Table 5 Detection results of the temporal behavior characterization module for different values of \(rep^{\prime }\), with \(w^{\prime }\) fixed
From: Detecting compromised email accounts via login behavior characterization
Dataset | w′ | Top % of all reputation values (%) | rep′ | Subnets in suspicious area | Subnets after vertical filtering | Subnets after horizontal filtering (% decrease from the total count) | Associated accounts | Detection rate |
|---|---|---|---|---|---|---|---|---|
Dataset-1 | 0.90 | 10 | \(-0.56\) | 61 | 50 | 30(99.00%) | 187 | 131/132 |
Dataset-2 | 0.90 | 10 | \(-0.42\) | 194 | 158 | 120(98.48%) | 193 | – |
Dataset-3 | 0.90 | 10 | \(-0.28\) | 436 | 336 | 192(98.85%) | 464 | 2/3 |
Dataset-4 | 0.90 | 10 | \(-0.44\) | 461 | 336 | 184(97.75%) | 317 | – |
Dataset-5 | 0.90 | 10 | \(-0.11\) | 262 | 213 | 176(98.99%) | 564 | 1/6 |
Dataset-6 | 0.90 | 10 | \(-0.25\) | 292 | 234 | 148(98.36%) | 283 | 11/55 |
Dataset-7 | 0.90 | 10 | \(-0.31\) | 513 | 380 | 174(99.01%) | 285 | 1/2 |
Dataset-8 | 0.90 | 10 | \(-0.28\) | 626 | 481 | 306(97.77%) | 507 | – |
Dataset-9 | 0.90 | 10 | \(-0.50\) | 125 | 78 | 32(99.75%) | 121 | – |
Dataset-1 | 0.90 | 30 | \(-1.83\) | 134 | 65 | 31(98.96%) | 153 | 130/132 |
Dataset-2 | 0.90 | 30 | \(-1.87\) | 265 | 168 | 100(98.73%) | 117 | – |
Dataset-3 | 0.90 | 30 | \(-1.79\) | 790 | 346 | 139(99.17%) | 184 | 0/3 |
Dataset-4 | 0.90 | 30 | \(-1.93\) | 641 | 360 | 142(98.26%) | 181 | – |
Dataset-5 | 0.90 | 30 | \(-1.27\) | 534 | 318 | 194(98.88%) | 299 | 1/6 |
Dataset-6 | 0.90 | 30 | \(-1.69\) | 517 | 288 | 117(98.70%) | 154 | 7/55 |
Dataset-7 | 0.90 | 30 | \(-1.86\) | 834 | 394 | 145(99.17%) | 178 | 1/2 |
Dataset-8 | 0.90 | 30 | \(-1.79\) | 825 | 399 | 197(98.56%) | 248 | – |
Dataset-9 | 0.90 | 30 | \(-2.06\) | 243 | 105 | 62(99.51%) | 119 | – |
Dataset-1 | 0.90 | 50 | \(-3.11\) | 166 | 74 | 36(98.80%) | 152 | 130/132 |
Dataset-2 | 0.90 | 50 | \(-3.31\) | 306 | 188 | 96(98.78%) | 128 | – |
Dataset-3 | 0.90 | 50 | \(-3.29\) | 1012 | 393 | 164(99.02%) | 177 | 0/3 |
Dataset-4 | 0.90 | 50 | \(-3.43\) | 741 | 356 | 133(98.37%) | 165 | – |
Dataset-5 | 0.90 | 50 | \(-2.42\) | 811 | 417 | 234(98.65%) | 273 | 0/6 |
Dataset-6 | 0.90 | 50 | \(-3.13\) | 617 | 302 | 106(98.82%) | 126 | 6/55 |
Dataset-7 | 0.90 | 50 | \(-3.42\) | 1057 | 436 | 181(98.97%) | 203 | 1/2 |
Dataset-8 | 0.90 | 50 | \(-3.30\) | 941 | 400 | 184(98.66%) | 230 | – |
Dataset-9 | 0.90 | 50 | \(-3.62\) | 349 | 141 | 86(99.33%) | 82 | – |