Zimmer, Ephraim ; Lindemann, Jens ; Herrmann, Dominik ; Federrath, Hannes
Hrsg.: Camenisch, Jan ; Kesdogan, Dogan (2016)
Catching Inside Attackers: Balancing Forensic Detectability and Privacy of Employees.
International Workshop on Open Problems in Network Security (iNetSec 2015). Zurich, Switzerland (29.10.2015-29.10.2015)
doi: 10.1007/978-3-319-39028-4_4
Konferenzveröffentlichung, Bibliographie
Kurzbeschreibung (Abstract)
IT departments of organisations go to great lengths to protect their IT infrastructure from external attackers. However, internal attacks also pose a large threat to organisations. Despite detection and prevention of insider attacks being an active field of research, so far such techniques are rarely being deployed in practice. This paper outlines the state of the art in the field and identifies open research problems in the area. The lack of unified definitions and publicly available datasets for evaluation is detrimental to the comparability of published results in the field and hinders the continual improvement of technology. Another important problem is that of data protection: On the one hand, the data captured for insider attack detection could also be used for surveillance of employees, so it should be anonymised. On the other hand, anonymisation may make some attacks undetectable, leading to a trade-off between detectability of attacks and privacy.
| Typ des Eintrags: | Konferenzveröffentlichung |
|---|---|
| Erschienen: | 2016 |
| Herausgeber: | Camenisch, Jan ; Kesdogan, Dogan |
| Autor(en): | Zimmer, Ephraim ; Lindemann, Jens ; Herrmann, Dominik ; Federrath, Hannes |
| Art des Eintrags: | Bibliographie |
| Titel: | Catching Inside Attackers: Balancing Forensic Detectability and Privacy of Employees |
| Sprache: | Englisch |
| Publikationsjahr: | 1 Mai 2016 |
| Verlag: | Springer |
| Buchtitel: | Open Problems in Network Security : IFIP WG 11.4 International Workshop, iNetSec 2015 |
| Veranstaltungstitel: | International Workshop on Open Problems in Network Security (iNetSec 2015) |
| Veranstaltungsort: | Zurich, Switzerland |
| Veranstaltungsdatum: | 29.10.2015-29.10.2015 |
| DOI: | 10.1007/978-3-319-39028-4_4 |
| Kurzbeschreibung (Abstract): | IT departments of organisations go to great lengths to protect their IT infrastructure from external attackers. However, internal attacks also pose a large threat to organisations. Despite detection and prevention of insider attacks being an active field of research, so far such techniques are rarely being deployed in practice. This paper outlines the state of the art in the field and identifies open research problems in the area. The lack of unified definitions and publicly available datasets for evaluation is detrimental to the comparability of published results in the field and hinders the continual improvement of technology. Another important problem is that of data protection: On the one hand, the data captured for insider attack detection could also be used for surveillance of employees, so it should be anonymised. On the other hand, anonymisation may make some attacks undetectable, leading to a trade-off between detectability of attacks and privacy. |
| Zusätzliche Informationen: | Part of the Lecture Notes in Computer Science book series (LNCS, volume 9591) |
| Fachbereich(e)/-gebiet(e): | 20 Fachbereich Informatik 20 Fachbereich Informatik > Telekooperation |
| Hinterlegungsdatum: | 04 Feb 2021 10:17 |
| Letzte Änderung: | 05 Feb 2021 09:21 |
| PPN: | |
| Export: | |
| Suche nach Titel in: | TUfind oder in Google |
 |
Frage zum Eintrag |
Optionen (nur für Redakteure)
 |
Redaktionelle Details anzeigen |
Drucken
Impressum