Skip to main content

Mitigating Insider Threat on Database Integrity

  • Conference paper

Part of the Lecture Notes in Computer Science book series (LNSC,volume 7671)

Abstract

We have developed a model to predict and prevent potential damage caused by malicious transactions in a database system. The model consists of a number of rules sets that constrain the relationships among data items and transactions. It uses a graph called Predictive Dependency Graph to determine data flow patterns among data items. The model offers a mechanism to monitor suspicious insiders activities and potential harm to the database. Through simulation we have tested the effectiveness of the model. The results show the effectiveness of the proposed model in predicting damage that can occur by malicious transactions.

Keywords

  • Insider Threat
  • Malicious Transactions
  • Database Systems
  • Security

This is a preview of subscription content, access via your institution.

Buying options

Chapter
USD   29.95
Price excludes VAT (Canada)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   39.99
Price excludes VAT (Canada)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   54.99
Price excludes VAT (Canada)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Mills, R.F., Peterson, G.L., Grimaila, M.R.: In: Knapp, K.J. (ed.) Cyber Security and Global Information Assurance: Threat Analysis and Response Solution, U.S. Air Force Academy, Colorado, USA (2009)

    Google Scholar 

  2. Clark, D., Wilson, D.: A comparison of Commercial and Military Computer Security Policies. In: IEEE Symposium on Security & Privacy (1987)

    Google Scholar 

  3. Chung, C., Gertz, M., Levitt, K.: Demids: A misuse detection system for database systems. In: 14th IFIP WG11.3 Working Conference on Database and Application Security (2000)

    Google Scholar 

  4. Lee, S.Y., Low, W.L., Wong, P.Y.: Learning Fingerprints for a Database Intrusion Detection System. In: Gollmann, D., Karjoth, G., Waidner, M. (eds.) ESORICS 2002. LNCS, vol. 2502, pp. 264–279. Springer, Heidelberg (2002)

    CrossRef  Google Scholar 

  5. Kamra, A., Bertino, E., Terzi, E.: Detecting anomalous access patterns in relational databases. J. VLDB 17(5), 1063–1077 (2008)

    CrossRef  Google Scholar 

  6. Hu, Y., Panda, B.: Design and Analysis of Techniques for Detection of Malicious Activities in Database System. J. Network and System Management 13(3), 111–125 (2005)

    Google Scholar 

  7. Lee, W., Stolfo, S.J.: A framework for constructing features and models for intrusion detection system. ACM Transactions on Information and System Security 3(4), 227–261 (2000)

    CrossRef  Google Scholar 

  8. Meng, Y., Liu, P., Zang, W.: Multi-Version Attack Recovery for Workflow Systems. In: 19th Annual Computer Security Applications Conference (2003)

    Google Scholar 

  9. Srivastava, A., Sural, S., Majumdar, A.K.: Weighted Intra-transactional Rule Mining for Database Intrusion Detection. In: Ng, W.-K., Kitsuregawa, M., Li, J., Chang, K. (eds.) PAKDD 2006. LNCS (LNAI), vol. 3918, pp. 611–620. Springer, Heidelberg (2006)

    CrossRef  Google Scholar 

  10. Ray, I., Poolsapassit, N.: Using Attack Trees to Identify Malicious Attacks from Authorized Insiders. In: De Capitani di Vimercati, S., Syverson, P.F., Gollmann, D. (eds.) ESORICS 2005. LNCS, vol. 3679, pp. 231–246. Springer, Heidelberg (2005)

    CrossRef  Google Scholar 

  11. Martinez-Moyano, I., Rich, E., Conrad, S., Anderson, D.F., Stewart, T.R.: A Behavioral Theory of Insider-Threat Risk: A System Dynamic Approach. ACM Transactions on Modeling and Computer Simulation 18(2) (2008)

    Google Scholar 

  12. Yaseen, Q., Panda, B.: Predicting and Preventing Insider Threat in Relational Database Systems. In: Samarati, P., Tunstall, M., Posegga, J., Markantonakis, K., Sauveron, D. (eds.) WISTP 2010. LNCS, vol. 6033, pp. 368–383. Springer, Heidelberg (2010)

    CrossRef  Google Scholar 

  13. Yaseen, Q., Panda, B.: Malicious Modification attacks by Insiders in Relational Databases: Prediction and Prevention. In: 2nd IEEE International Conference on Information Privacy, Security, Risk and Trust (2010)

    Google Scholar 

  14. Newman, A.: Database Activity Monitoring: Intrusion Detection & Security Auditing. DAM Whitepaper, http://www.appsecinc.com/presentations/DAM_wp82305.pdf

  15. Mogull, R.: Understanding and Selecting a Database Activity Monitoring Solution, http://www.securosis.com/reports/DAM-Whitepaper-final.pdf

Download references

Author information

Authors and Affiliations

Authors

Editor information

Editors and Affiliations

Rights and permissions

Reprints and Permissions

Copyright information

© 2012 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Li, W., Panda, B., Yaseen, Q. (2012). Mitigating Insider Threat on Database Integrity. In: Venkatakrishnan, V., Goswami, D. (eds) Information Systems Security. ICISS 2012. Lecture Notes in Computer Science, vol 7671. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-35130-3_16

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-35130-3_16

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-35129-7

  • Online ISBN: 978-3-642-35130-3

  • eBook Packages: Computer ScienceComputer Science (R0)