Paper Info
Title
Insider Threats: Identifying Anomalous Human Behaviour in Heterogeneous Systems Using Beneficial Intelligent Software (Ben-ware)
Abstract
In this paper, we present the concept of \"Ben-ware\" as a beneficial software system capable of identifying anomalous human behaviour within a 'closed' organisation's IT infrastructure. We note that this behaviour may be malicious (for example, an employee is seeking to act against the best interest of the organisation by stealing confidential information) or benign (for example, an employee is applying some workaround to complete their job). To help distinguish between users who are intentionally malicious and those who are benign, we use human behaviour modelling along with Artificial Intelligence. Ben-ware has been developed as a distributed system comprising of probes for data collection, intermediate nodes for data routing and higher nodes for data analysis. This allows for real-time analysis with low impact on the overall infrastructure, which may contain legacy and low-power resources. We present an analysis of the appropriateness of the Ben-ware system for deployment within a large closed organisation, comprising of both new and legacy hardware, to protect its essential information. This analysis is performed in terms of the memory footprint, disk footprint and processing requirements of the different parts of the system.
Year
DOI
Venue
2015
10.1145/2808783.2808785
MIST@CCS
Field
DocType
Citations 
Workaround,Software deployment,Computer science,Computer security,Software system,Insider,Software,Information technology management,Memory footprint,Legacy system
Conference
1
PageRank 
References 
Authors
0.36
12
10
Name
Order
Citations
PageRank
Andrew Stephen Mcgough110511.18
David Wall210.70
John Brennan3184.36
Georgios K. Theodoropoulos418920.78
Ed Ruck-Keene510.36
Budi Arief618718.45
Carl Gamble7344.72
John S. Fitzgerald842141.71
Aad P. A. Van Moorsel972982.85
Sujeewa Alwis1041.54