SIDD: A framework for detecting sensitive data exfiltration by an insider attack

Proceedings of the 42nd Annual Hawaii International Conference on System Sciences, HICSS

Volumn , Issue , 2009, Pages

  Liu, Yali ^a   Corbett, Cherita ^b   Chiang, Ken ^b   Archibald, Rennie ^a   Mukherjee, Biswanath ^a   Ghosal, Dipak ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b SANDIA NATIONAL LABORATORIES   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EDGE DETECTION; FEATURE EXTRACTION; SIGNAL PROCESSING; TRAFFIC SURVEYS;

APPLICATION IDENTIFICATIONS; COVERT COMMUNICATIONS; CRITICAL ELEMENTS; EXFILTRATION; HIGH-SPEED; INFORMATION PROTECTIONS; INSIDER ATTACKS; INSIDER THREATS; KEY COMPONENTS; MODEL IMPLEMENTATIONS; NETWORK RESOURCES; PROTECTED NETWORKS; SENSITIVE DATUM; SENSITIVE INFORMATIONS; SIGNAL PROCESSING TECHNIQUES; SIGNATURE GENERATIONS; TRAFFIC FLOWS; TRANSPARENT NETWORKS;

INFORMATION DISSEMINATION;

EID: 63349106731     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HICSS.2009.390     Document Type: Conference Paper

References (28)

1. M. R. Randazzo, M. Keeney, E. Kowalski, D. Cappelli, and A. Moore, "Insider Threat Study: Illicit Cyber Activity in the Banking and Finance Sector", CERT and the National Threat Assessment Center, Aug. 2004.
2. E. D. Shaw, K. G. Ruby, and J. M. Post, "The insider threat to information systems: The psychology of the dangerous insider", Security Awareness Bulletin, vol. 2-98, pp. 27-46, Sept. 1998.
3. L. Spitzner, "Honeypots: catching the insider threat", Proceedings of 19th Annual Computer Security Applications Conference, pp. 170-179, Dec. 2003.
4. N. Nguyen, P. Reiher, G.H. Kuenning, "Detecting insider threats by monitoring system call activity", IEEE Information Assurance Workshop, pp. 45-52, June 2003.
5. P. Gaonjur and C. Bokhoree, "Risk of Insider Threats in Information Technology Outsourcing: Can deceptive techniques be applied?", School of Business Informatics, University of Technology, Mauritius, 2006.
6. A. Oram, "Peer-to-Peer: Harnessing the Power of Disruptive Technologies", O'Reilly & Associates, 2001.
7. Y. Zhao, N. Li, and C. Wang., "Remote wireless transmission and error recovery of log data", Applied Geophysics, vol. 4, pp. 308-312, 2007.
8. skype, http://www.skype.com
9. J. Dittmann, D. Hesse, and R. Hillert, "Steganography and steganalysis in voice-over IP scenarios: operational aspects and first experiences with a new steganalysis tool set", Proceedings of SPIE on Security, Steganography, and Watermarking of Multimedia Contents VII, vol. 5681, pp. 607-618, Magdeburg, 2005.
10. U. Jennehag and T. Zhang, "Increasing bandwidth utilization in next generation IPTV networks", Proceedings IEEE International Conference on Image Processing (ICIP), pp. 2075-2078, Oct. 2004.
11. N.F. Johnson, and S. Jajodia, "Steganalysis of images created using current steganography software", David Aucsmith (Ed.): Information Hiding, LNCS 1525, pp. 32-47. Springer-Verlag Berlin Heidelberg, 1998.
12. L. Bernaille, R. Teixeira, I. Akodkenou, A. Soule, and K. Salamatian, "Traffic classification on the fly", ACM SIGCOMM Comput. Commun. Rev. vol. 36, no. 2, pp. 23-26, 2006.
13. G. Bissias, M. Liberatore, D. Jensen, and B. Levine, "Privacy Vulnerabilities in Encrypted HTTP Streams", Proceedings of Privacy Enhancing Technologies Workshop, pp. 1-11, 2005.
14. T.T.T. Nguyen and G. Armitage, "A Survey of Techniques for Internet Traffic Classification using Machine Learning", to appear in IEEE Communications Surveys and Tutorials, 2008.
15. T. Karagiannis, K. Papagiannaki, and M. Faloutsos, "BLINC: multilevel traffic classification in the dark", ACM SIGCOMM Comput. Commun. Rev., pp. 229-240, 2005.
16. C. S. Burrus, R. A. Gopinath, and H. Guo, Introduction to Wavelets and Wavelets Transforms, a Primer, Upper Saddle River, NJ, Prentice Hall, 1998.
17. M. Crotti, M. Dusi, F. Gringoli, L. Salgarelli, "Detecting HTTP Tunnels with Statistical Mechanisms", IEEE International Conference on Communications (ICC) '07, pp.6162-6168, 2007.
18. A. Hampapur and R. M. Bolle, "Comparison of distance measures for video copy detection", Proceedings of IEEE Int. Conf. Multimedia and Expo (ICME), pp. 737-740, Aug. 2001.
19. "Video traces for network performance evaluation", [Online]. Available: http://www.tkn.tuberlin.de/research/trace/trace.html
20. A. R. Reibman, S. Sen, and J. V. der Merwe, "Network monitoring for video quality over IP", Picture Coding Symposium, 2004.
21. A. Vetro, C. Christopoulos, and H. Sun, "Video transcoding architectures and techniques: an overview", Signal Processing Magazine, IEEE, vol. 20, no. 2, pp. 18-29, Mar 2003.
22. C. Rowland, http://www.firstmonday.dk/issues/issue25/rowland/
23. S. Lipner, "A comment on the confinement problem," Fifth symposium on Operating systems principles, pp. 192-197, Nov. 1975.
24. Y. Liu, K. Chiang, C. Corbett, R. Archibald, B. Mukherjee, and D. Ghosal, "A novel audio Steganalysis based on high order statistics of a distortion measure with Hausdorff distance", 11th Information Security Conference(ISC) 2008, Lecture Notes in Computer Science, Vol. 5222, pp. 487-500.
25. H. Ozer, I. Avcibas, B. Sankur, and N. Memon, "Steganalysis of audio based on audio quality metrics", Security and Watermarking of Multimedia Contents, pp. 55-66. Santa Clara, 2003.
26. D. P. Huttenlocher, D. Klanderman, and W.J. Rucklidge, "Comparing images using the Hausdorff distance", IEEE Transactions on Pattern Analysis and Machine Intelligence, vol. 15, pp. 850-863, 1993.
27. H. Farid, "Detecting hidden messages using higherorder statistical models", IEEE International Conference on Image Processing, vol. 2, pp. 905-908, 2002.
28. Y. Q. Shi, G. Xuan, C. Yang, J. Gao, Z. Zhang, P. Chai, D. Zou, C. Chen, and W. Chen, "Effective Steganalysis Based on Statistical Moments of Wavelet Characteristic Function", IEEE International Conference on Information Technology, pp. 1195-1198, 2005.