文章基本信息

标题：M-Score: A Misusability Weight Measure for Insider Attack Detection in DBMS
本地全文：下载
作者：A.Aruna ; M.Sayee kumar ; T.Aravind 等
期刊名称：International Journal of Innovative Research in Science, Engineering and Technology
印刷版ISSN：2347-6710
电子版ISSN：2319-8753
出版年度：2015
期号：MULTICON
页码：214
出版社：S&S Publications
摘要：Data stored in an organization’s computers is extremely important and embodies the core of theorganization’s power. An organization undoubtedly wants to preserve and retain this power. On the other hand, thisdata is necessary for daily work processes. Users within the organization’s perimeter (e.g., employees, subcontractors,or partners) perform various actions on this data (e.g., query, report, and search) and may be exposed to sensitiveinformation embodied within the data they access. In an effort to determine the extent of damage to an organization thata user can cause using the information she has obtained, we introduce the concept of Misuseability Weight.The M-score measure is tailored for tabular data sets (e.g., result sets of relational database queries) andcannot be applied to no tabular data such as intellectual property, business plans, etc. It is a domain independentmeasure that assigns a score, which represents the misuse ability weight of each table exposed to the user, by using asensitivity score function acquired from the domain expert. By assigning a score that represents the sensitivity level ofthe data that a user is exposed to, the misuseability weight can determine the extent of damage to the organization if thedata is misused. Using this information, the organization can then take appropriate steps to prevent or minimize thedamage.