earticle

영어

In this paper, we analyzed insider access pattern to documents for monitoring insider misuse in the document control domain (DCD). We optimized insider access pattern to documents using apriori algorithm adding time and click ratio. Insiders have typical access patterns among related documents when performing their duties. When insider misuse occurs in the DCD, it can be detected by the typical access pattern of insider. We added time and click ratio to apriori algorithm for improving the accuracy of insider access patterns. Time means the activation time of the document. Click ratio represents the frequency of click change within the document. The proposed algorithm can remove access patterns with the low reliability and reduce the false detection rate when detecting insider misuse.