The commercial information leak detection technology based on the analysis of professional discussions on social networks

• Autorzy: Pomorova O.

Identyfikatory

DOI

10.21936/si2018_v39.n1.837

Warianty tytułu

PL

Technologia wykrywania wycieków informacji biznesowych oparta na analizie profesjonalnych dyskusji na portalach społecznościowych

• Języki publikacji: EN

Abstrakty

EN

The paper presents a new technology for commercial information leak detection. The technology based on an analysis of knowledge and skills that demonstrate the company's employees in the professional consultations and discussions in social networks. The company's subject domain and activities are modeled using ontologies.

PL

W artykule przedstawiono nową technologię wykrywania faktów wycieku poufnych informacji biznesowych. Technologia ta jest oparta na analizie wiedzy i umiejętności, które demonstrują pracownicy firmy w profesjonalnych konsultacjach i dyskusjach w sieciach społecznościowych. Dziedzina i działania firmy są modelowane za pomocą ontologii.

Słowa kluczowe

EN

information leakage; leak detection; social networks; ontology

PL

wyciek informacji; wykrywanie nieszczelności; sieci społecznościowe; ontologia

• Wydawca: Wydawnictwo Politechniki Śląskiej
• Czasopismo: Studia Informatica
• Rocznik: 2018
• Tom: Vol. 39, nr 1
• Strony: 43--64
• Opis fizyczny: Bibliogr. 25 poz.

Twórcy

autor

Pomorova O.

• University of Łódź, Faculty of Mathematics and Computer Science, ul. Banacha 22, 90-238 Łódź, Poland

Bibliografia

• 1. Cost of cybercrime study. Available at https://www.accenture.com/t20170926T 072837Z__w__/us-en/_acnmedia/PDF-61/Accenture-2017-CostCyber CrimeStudy.pdf (Accessed January 20, 2018).
• 2. What the Swedish government's data leak disaster can teach companies about third-party security. Available at: https://www.techrepublic.com/article/what-the-swedish-governments-data-leak-disaster-can-teach-companies-about-third-party-security/ (Accessed January 20, 2018).
• 3. 2017 Cost of Data Breach Study: Global Overview. 2018. Available at https://www-01.ibm.com /common/ssi/cgi-bin/ssialias?htmlfid=SEL03130WWEN (Accessed January 20, 2018).
• 4. Cybercrime will cost businesses over $2 trillion by 2019. 2017. Available at: https://www.juniperresearch.com/press/press-releases/cybercrime-cost-businesses-over-2trillion (Accessed January 20, 2018).
• 5. Data exfiltration study: Actors, tactics, and detection. 2017. Available at: https://www.mcafee. com /resources/reports/rp-data-exfiltration.pdf (Accessed January 20, 2018).
• 6. Shpunt Y.: Leaks are different (in Russian). Available at: https://www.iemag.ru/ columns/detail.php?ID=39435 (Accessed January 20, 2018).
• 7. Data Leakage Worldwide: The High Cost of Insider Threats. Available at: https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/data-loss-prevention/white_paper_c11-506224.pdf (Accessed January 20, 2018).
• 8. Bertino E., Terzi E., Kamra A., Vakali A.: Intrusion detection in RBAC-administered databases. 21st Annual Computer Security Applications Conference (ACSAC’05), 2005, p. 1÷10.
• 9. Kamra A., Terzi E., Bertino E.: Detecting anomalous access patterns in relational databases. VLDB J2008, 17, 2008, p.1063÷1077.
• 10. Costante E., Fauri D., Etalle S., Hartog J.D., Zannone N.: A hybrid framework for data loss prevention and detection. 2016 I.E. Security and Privacy Workshops (SPW), San Jose, USA 2016, p. 324÷333.
• 11. Mathew S., Petropoulos M., Ngo H.Q., Upadhyaya S.: A data-centric approach to insider attack detection in database systems. Proceedings of the 13th International Conference on Recent Advances in Intrusion Detection, RAID’10, Ottawa, Ontario, Canada, Springer-Verlag, Heidelberg, Berlin 2010, p. 382÷401.
• 12. Jang Y., Chung S.P., Payne B.D., Lee W.: Gyrus: a framework for user-intent monitoring of text-based networked applications. 21st Annual Network and Distributed System Security Symposium (NDSS), Internet Society, VA 2014.
• 13. Senator T.E., Goldberg H.G., Memory A., Young W.T., Rees B., Pierce R., Huang D., Reardon M., Bader D.A., Chow E. et al.: Detecting insider threats in a real corporate database of computer usage activity. 19th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, Chicago, Illinois, USA, ACM, New York 2013, pp. 1393÷1401.
• 14. https://stackoverflow.com/ Stackoverflow (Accessed January 20, 2018).
• 15. https://web.facebook.com Facebook (Accessed January 20, 2018).
• 16. https://twitter.com/ Twitter (Accessed January 20, 2018).
• 17. Salem M.B., Hershkop S., Stolfo S.J.: A Survey of Insider Attack Detection Research. Insider Attack and Cyber Security: Beyond the Hacker. Boston 2008, pp. 69÷90.
• 18. Phyo A.H., Furnell S.M.: A detection-oriented classification of insider it misuse. Third Security Conference, 2004.
• 19. Cheng L., Liu F., Yao D.: Enterprise Data Breach: Causes, Challenges, Prevention, and Future Directions. WIREs Data Mining and Knowledge Discovery. May 2017.
• 20. Shapira Y., Shapira B., Shabtai A.: Content-based data leakage detection using extended fingerprinting. arXiv preprint arXiv:1302.2028, 2013.
• 21. Matthews G., Deary I., Whiteman M.: Personality Traits (2nd ed.). Cambridge University Press, 2003.
• 22. Füller J., Hutter K., Hautz J., Matzler K.: User roles and contributions in innovation-contest communities. Journal of Management Information Systems, Vol. 31(1), 2014, pp. 273÷308.
• 23. Fisher D., Smith M., Welser H.T.: You are who you talk to: Detecting roles in usenet newsgroups. System Sciences, HICSS'06. Proceedings of the 39th Annual Hawaii International Conference on IEEE, Vol. 3, 2006, pp. 56b÷59b.
• 24. Gabriel R., Marra A.: Santos Benedito Rodrigues; Faleiros Vicente de Paula: Opacity of the boundaries between real and virtual worlds from the perspective of Facebook users. Psicol. USP, São Paulo, Vol. 27, No. 2, 2016, pp. 263÷272. Available at <http://www.scielo.br/scielo.php?script=sci_arttext&pid=S0103-65642016000200263 &lng=en& nrm iso> (Accessed January 20, 2018).
• 25. Uzzi B.: Teaming Up to Drive Scientific Discovery. Available at <http://commonwealthadvisorybureau.org/teaming-up-to-drive-scientific-discovery-brian-uzzi-phd-at-tedxnorthwesternu/> (Accessed January 20, 2018).