NDLI: A Tripwire Grammar for Insider Threat Detection

Please wait, while we are loading the content...

A Grey-Box Approach for Detecting Malicious User Interactions in Web Applications

Studying Naive Users and the Insider Threat with SimpleFlow

Cyber Deception: Virtual Networks to Defend Insider Reconnaissance

Function-Based Access Control (FBAC): From Access Control Matrix to Access Control Tensor

Restricting Insider Access Through Efficient Implementation of Multi-Policy Access Control Systems

A New Take on Detecting Insider Threats: Exploring the Use of Hidden Markov Models

Pragmatic Security: Modelling IT Security Management Responsibilities for SME Archetypes

WatchIT: Who Watches Your IT Guy?

Towards Formal Analysis of Insider Threats for Auctions

Ports Distribution Management for Privacy Protection inside Local Domain Name System

A New Risk Assessment Framework Using Graph Theory for Complex ICT Systems

Online and Offline Security Policy Assessment

A Tripwire Grammar for Insider Threat Detection

Discovering Insider Threats from Log Data with High-Performance Bioinformatics Tools

Analysis on Manipulation of the MAC Address and Consequent Security Threats

A Tripwire Grammar for Insider Threat Detection

Content Provider	ACM Digital Library
Author	Erola, Arnau Goldsmith, Michael Agrafiotis, Ioannis Creese, Sadie
Abstract	The threat from insiders is an ever-growing concern for organisations, and in recent years the harm that insiders pose has been widely demonstrated. This paper describes our recent work into how we might support insider threat detection when actions are taken which can be immediately determined as of concern because they fall into one of two categories: they violate a policy which is specifically crafted to describe behaviours that are highly likely to be of concern if they are exhibited, or they exhibit behaviours which follow a pattern of a known insider threat attack. In particular, we view these concerning actions as something that we can design and implement tripwires within a system to detect. We then orchestrate these tripwires in conjunction with an anomaly detection system and present an approach to formalising tripwires of both categories. Our intention being that by having a single framework for describing them, alongside a library of existing tripwires in use, we can provide the community of practitioners and researchers with the basis to document and evolve this common understanding of tripwires.
Starting Page	105
Ending Page	108
Page Count	4
File Format	PDF
ISBN	9781450345712
DOI	10.1145/2995959.2995971
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-10-28
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Insider threat Security policies Grammar Tripwire Attack-pattern
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in