loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Yi Hu ; Rubaiyat Hossain ; Papa Seye and Sri Vasireddy

Affiliation: Northern Kentucky University, United States

Keyword(s): Intrusion Detection, Data Mining, Data Exfiltration, Insider Attack

Abstract: This paper illustrates a novel approach for identifying data exfiltration activities by mining Microsoft Windows Registry. It often takes outsider attackers a significant amount of efforts to identify the vulnerabilities in the system or applications and launch the exploit payloads to compromise a system. However insider attackers with legitimate access control privileges can easily steal data and sell data to a third party. Many companies spend lots of money defending network perimeters and applications from outsider attacks but only pay little attention to the insider threat. Although there are existing research efforts ad-dressing various aspects of insider attacks, little research focuses on data exfil-tration detection. The proposed model in this paper employs a data mining method to profile USB device usage patterns and uses various statistical methods to identify anomalous USB device usages. The effectiveness of the model was tested with USB access history extracted from the W indows Registry. (More)

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.144.29.213

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Hu, Y.; Hossain, R.; Seye, P. and Vasireddy, S. (2012). Mining Windows Registry for Data Exfiltration Detection. In Proceedings of the 9th International Workshop on Security in Information Systems (ICEIS 2012) - WOSIS; ISBN 978-989-8565-15-0, SciTePress, pages 101-108. DOI: 10.5220/0004100101010108

@conference{wosis12,
author={Yi Hu. and Rubaiyat Hossain. and Papa Seye. and Sri Vasireddy.},
title={Mining Windows Registry for Data Exfiltration Detection},
booktitle={Proceedings of the 9th International Workshop on Security in Information Systems (ICEIS 2012) - WOSIS},
year={2012},
pages={101-108},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0004100101010108},
isbn={978-989-8565-15-0},
}

TY - CONF

JO - Proceedings of the 9th International Workshop on Security in Information Systems (ICEIS 2012) - WOSIS
TI - Mining Windows Registry for Data Exfiltration Detection
SN - 978-989-8565-15-0
AU - Hu, Y.
AU - Hossain, R.
AU - Seye, P.
AU - Vasireddy, S.
PY - 2012
SP - 101
EP - 108
DO - 10.5220/0004100101010108
PB - SciTePress

- Science and Technology Publications, Lda.
RESOURCES

Proceedings

Papers

Authors

Ontology

CONTACTS

Science and Technology Publications, Lda
Avenida de S. Francisco Xavier, Lote 7 Cv. C,
2900-616 Setúbal, Portugal.

Phone: +351 265 520 185 (National fixed network call)
Fax: +351 265 520 186
Email: info@scitepress.org

EXTERNAL LINKS

PRIMORIS

INSTICC

SCITEVENTS

CROSSREF

PROCEEDINGS SUBMITTED FOR INDEXATION BY:

dblp

Ei Compendex

SCOPUS

Semantic Scholar

Google Scholar

Microsoft Academic