Detection of anomalous insiders in collaborative environments via relational analysis of access logs

CODASPY'11 - Proceedings of the 1st ACM Conference on Data and Application Security and Privacy

Volumn , Issue , 2011, Pages 63-74

  Chen, You ^a   Malin, Bradley ^a  

^a VANDERBILT UNIVERSITY MEDICAL CENTER   (United States)

Author keywords

DataMining; Insider threat detection; Privacy; Social network analysis

Indexed keywords

ACCESS LOG; ANOMALY DETECTION; ANOMALY DETECTION MODELS; ANOMALY DETECTION SYSTEMS; COLLABORATIVE ENVIRONMENTS; COLLABORATIVE INFORMATION SYSTEMS; COMMUNITY STRUCTURES; COMPLEX BEHAVIOR; DATA SETS; DEGREE OF CERTAINTY; ELECTRONIC HEALTH RECORD SYSTEMS; FILE SYSTEMS; INSIDER THREAT; INSIDER THREAT DETECTIONS; INTELLIGENCE AGENCIES; MALICIOUS INSIDERS; MEDICAL CENTER; PATTERN EXTRACTION; PERFORMANCE GAIN; PRIVACY; SECURITY MECHANISM; SENSITIVE INFORMATIONS; SOCIAL NETWORK ANALYSIS; STATISTICAL MODELS; THREAT DETECTION; USER BEHAVIORS;

BEHAVIORAL RESEARCH; COMPUTER SIMULATION; DATA PRIVACY; DATA PROCESSING; DATA STRUCTURES; DISTRIBUTED COMPUTER SYSTEMS; ELECTRIC NETWORK ANALYSIS; ELECTRONIC DOCUMENT EXCHANGE; HEALTH CARE; HEALTH RISKS; MEDICAL COMPUTING; NETWORK SECURITY; RECORDS MANAGEMENT;

MATHEMATICAL MODELS;

EID: 79952805765     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1943513.1943524     Document Type: Conference Paper

References (44)

1. L. Adamic and E. Adar. Friends and neighbors on the web. Social Networks, 25:211-230, 2003. (Pubitemid 36831776)
2. G. Ahn, D. Shin, and L. Zhang. Role-based privilege management using attribute certificates and delegation. In Proceedings of the International Conference on Trust and Privacy in Digital Business, pages 100-109, 2004.
3. G. Ahn, L. Zhang, D. Shin, and B. Chu. Authorization management for role-based collaboration. In Proceedings of IEEE International Conference on System, Man and Cybernetic, pages 4128-4214, 2003.
4. st SIAM International Conference on Data Mining, 2001.
5. V. Bellotti and S. Bly. Walking away from the desktop computer: distributed collaboration and mobility in a product design team. In Proceedings of the 1996 ACM Conference on Computer Supported Cooperative Work, pages 209-218, 1996.
6. F. Benaben, J. Touzi, V. Rajsiri, and H.Pingaud. Collaborative information system design. In Proceedings of International Conference of the Association Information and Management, pages 281-296, 2006.
7. A. Bullock and S. Benford. An access control framework for multi-user collaborative environments. In Proceedings of the ACM SIGGROUP Conference on Supporting Group Work, pages 140-149, 1999.
8. A. Chapanond, M. Krishnamoorthy, and B. Yener. Graph theoretic and spectral analysis of Enron email data. Computational and Mathematical Organization Theory, 11:265-281, 2005. (Pubitemid 43118970)
9. R. Charette. Kaiser Permanente marks completion of its electronic health records implementation. IEEE Spectrum, March 8 2010.
10. L. Eldenburg, N. Soderstrom, V. Willis, and A. Wu. Behavioral changes following the collaborative development of an accounting information system. Accounting, Organizations and Society, 35(2):222-237, 2010.
11. C. Georgiadis, I. Mavridis, G. Pangalos, and R. Thomas. Flexible team-based access control using contexts. In Proceedings of ACM Symposium on Access Control Model and Technology, pages 21-27, 2001.
12. D. Giuse. Supporting communication in an integrated patient record system. In Proceedings of the 2003 American Medical Informatics Association Annual Symposium, page 1065, 2003. 73.
13. T. Gruber. Collective knowledge systems: where the social web meets the semantic web. Journal of Web Semantics, 6(1):4-13, 2007.
14. Z. He, X. Xu, and S. Deng. Discovering cluster-based local outliers. Pattern Recognition Letters, 24(9-10):1641 - 1650, 2003.
15. C. Huang, T. Li, H. Wang, and C. Chang. A collaborative support tool for creativity learning: Idea storming cube. In Proceedings of the 2007 IEEE International Conference on Advanced Learning Technologies, pages 31-35, 2007.
16. J.A.Hartigan and M.A.Wong. A k-means clustering algorithm. Appl. Stat, 28:104-108, 1979.
17. S. Javanmardi and C. Lopes. Modeling trust in collaborative information systems. In Proceedings of the 2007 International Conference on Collaborative Computing: Networking, Applications and Worksharing, pages 299-302, 2007.
18. R. Kannan, S. Vempala, and A. Vetta. On clusterings: Good, bad and spectral. Journal of the ACM, 51(3):497-515, 2004.
19. T. Kohonen. Self-organizing maps. Springer Series in Information Sciences, 78(9):1464 - 1480, 1997.
20. th ACM Symposium on Access Control Models and Technologies, pages 179-186, 2003.
21. th International Conference on World Wide Web, pages 695-704, 2008.
22. J. Leskovec, K. J. Lang, A. Dasgupta, and M. W. Mahoney. Community Structure in Large Networks: Natural Cluster Sizes and the Absence of Large Well-Defined Clusters. Computing Research Repository, abs/0810.1355, 2008.
23. Y. Liao and V. R. Vemuri. Use of k-nearest neighbor classifier for intrusion detection. Computer Security, 21(5):439-448, 2002. (Pubitemid 34835644)
24. H. Liu. Social network profiles as taste performances. Journal of Computer-Mediated Communication, 13:252-275, 2008.
25. B. Malin and K. Carley. A longitudinal social network analysis of the editorial boards of medical informatics and bioinformatics journals. Journal of the American Medical Informatics Association, 14(3):340-347, 2007.
26. N. Menachemi and R. Brooks. Reviewing the benefits and costs of electronic health records and associated patient safety technologies. Journal of Medical Systems, 30(3):159-168, 2008. (Pubitemid 44060918)
27. th ACM Symposium on Access Control Models and Technologies, pages 21-30, 2008.
28. J. Neville, M. Adler, and D. Jensen. Clustering relational data using attribute and link information. In Proceedings of the IJCAI Text Mining and Link Analysis Workshop, 2003.
29. J. Park, R. Sandhu, and G. Ahn. Role-based access control on the web. ACM Transactions on Information and System Security, 4(1):37-71, 2001.
30. D. Pokrajac, A. Lazarevic, and L. Latecki. Incremental local outlier detection for data streams. In Proceedings of the IEEE Symposium on Computational Intelligence and Data Mining, pages 504-515, 2007. (Pubitemid 47431481)
31. R. Popp. Countering terrorism through information technology. Communications of the ACM, 47(3):36-43, 2004.
32. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, 1996.
33. P. Sarkar and A. Moore. Dynamic social network analysis using latent space models. ACM SIGKDD Explorations, 7:31-40, 2005.
34. J. Shi and J. Malik. Normalized cuts and image segmentation. IEEE Transcations of Pattern Analysis and Machine Intelligence, 22(8):888-905, 2002.
35. J. Shlens. A Tutorial on Principal Component Analysis. Institute for Nonlinear Science, University of California at San Diego, 2005.
36. M. Shyu, S. Chen, K. Sarinnapakorn, and L. Chang. A novel anomaly detection scheme based on principal component classifier. In IEEE Foundations and New Directions of Data Mining Workshop, pages 172-179, 2003.
37. K. Sikkel. A group-based authorization model for cooperative systems. In Proceedings of ACM Conference on Computer-Supported Cooperative Work, pages 345-360, 1997.
38. Q. Song, W. Hu, and W. Xie. Robust support vector machine with bullet hole image classification. IEEE Transactions on Systems, Man, and Cybernetics, 32(4):440-448, 2002.
39. J. Tang, Z. Chen, A. Fu, and D. Cheung. Enhancing effectiveness of outlier detections for low density patterns. In Proceedings of the Pacific-Asia Conference on Knowledge Discovery and Data Mining, pages 535-7548, 2002.
40. th International Conference on Database Security, pages 166-181, 1997.
41. th ACM Conference on Computer and Communications Security, pages 144-153, 2006. (Pubitemid 47131364)
42. L. von Ahn. Games with a purpose. IEEE Computer, pages 96-98, 2006.
43. M. von Korff, J. Gruman, J. Schaefer, S. Curry, and E. Wagner. Collaborative management of chronic illness. Annals of Internal Medicine, 127(12):1097-1102, 1997. (Pubitemid 28012080)
44. L. Zhang, G. Ahn, and B. Chu. A rule-based framework for role-based delegation and revocation. ACM Transactions on Information and System Security, 6(3):404-441, 2003.