Wyniki wyszukiwania - BazTech

Ograniczanie wyników

1 Journal of Artificial Intelligence and Soft Computing Research

1 2012

Znaleziono wyników: 1

Liczba wyników na stronie

Wyniki wyszukiwania

Sortuj według:

Ogranicz wyniki do:

Mining file repository accesses for detecting data exfiltration activities

Hu Y., Frank C., Walden J., Crawford E., Kasturiratna D.

Journal of Artificial Intelligence and Soft Computing Research

2012

Vol. 2, No. 1

31--41

Studies show that a significant number of employees steal data when changing jobs. Insider attackers who have the authorization to access the best-kept secrets of organizations pose a great challenge for organizational security. Although increasing efforts have been spent on identifying insider attacks, little research concentrates on detecting data exfiltration activities. This paper proposes a model for identifying data exfiltration activities by insiders. It measures the concentration of file repository access data for finding certain suspicious activities. It also uses statistical methods to profile legitimate uses of file repositories by authorized users. By analyzing legitimate file repository access logs, user access profiles are created and can be employed to detect a large set of data exfiltration activities. The effectiveness of the proposed model was tested with file access histories from the subversion logs of the popular open source project KDE.