International Conference on Information and Knowledge Technology

فارسی

Home / شانزدهمین کنفرانس بین المللی فناوری اطلاعات و دانش

Kalman Filter–Based Anomaly Detection for User Authentication Failures in Enterprise Logs

Authors :

Somayeh Soltani¹ Hossein Nikdel²

1- دانشگاه تربت حیدریه 2- دانشگاه صنعتی شاهرود

Keywords :

Anomaly detection،Brute-force attack،Time-series prediction،Kalman filter،Login failure

Abstract :

User authentication failures sometimes indicate malicious attempts such as brute-force or credential-stuffing. Unfortunately, simplistic threshold-based alarms yield high false-positive rates in dynamic enterprise environments. This paper presents a systematic study of Kalman filter–based anomaly detection applied to a 60-day real-world audit-log dataset. It compares four variants of the filter—simple Local Level (LL), Local Level with Trend (LLT), Local Level with Seasonal component (LLS), and Local Level with both Trend and Seasonal components (LLTS)—across multiple time-aggregation windows (1, 2, 8, and 24 hours). Each configuration is assessed using three complementary metrics: outlier count (detection sensitivity), coefficient of determination (R²), and root-mean-squared error (RMSE). Experimental results show that the LL variant with a 2-hour window achieves the best trade-off, yielding R² = 0.9894, RMSE = 5.97, and no detected outliers (i.e., zero false positives).

List of archived papers

Improving Long-Term Engagement of Insurance Brokerages by Providing Gamified Configurations Based on The Delphi Method

Hosein Bayati - Fattaneh Taghiyareh - Sahand Hashemi

A Novel Decentralized Privacy Preserving Federated Learning Model for Healthcare Applications

Saba Ameri - Reza Ebrahimi Atani

ارائه مدل یادگیری ماشین برای پیش‌بینی سری‌زمانی باینری از دیدگاه مسئله‌های دسته‌بندی با کاربرد در پیش‌بینی نت‌های موسیقی

نیلوفر ع��دلخانی - حسام عمرانپور

From Faces to Words: An Efficient Persian Visual Lip Reading

Mana Amini - Sajjad Aemmi - Azadeh Ashouri - Reza Akhoundzadeh - Kourosh Hassanzadeh - Mohammad Reza Mohammadi

ParaKavosh: A Parallel Algorithm for Finding Biological Network Motifs

Dr Zahra Razaghi Moghadam Kashani - Dr Ali Masoudi-nejad - Dr Abbas Nowzari-dalini

A Deep Neural Network-based Method for MmWave Time-varying Channel Estimation

Amirhossein Molazadeh - Zahra Maroufi - Mehrdad Ardebilipour

مدل یادگیری ماشین برای تشخیص تقلب در کارت‌های اعتباری با رویکرد بهینه‌سازی AUC و تنظیم خودکار ابرپارامترها

محمد مهدی متولی

Revert Propagation: Who are responsible for a contagion initialization in a Diffusion Network?

Arman Sepehr - Mohammadzaman Zamani - Hamid Beigy - Shabnam Behzad

شناسایی جایگاه مالونیلاسیون در پروتئین‌ها با بهره‌گیری از استخراج ویژگی و تکنیک‌های پردازش زبان طبیعی

حنانه رجبیون - محمد قاسم زاده - وحید رنجبر بافقی

Silicon photonic microring resonators: A Novel optical router based on Negative-First routing algorithm

Negin Bagheri Renani - Elham Yaghoubi

more

Samin Hamayesh - Version 43.8.0