Fine-Grain Document Access Modeling and Monitoring.

摘要

This project builds software tools to store documents in the PPS (Partial Persistent Sequence) system, monitor accesses to PPS documents, and analyze the access patterns to find cyber insider attacks. PPS uses a simple API access authorization scheme to thwart direct data transfer cyber insider attacks. A combination of fine-grained access monitoring data and statistical analysis on combined sub-sessions supports the effective detection (and prevention) of next generation cyber insider attacks that only steal minimized and targeted data transfers through legitimate APIs.