home › event - multi-domain information fusion for insider threat detection

EVENT:

Multi-domain Information Fusion for Insider Threat Detection
Conferences & Talks

2013 IEEE Workshop on Research for Insider Threat (WRIT)

24 May 2013
10:40am-12:15pm
San Francisco, California

 

description

Malicious insiders pose significant threats to information security, and yet the capability of detecting malicious insiders is very limited. Insider threat detection is known to be a difficult problem, presenting many research challenges. In this paper we report our effort on detecting malicious insiders from large amounts of work practice data. We propose novel approaches to detect two types of insider activities: (1) blend-in anomalies, where malicious insiders try to behave similar to a group they do not belong to, and (2) unusual change anomalies, where malicious insiders exhibit changes in their behavior that are dissimilar to their peers’ behavioral changes. Our first contribution focuses on detecting blend-in malicious insiders. We propose a novel approach by examining various activity domains, and detecting behavioral inconsistencies across these domains. Our second contribution is a method for detecting insiders with unusual changes in behavior. The key strength of this proposed approach is that it avoids flagging common changes that can be mistakenly detected by typical temporal anomaly detection mechanisms. Our third contribution is a method that combines anomaly indicators from multiple sources of information.

 

upcoming events   view all 

Human-Centered Designed Robots are All Around Us
Leila Takayama
29 September 2016
PARC Forum  

Stanford and PARC host Digital Cities Summit 2016
Victoria Bellotti, Panel Facilitator, Bernard Casse, Panelist, Sean Garner, Panelist, Stephen Hoover, Keynote Speaker, Matthew Klenk, Tolga Kurtoglu, Panel Facilitator, Markus Larsson, Speaker, Ersin Uzun, Panelist
3 October 2016 - 4 October 2016 | Stanford, CA
Conferences & Talks  

2016 Annual Conference of the Prognostics and Health Management Society
Parham Shahidi, Panelist, Rui Maranhão, Keynote Speaker
5 October 2016 - 6 October 2016 | Denver, CO
Conferences & Talks