Detecting data misuse by applying context-based data linkage

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2010, Pages 3-11

  Gafny, Ma'ayan ^a   Shabtai, Asaf ^a   Rokach, Lior ^a   Elovici, Yuval ^a  

^a BEN GURION UNIVERSITY OF THE NEGEV   (Israel)

Author keywords

data leakage; data misuse; information leakage; insider threat

Indexed keywords

BEHAVIORAL MODEL; CONTEXT-BASED; CONTEXTUAL FEATURE; CRITICAL DATA; DATA LEAKAGE; DATA LINKAGE; DATA MISUSE; INFORMATION LEAKAGE; INSIDER THREAT; LEARNING PHASE; MACHINE LEARNING ALGORITHMS; NEW APPROACHES; SECURITY OFFICERS; SENSITIVE DATAS; SHAREHOLDER VALUES;

LEARNING ALGORITHMS; SHAREHOLDERS;

BEHAVIORAL RESEARCH;

EID: 78650097664     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1866886.1866890     Document Type: Conference Paper

References (23)

1. Chung, C.Y., Gertz, M., and Levitt, K. 1999. DEMIDS: A Misuse Detection System for Database Systems. In proceedings of the Conference on Integrity and Internal Control in Information Systems, 159-178.
2. 2010 CyberSecurity Watch Survey, http://www.cert.org/archive/pdf/ ecrimesummary10.pdf
3. Kamra, A., Terzi, E., Evimaria, and Bertino, E. 2008. Detecting Anomalous Access Patterns in Relational Databases. International Journal on Very Large Databases, 17, 5, 1063-1077.
4. Sunu, M., Michalis, P., Hung, N., and Shambhu, U. 2009. A Data-Centric Approach to Insider Attack Detection in Database Systems. Technical Report.
5. Fellegi, I. P., and Sunter, A. B. 1969. A theory for Record Linkage. Journal of American Statistical Society , 64, 328, 1183-1210.
6. Newcombe, H. B., and Kennedy, J. M. 1962. Record linkage: making maximum use of the discriminating power of identifying information. Communications of the ACM , 5, 11, 563-566.
7. Christen, P., and Goiser, K. 2007. Quality and Complexity Measures for Data Linkage and Deduplications. In Quality Measures in Data Mining, F. Guillet, and H. J. Hammilton Ed. Springer,Berlin / Heidelberg. 127-151.
8. Cohen W.W. 1998. Integration of heterogeneous databases without common domains using queries based on textual similarity. In Proceedings of ACM SIGMOD, Seattle, 201-212.
9. Galhardas, H., Florescu, D., and Shasha, D., Simon, E. 2000. An extensible framework for data cleaning. In Proceedings of ICDE, 312.
10. Nahm, U.Y., Bilenko, M., and Mooney, R.J. 2002. Two approaches to handling noisy variation in text mining. In Proceedings of the ICML-2002 workshop on text learning (Sydney, Australia), 18-27.
11. Mccallum, A., Nigam, K., and Ungar, L.H. 2000. Efficient clustering of high-dimensional datasets with application to reference matching. In Proceedings of ACM SIGKDD, Boston, 169-178.
12. Gu, L., and Baxter, R. 2004. Decision models for record linkage. In Proceedings of the 3rd Australasian data mining conference, Cairns, 241-254.
13. Sarawagi, S., Bhamidipaty, A. 2002. Interactive deduplication using active learning. In Proceedings of ACM SIGKDD, Edmonton, 269-278.
14. Fonseca, J., Vieira, M., and Madeira, H. 2008. Online Detection of Malicious Data Access Using DBMS Auditing. In Proceedings of the 2008 ACM symposium on Applied Computing, 1013-1020.
15. Hu, Y., and Panda, B. 2003. Identification of Malicious Transactions in Database Systems. In Proceedings of 7th International Symposium on Database Engineering and Applications, 329-335.
16. Lee, S.Y., Low, W.L. and Wong, P.Y. 2002. Learning Fingerprints for a Database Intrusion Detection System. In Proceedings of the ESORICS, (Zurich, Switzerland, October 14-16, 2002). 2502, 2002, 264-279.
17. Spalka, E., and Lehnhardt, J. 2005. A Comprehensive Approach to Anomaly Detection in Relational Databases. In Proceedings of the Annual Working Conference on Data and Applications Security. 3654, 2005, 207-211.
18. Srivastava, A., Sural, S., and Majumdar, A.K. 2006. Database Intrusion Detection using Weighted Sequence Mining. Journal of Computers, 1, 4. 8-17.
19. Wenhui, S., and Tan, D. 2001. A novel intrusion detection system model for securing web-based database systems. In IEEE Proceedings of the 25th International Computer Software and Applications Conference on Invigorating Software Development.
20. Valeur , F., Mutz, D., and Vigna, G. 2005. A Learning-Based Approach to the Detection of SQL Attacks. In Proceedings of the Conference on Detection of Intrusions and Malware & Vulnerability Assessment.
21. Quinlan, J.R. 1993. C4. 5: programs for machine learning. Morgan Kaufmann.
22. Frank, E., Hall, M. A., Holmes, G., Kirkby, R., and Pfahringer, B. 2005. WEKA - A Machine Learning Workbench for Data Mining. The Data Mining and Knowledge Discovery Handbook, 1305-1314.
23. Ferri, C., Flach, P., and Hernández-Orallo, J. 2002. Learning Decision Trees Using the Area Under the ROC Curve. In Proceedings of the Nineteenth International Conference on Machine Learning. 139-146.