Accession Number:

ADA552461

Title:

Anomaly Detection at Multiple Scales (ADAMS)

Descriptive Note:

Final rept. 14 Apr-13 Oct 2011

Corporate Author:

ALLURE SECURITY TECHNOLOGY INC NEW YORK NY

Personal Author(s):

• Thompson, Hugh
• Stolfo, Salvatore J.
• Keromytis, Angelos D.
• Hershkop, Shlomo

Report Date:

2011-11-09

Pagination or Media Count:

74.0

Abstract:

The recent disclosure of sensitive and classified government documents through Wikileaks demonstrates a new systemic threat, exfiltration and broad global broadcast of government confidential data and information. Allure Security Technology Inc., a Columbia University spinout company, is developing techniques and mechanisms to identify likely malicious insiders by leveraging automatically generated misinformation and system and network monitoring technologies such as Data Leak Prevention DLP. We are developing a baseline system that will demonstrate the feasibility of identifying specific types of insiders by developing a prototype for automatically generating and distributing believable misinformation based upon operator-defined templates, and then tracking access and attempted misuse of it. We call this disinformation technology, FOG computing.

Descriptors:

• *DETECTION
• *INFORMATION SECURITY
• ANOMALIES
• BEHAVIOR
• COMPUTER NETWORKS
• DECOYS
• INTERNAL
• MONITORING
• THREATS

Subject Categories:

• Computer Systems Management and Standards

Distribution Statement:

APPROVED FOR PUBLIC RELEASE