Monitoring mission critical data for integrity and availability

  • Authors:
  • Michael Gertz;George Csaba

  • Affiliations:
  • Department of Computer Science, University of California at Davis;IPLocks Inc., Santa Clara

  • Venue:
  • Integrity and internal control in information systems V
  • Year:
  • 2003

Quantified Score

Hi-index 0.00

Visualization

Abstract

Protecting the integrity, confidentiality, and availability of mission critical data is one of the primary objectives of IT departments in industry, government, and research. Standard techniques to realize these objectives are often confined to network- and host-based intrusion detection systems, which are known to be inappropriate for handling security threats caused by insiders. This paper introduces the concept of data monitoring systems as an additional line of defense against external and internal security threats. These systems, which are closely coupled with a database managing mission critical data, provide IT personnel with effective means for specifying, detecting, and responding to anomalous behavior of data and data accesses caused by users and applications.