Accession Number:

ADA624449

Title:

Efficient Tracking, Logging, and Blocking of Accesses to Digital Objects

Descriptive Note:

Final rept. Sep 2012-Mar 2015

Corporate Author:

NORTH CAROLINA UNIV AT CHAPEL HILL

Report Date:

2015-09-01

Pagination or Media Count:

77.0

Abstract:

In this project, the performer moved the field of digital provenance forward by designing and implementing techniques for following the chain of custody of data in a virtualized environment. Specifically, the goals were to provide an approach for tracking accesses to objects that originate from disk, and capture subsequent accesses to these objects in memory. To that end, one key capability provided is an accurate, and efficient, tracking and reconstruction mechanism for collating and storing events collected at different levels of abstraction. The effort also provided a rich interface for managing and mining the captured information, thereby providing deeper insights into what transpired after a compromise has been detected e.g., a suspicious transfer of data to an external device or modification of files. Additionally, capabilities to not only record, but to also deny unauthorized accesses or transfer of data from objects within a protected data store e.g., a disk partition for which provenance tracking has been enabled.

Subject Categories:

  • Computer Programming and Software
  • Computer Systems Management and Standards

Distribution Statement:

APPROVED FOR PUBLIC RELEASE