Table 4 Detection results of the temporal behavior characterization module for different values of \(w^{\prime }\), with \(rep^{\prime }\) fixed
From: Detecting compromised email accounts via login behavior characterization
Dataset | w′ | Top % of all reputation values (%) | rep′ | Subnets in suspicious area | Subnets after vertical filtering | Subnets after horizontal filtering (% decrease from the total count) | Associated accounts | Detection rate |
|---|---|---|---|---|---|---|---|---|
Dataset-1 | 0.85 | 30 | \(-1.83\) | 100 | 49 | 22(99.26%) | 31 | 15/132 |
Dataset-2 | 0.85 | 30 | \(-1.87\) | 203 | 127 | 78(99.01%) | 100 | – |
Dataset-3 | 0.85 | 30 | \(-1.79\) | 649 | 259 | 106(99.37%) | 135 | 0/3 |
Dataset-4 | 0.85 | 30 | \(-1.93\) | 529 | 275 | 107(98.69%) | 142 | – |
Dataset-5 | 0.85 | 30 | \(-1.27\) | 427 | 240 | 141(99.19%) | 217 | 1/6 |
Dataset-6 | 0.85 | 30 | \(-1.69\) | 420 | 216 | 77(99.15%) | 109 | 4/55 |
Dataset-7 | 0.85 | 30 | \(-1.86\) | 676 | 300 | 102(99.42%) | 136 | 1/2 |
Dataset-8 | 0.85 | 30 | \(-1.79\) | 679 | 302 | 150(98.91%) | 193 | – |
Dataset-9 | 0.85 | 30 | \(-2.06\) | 164 | 68 | 35(99.73%) | 94 | – |
Dataset-1 | 0.90 | 30 | \(-1.83\) | 134 | 65 | 31(98.96%) | 153 | 130/132 |
Dataset-2 | 0.90 | 30 | \(-1.87\) | 265 | 168 | 100(98.73%) | 117 | – |
Dataset-3 | 0.90 | 30 | \(-1.79\) | 790 | 346 | 139(99.17%) | 184 | 0/3 |
Dataset-4 | 0.90 | 30 | \(-1.93\) | 641 | 360 | 142(98.26%) | 181 | – |
Dataset-5 | 0.90 | 30 | \(-1.27\) | 534 | 318 | 194(98.88%) | 299 | 1/6 |
Dataset-6 | 0.90 | 30 | \(-1.69\) | 517 | 288 | 117(98.70%) | 154 | 7/55 |
Dataset-7 | 0.90 | 30 | \(-1.86\) | 834 | 394 | 145(99.17%) | 178 | 1/2 |
Dataset-8 | 0.90 | 30 | \(-1.79\) | 825 | 399 | 197(98.56%) | 248 | – |
Dataset-9 | 0.90 | 30 | \(-2.06\) | 243 | 105 | 62(99.51%) | 119 | – |
Dataset-1 | 0.95 | 30 | \(-1.83\) | 178 | 91 | 43(98.56%) | 170 | 130/132 |
Dataset-2 | 0.95 | 30 | \(-1.87\) | 366 | 255 | 146(98.15%) | 148 | – |
Dataset-3 | 0.95 | 30 | \(-1.79\) | 1000 | 495 | 188(98.87%) | 223 | 0/3 |
Dataset-4 | 0.95 | 30 | \(-1.93\) | 790 | 487 | 207(97.47%) | 231 | – |
Dataset-5 | 0.95 | 30 | \(-1.27\) | 705 | 438 | 275(98.42%) | 379 | 1/6 |
Dataset-6 | 0.95 | 30 | \(-1.69\) | 666 | 399 | 188(97.92%) | 210 | 13/55 |
Dataset-7 | 0.95 | 30 | \(-1.86\) | 1053 | 544 | 215(98.77%) | 236 | 1/2 |
Dataset-8 | 0.95 | 30 | \(-1.79\) | 1022 | 527 | 265(98.07%) | 362 | – |
Dataset-9 | 0.95 | 30 | \(-2.06\) | 372 | 195 | 105(99.18%) | 153 | – |