An Active Defense Model and Framework of Insider Threats Detection and Sense

摘要：

Insider attacks is a well-known problem acknowledged as a threat as early as 1980s. The threat is attributed to legitimate users who take advantage of familiarity with the computational environment and abuse their privileges, can easily cause significant damage or losses. In this paper, we present an active defense model and framework of insider threat detection and sense. Firstly, we describe the hierarchical framework which deal with insider threat from several aspects, and subsequently, show a hierarchy-mapping based insider threats model, the kernel of the threats detection, sense and prediction. The experiments show that the model and framework could sense the insider threat in real-time effectively.

关键词： insider threat detection sense model

作者: Hongbin Zhang Jianfeng Ma Yinchuan Wang Qingqi Pei

作者单位: Ministry of Education KeyLab.of Computer Network and Information Security,Xidian Univ.,Xian 710071, Ministry of Education KeyLab.of Computer Network and Information Security,Xidian Univ.,Xian 710071, The Research Institute,China Electronic Equipment & Systems Engineering Corporation,Beijing 100141,C Ministry of Education KeyLab.of Computer Network and Information Security,Xidian Univ.,Xian 710071,

会议类型: 国际会议

会议名称: The Fifth International Conference on Information Assurance and Security(第五届信息保障与安全国际会议)

会议地点: 西安

会议语种:英文

页码: 258-261

在线出版日期: 2009-08-18（万方平台首次上网日期，不代表论文的发表时间）