NDLI: WatchIT: Who Watches Your IT Guy?

Please wait, while we are loading the content...

A Grey-Box Approach for Detecting Malicious User Interactions in Web Applications

Studying Naive Users and the Insider Threat with SimpleFlow

Cyber Deception: Virtual Networks to Defend Insider Reconnaissance

Function-Based Access Control (FBAC): From Access Control Matrix to Access Control Tensor

Restricting Insider Access Through Efficient Implementation of Multi-Policy Access Control Systems

A New Take on Detecting Insider Threats: Exploring the Use of Hidden Markov Models

Pragmatic Security: Modelling IT Security Management Responsibilities for SME Archetypes

WatchIT: Who Watches Your IT Guy?

Towards Formal Analysis of Insider Threats for Auctions

Ports Distribution Management for Privacy Protection inside Local Domain Name System

A New Risk Assessment Framework Using Graph Theory for Complex ICT Systems

Online and Offline Security Policy Assessment

A Tripwire Grammar for Insider Threat Detection

Discovering Insider Threats from Log Data with High-Performance Bioinformatics Tools

Analysis on Manipulation of the MAC Address and Consequent Security Threats

WatchIT: Who Watches Your IT Guy?

Content Provider	ACM Digital Library
Author	Weinsberg, Yaron Shalev, Noam Moatti, Yosef Keidar, Idit
Abstract	System administrators have unlimited access to system resources. As the Snowden case shows, these permissions can be exploited to steal valuable personal, classified, or commercial data. In this work we propose a strategy that increases the organizational information security by constraining IT personnel's view of the system and monitoring their actions. To this end, we introduce the abstraction of perforated containers -- while regular Linux containers are too restrictive to be used by system administrators, by "punching holes" in them, we strike a balance between information security and required administrative needs. Our system predicts which system resources should be accessible for handling each IT issue, creates a perforated container with the corresponding isolation, and deploys it in the corresponding machines as needed for fixing the problem. Under this approach, the system administrator retains his superuser privileges, while he can only operate within the container limits. We further provide means for the administrator to bypass the isolation, and perform operations beyond her boundaries. However, such operations are monitored and logged for later analysis and anomaly detection. We provide a proof-of-concept implementation of our strategy, along with a case study on the IT database of IBM Research in Israel.
Starting Page	93
Ending Page	96
Page Count	4
File Format	PDF
ISBN	9781450345712
DOI	10.1145/2995959.2995968
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-10-28
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Linux containers Administrator confinement Perforated container Insider threats Organizational security It threats Watchit
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in