An agent based frame work for insider threat, privacy and adaptability management. | Proceedings of Pakistan Academy of Sciences 2010

Author(s)

Ghulam Ali Mallah Department of Computer Science, Shah Abdul Latif University, Khairpur, Sindh, Pakistan

Noor Ahmed Shaikh Department of Computer Science, Shah Abdul Latif University, Khairpur, Sindh, Pakistan

Zubair Ahmed Shaikh Department of Computer Science, Shah Abdul Latif University, Khairpur, Sindh, Pakistan

Abstract

This paper targets Network Security and more specifically deals with Insider Threat. Software Agents have been used as a technology in this research. The literature survey shows that FIPA (Foundation for Intelligent Physical Agents) and MASIF (Mobile System Interoperability Facility) agent standards have many limitations, therefore their combination or a new standard is proposed for a true agent system. Various milestones were set and bottom-up approach is used to achieve the overall task. Agent based vulnerability assessment model has been developed in which various practical issues have been identified and appropriate solution have been proposed. Platform dependent and platform independent approaches were used to achieve the task and results of both approaches are compared. Profiling is the key source of identifying insider threat therefore can Agent based Profiling model has been developed. That considers an individual’s personality profile to identify real personality. A FIPA compliant agent framework (ACENET) for profiling has been developed to achieve the task. The framework allows identifying, online and offline, anomalies in user activities. The ACENET (Agent collaborative Environment on NET) scores every user of the organization and maintains a detailed profile of whether a legitimate user is doing any malicious activity. The framework checks out whether user activities are in accordance with organization’s policy or not. ACENET is adaptable to deploy in any organization where agents are designed as services on the top layers of the model. The threats have been categorized in various classes and for each category agents have been designed. Considering privacy as a major concern, the professional issues were studied and it is proposed that the organization may announce in advance what can be monitored and what cannot be monitored through a user monitoring policy. The framework has been tested on real data and the performance has also been evaluated on the basis of specified parameters. The results were analyzed to match with the targeted objectives.

Publication Details

Page(s) 121-128

DOI DOI not available

Published Journal: Proceedings of Pakistan Academy of Sciences, Volume: 47, Issue: 2, Year: 2010

Keywords

Keywords are not available for this article.

References

References are not available for this document.

Citations

Citations are not available for this document.