Predicting and preventing insider threat in relational database systems

Authors:
Qussai Yaseen;Brajendra Panda
Affiliations:
Dept. of Computer Science and Computer Engineering, University of Arkansas, Fayetteville, AR;Dept. of Computer Science and Computer Engineering, University of Arkansas, Fayetteville, AR
Venue:
WISTP'10 Proceedings of the 4th IFIP WG 11.2 international conference on Information Security Theory and Practices: security and Privacy of Pervasive Systems and Smart Devices
Year:
2010

Citing 8
Cited 2

Secure Databases: Constraints, Inference Channels, and Monitoring Disclosures

IEEE Transactions on Knowledge and Data Engineering
The inference problem: a survey

ACM SIGKDD Explorations Newsletter
Data Level Inference Detection in Database Systems

CSFW '98 Proceedings of the 11th IEEE workshop on Computer Security Foundations
The inference problem and updates in relational databases

Das'01 Proceedings of the fifteenth annual working conference on Database and application security
Honeypots: Catching the Insider Threat

ACSAC '03 Proceedings of the 19th Annual Computer Security Applications Conference
Defining the insider threat

Proceedings of the 4th annual workshop on Cyber security and information intelligence research: developing strategies to meet the cyber security and information intelligence challenges ahead
Insider Threat in Database Systems: Preventing Malicious Users' Activities in Databases

ITNG '09 Proceedings of the 2009 Sixth International Conference on Information Technology: New Generations
Knowledge Acquisition and Insider Threat Prediction in Relational Database Systems

CSE '09 Proceedings of the 2009 International Conference on Computational Science and Engineering - Volume 03

Enhanced insider threat detection model that increases data availability

ICDCIT'11 Proceedings of the 7th international conference on Distributed computing and internet technology
Tackling Insider Threat in Cloud Relational Databases

UCC '12 Proceedings of the 2012 IEEE/ACM Fifth International Conference on Utility and Cloud Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper investigates the problem of insider threat in relational database systems. It defines various types of dependencies as well as constraints on dependencies that may be used by insiders to infer unauthorized information. Furthermore, it introduces the Constraint and Dependency Graph (CDG), and the Dependency Matrix that are used to represent dependencies and constraints on them. Furthermore, it presents an algorithm for constructing insiders knowledge graph, which shows the knowledgebase of insiders. In addition, the paper introduces the Threat Prediction Graph (TPG) to predict and prevent insider threat.