Identifying untrusted interactive behaviour in Enterprise Resource Planning systems based on a big data pattern recognition method using behavioural analytics. Issue 5 (4th April 2022)

• Record Type: Journal Article
• Authors: Yi, Qian; Xu, Mengyao; Yi, Shuping; Xiong, Shiquan
• Is Part Of: Behaviour & information technology. Volume 41:Issue 5(2022)
• Page Start: 1019
• Page End: 1034
• Publication Date: 2022-04-04
• Subjects: Behavioural analytics -- hidden Markov model -- untrusted interactive behaviour; Electronic data processing -- Periodicals; Human engineering -- Periodicals; Information technology -- Periodicals; 303.4833
• DOI: 10.1080/0144929X.2020.1851767
• Languages: English
• ISSNs: 0144-929X

Abstract

ABSTRACT: To improve the performance of enterprise network information security, we proposed a behaviour analytics model that established a unique behaviour pattern for each user and identifies untrusted interactive behaviour. First, a series of behaviour characteristics was constructed by observing user behaviours. These characteristics were then used by a big data analysis method called hidden Markov model to model the behaviour of trusted users. Next, a forward algorithm calculated the probability of observation sequences from users with the same and different positions. Finally, untrusted interactive behaviours were identified by comparing the observation sequence probability sets of trusted and untrusted users. The proposed method was applied to the Enterprise Resource Planning system used by a publishing house to identify the credibility of its user behaviour. The highest false positive rates obtained were 0.74% and 5.26% for users in different positions and the same position, respectively. These results verify that the model is effective in identifying untrusted interactive behaviours.