| 000 | 04558nam a22004935i 4500 | ||
|---|---|---|---|
| 001 | 978-3-031-01890-9 | ||
| 003 | DE-He213 | ||
| 005 | 20240730163442.0 | ||
| 007 | cr nn 008mamaa | ||
| 008 | 220601s2012 sz | s |||| 0|eng d | ||
| 020 |
_a9783031018909 _9978-3-031-01890-9 |
||
| 024 | 7 |
_a10.1007/978-3-031-01890-9 _2doi |
|
| 050 | 4 | _aTK5105.5-5105.9 | |
| 072 | 7 |
_aUKN _2bicssc |
|
| 072 | 7 |
_aCOM043000 _2bisacsh |
|
| 072 | 7 |
_aUKN _2thema |
|
| 082 | 0 | 4 |
_a004.6 _223 |
| 100 | 1 |
_aBertino, Elisa. _eauthor. _4aut _4http://id.loc.gov/vocabulary/relators/aut _978614 |
|
| 245 | 1 | 0 |
_aData Protection from Insider Threats _h[electronic resource] / _cby Elisa Bertino. |
| 250 | _a1st ed. 2012. | ||
| 264 | 1 |
_aCham : _bSpringer International Publishing : _bImprint: Springer, _c2012. |
|
| 300 |
_aXIII, 77 p. _bonline resource. |
||
| 336 |
_atext _btxt _2rdacontent |
||
| 337 |
_acomputer _bc _2rdamedia |
||
| 338 |
_aonline resource _bcr _2rdacarrier |
||
| 347 |
_atext file _bPDF _2rda |
||
| 490 | 1 |
_aSynthesis Lectures on Data Management, _x2153-5426 |
|
| 505 | 0 | _aIntroduction -- Authentication -- Access Control -- Anomaly Detection -- Security Information and Event Management and Auditing -- Separation of Duty -- Case Study: Oracle Database Vault -- Conclusion. | |
| 520 | _aAs data represent a key asset for today's organizations, the problem of how to protect this data from theft and misuse is at the forefront of these organizations' minds. Even though today several data security techniques are available to protect data and computing infrastructures, many such techniques -- such as firewalls and network security tools -- are unable to protect data from attacks posed by those working on an organization's "inside." These "insiders" usually have authorized access to relevant information systems, making it extremely challenging to block the misuse of information while still allowing them to do their jobs. This book discusses several techniques that can provide effective protection against attacks posed by people working on the inside of an organization. Chapter One introduces the notion of insider threat and reports some data about data breaches due to insider threats. Chapter Two covers authentication and access control techniques, and Chapter Three shows how these general security techniques can be extended and used in the context of protection from insider threats. Chapter Four addresses anomaly detection techniques that are used to determine anomalies in data accesses by insiders. These anomalies are often indicative of potential insider data attacks and therefore play an important role in protection from these attacks. Security information and event management (SIEM) tools and fine-grained auditing are discussed in Chapter Five. These tools aim at collecting, analyzing, and correlating -- in real-time -- any information and event that may be relevant for the security of an organization. As such, they can be a key element in finding a solution to such undesirable insider threats. Chapter Six goes on to provide a survey of techniques for separation-of-duty (SoD). SoD is an important principle that, when implemented in systems and tools, can strengthen data protection from malicious insiders. However, to date, very few approaches have been proposed for implementing SoD in systems. In Chapter Seven, a short survey of a commercial product is presented, which provides different techniques for protection from malicious users with system privileges -- such as a DBA in database management systems. Finally, in Chapter Eight, the book concludes with a few remarks and additional research directions. Table of Contents: Introduction / Authentication / Access Control / Anomaly Detection / Security Information and Event Management and Auditing / Separation of Duty / Case Study: Oracle Database Vault / Conclusion. | ||
| 650 | 0 |
_aComputer networks . _931572 |
|
| 650 | 0 |
_aData structures (Computer science). _98188 |
|
| 650 | 0 |
_aInformation theory. _914256 |
|
| 650 | 1 | 4 |
_aComputer Communication Networks. _978615 |
| 650 | 2 | 4 |
_aData Structures and Information Theory. _931923 |
| 710 | 2 |
_aSpringerLink (Online service) _978616 |
|
| 773 | 0 | _tSpringer Nature eBook | |
| 776 | 0 | 8 |
_iPrinted edition: _z9783031007620 |
| 776 | 0 | 8 |
_iPrinted edition: _z9783031030185 |
| 830 | 0 |
_aSynthesis Lectures on Data Management, _x2153-5426 _978617 |
|
| 856 | 4 | 0 | _uhttps://doi.org/10.1007/978-3-031-01890-9 |
| 912 | _aZDB-2-SXSC | ||
| 942 | _cEBK | ||
| 999 |
_c84620 _d84620 |
||