Faculty Advisor

Shue, Craig A.

Abstract

In an effort to detect insider threats, we researched the possibility of using the text from a user’s screen to detect anomalies in user behavior and classify certain text as sensitive. By monitoring the text on a user’s screen as well as the different interface protocols used by the computer, we are able to capture every useful action committed on a computer at any given time. This proved an effective approach because by detecting abnormal behavior, we are able to record the incident, where an auditor can then view the scenario where the behavior took place, and take the appropriate actions. The Insider Threat Detection System provides an extra layer of security for preventing unauthorized data from being released outside a company’s secure internal network.

Publisher

Worcester Polytechnic Institute

Date Accepted

January 2014

Major

Computer Science

Project Type

Major Qualifying Project

Accessibility

Unrestricted

Advisor Department

Computer Science

Share

COinS