TY - GEN
T1 - Knowledge acquisition and insider threat prediction in relational database systems
AU - Yaseen, Qussai
AU - Panda, Brajendra
PY - 2009
Y1 - 2009
N2 - This paper investigates the problem of knowledge acquisition by an unauthorized insider using dependencies between objects in relational databases. It defines various types of knowledge. In addition, it introduces the Neural Dependency and Inference Graph (NDIG), which shows dependencies among objects and the amount of knowledge that can be inferred about them using dependency relationships. Moreover, it introduces an algorithm to determine the knowledgebase of an insider and explains how insiders can broaden their knowledge about various relational database objects to which they lack appropriate access privileges. In addition, it demonstrates how NDIGs and knowledge graphs help in assessment of insider threats and what security officers can do to avoid such threats.
AB - This paper investigates the problem of knowledge acquisition by an unauthorized insider using dependencies between objects in relational databases. It defines various types of knowledge. In addition, it introduces the Neural Dependency and Inference Graph (NDIG), which shows dependencies among objects and the amount of knowledge that can be inferred about them using dependency relationships. Moreover, it introduces an algorithm to determine the knowledgebase of an insider and explains how insiders can broaden their knowledge about various relational database objects to which they lack appropriate access privileges. In addition, it demonstrates how NDIGs and knowledge graphs help in assessment of insider threats and what security officers can do to avoid such threats.
UR - https://www.scopus.com/pages/publications/70849118355
U2 - 10.1109/CSE.2009.159
DO - 10.1109/CSE.2009.159
M3 - Conference contribution
AN - SCOPUS:70849118355
SN - 9780769538235
T3 - Proceedings - 12th IEEE International Conference on Computational Science and Engineering, CSE 2009
SP - 450
EP - 455
BT - Proceedings - 12th IEEE International Conference on Computational Science and Engineering, CSE 2009 - 2009 IEEE International Conference on Privacy, Security, Risk, and Trust, PASSAT 2009
T2 - 2009 IEEE International Conference on Privacy, Security, Risk, and Trust, PASSAT 2009
Y2 - 29 August 2009 through 31 August 2009
ER -