 5th International Joint Conference on INC, IMS, and IDC",
pages = "584--588",
booktitle = "NCM 2009 - 5th International Joint Conference on INC, IMS, and IDC",
note = "NCM 2009 - 5th International Joint Conference on Int. Conf. on Networked Computing, Int. Conf. on Advanced Information Management and Service, and Int. Conf. on Digital Content, Multimedia Technology and its Applications ; Conference date: 25-08-2009 Through 27-08-2009",
}