Accession Number:

ADA610980

Title:

Deep Focus: Increasing User "Depth of Field" to Improve Threat Detection (Oxford Workshop Poster)

Descriptive Note:

Corporate Author:

CARNEGIE-MELLON UNIV PITTSBURGH PA SOFTWARE ENGINEERING INST

Report Date:

2014-10-01

Pagination or Media Count:

2.0

Abstract:

We believe insider threat detection methods can be improved by monitoring and analyzing features of user behavior not typically associated with indicators of malicious insider behavior. Anomalous behaviors and statistical outliers observed in such data sets may identify new indicators or help reduce high false positive rates associated with existing indicators.

Subject Categories:

  • Computer Systems Management and Standards

Distribution Statement:

APPROVED FOR PUBLIC RELEASE