Intramural Network Intrusion Detection by Monitoring User Behavior

A browser behavior monitoring method on the client/server structure was proposed. The method can be used to monitor and manage the behavior of the users on the Internet. A web browser component of Internet Explorer was embedded with automatic object linking and embedding technology. Through the interface of the web browser component, web data records are accessed and written into files using the format of XML that can be used to replay and check the Internet behavior of the client users. The experimental results show that the system can effectively monitor the Internet behaviors, therefore can be used to reduce the aggressive behaviors of the internal network in an organization.