Internal Information Leakage Research Articles

Denoising low SNR electromagnetic conducted emissions using an improved DnCNN based mode

Conducted electromagnetic emissions from interconnecting cables in computer systems can lead to internal information leakage and cause information security problems. However, unintentionally leaked EM signals are characterized by low signal-to-noise ratio and random noise, making it difficult to recover the original signal. In this paper, we propose a denoising model (S-DnCNN) based on an improved DnCNN to better recover the original signal. The network structure consists of three parts: feature mapping generation, low-dimensional feature extraction, and original reconstruction. To improve the noise extraction capability, we use Leaky ReLU as the activation function of the CNN, and introduce a residual structure and a convolutional attention module. The residual structure uses residual hopping to implicitly remove potentially clean images by hidden layer operations, thus training noisy data to recover clean data. We construct a one-dimensional selective convolution kernel (SKConv1d) and fuse it with local paths to form a feature extraction network, which improves the performance of the network. The experimental results show that our proposed method can preserve the details in the effective signal during denoising and shows good generalization to complex SNR data.

Study on Inside Threats Based on Analytic Hierarchy Process

Insider threats that occur within organizations cause more serious damage than external threats. However, there are many factors that are difficult to determine, such as the definition, classification, and severity of security breaches; hence, it is necessary to analyze system logs and user behavior-based scenarios within organizations. The reality is that qualitative judgment criteria are different for everyone to apply, and there is no detailed verification procedure to compare them objectively. In this study, realistic insider threats were examined through the definition, classification, and correlation/association analysis of various human–machine logs of acts associated with security breaches that occur in an organization. In addition, a quantitative process and decision-making tool were developed for insider threats by establishing various internal information leakage scenarios. As a result, insider threats were assessed quantitatively and a decision-making process was completed that enabled case analysis based on several insider threat scenarios. This study will enable precise modeling of insider threats that occur in real organizations and will support an objective process and a decision-making system to establish a range of required information for security protection measures.

Real Time Activity Logger: a User Activity Detection System

With the size of the enterprise network is growing, more and more computer terminals, internal information leakage and security threats emerging security incidents and daily management to bring a lot of pressure. Business users need a tracking system to address these security issues.A technique and framework for checking and following the exercises of a client of a PC. Affiliations are set up between the conditions of certain PC framework parameters and explicit exercises. The present movement of the client is then definite by the framework dependent on the present condition of the PC framework. As the condition of the PC framework changes, changes in the client's action are checked and followed. The exercises are followed related to time in order to record the time spent on every movement.Through this project we are developing the understanding of the working and the basics of the Linux operating system. We are analysing the need of monitoring the system and solving the issues related to security, unauthorised access and other threats. Through this tool we are trying to address these issues.

금융권 PC보안 위협 분석 및 대응방안에 관한 연구

As society has evolved to the knowledge and information society, the importance of internal information of the company has increased gradually. Especially in financial institutions which must maintain the trust of customers, the disclosure of inside information is a big problem beyond the a company`s business information disclosure level to break down sales-based businesses because it contains personal or financial transaction information. Recently, since massive outflow of internal information are occurring in several enterprises, many companies including financial companies have been working a lot in order to prevent the leakage of customer information. This paper describes the internal information leakage incidents occurred in the finance companies, the PC security vulnerabilities exists despite the main security system and internal information leakage prevention and suggests countermeasures against increasing cyber infringement threats.

New Approach for Detecting Leakage of Internal Information; Using Emotional Recognition Technology

Currently, the leakage of internal information has emerged as one of the most significant security concerns in enterprise computing environments. Especially, damage due to internal information leakage by insiders is more serious than that by outsiders because insiders have considerable knowledge of the system’s identification and password (ID&P/W), the security system, and the main location of sensitive data. Therefore, many security companies are developing internal data leakage prevention techniques such as data leakage protection (DLP), digital right management (DRM), and system access control, etc. However, these techniques cannot effectively block the leakage of internal information by insiders who have a legitimate access authorization. The security system does not easily detect cases which a legitimate insider changes, deletes, and leaks data stored on the server. Therefore, we focused on the insider as the detection target to address this security weakness. In other words, we switched the detection target from objects (internal information) to subjects (insiders). We concentrated on biometrics signals change when an insider conducts abnormal behavior. When insiders attempt to leak internal information, they appear to display abnormal emotional conditions due to tension, agitation, and anxiety, etc. These conditions can be detected by the changes of biometrics signals such as pulse, temperature, and skin conductivity, etc. We carried out experiments in two ways in order to verify the effectiveness of the emotional recognition technology based on biometrics signals. We analyzed the possibility of internal information leakage detection using an emotional recognition technology based on biometrics signals through experiments.

An exploratory research on advanced smart media security design for sustainable intelligence information system

The recent issue of cyber security accident and internal information leakage accident is becoming a big obstacle in entering into sustainable intelligence information. To guarantee a sustainable smart media technology and establish an intelligence information system environment, it is necessary to firmly cultivate information security industry with the need for a study on forming multi-dimensional foundation for promoting the use of information security product & service for organizations in intelligence information system environment. Accordingly, an exploratory study was conducted for identifying risk elements caused by intelligence information system environment and forming multi-dimensional smart media information security ecosystem to minimize such risk elements. As a result, a scenario was designed by deducing issues in information security resulting from entering into internet of things environment, while exploring and analyzing future direction by classifying into four areas of law & policy, information security business management, security accident criminal psychology and information security economic feasibility. Based on this study, it is expected that a fundamental & comprehensive solution can be presented as a prerequisite for ensuring sustainable internet of things environment, along with the establishment of response system against various forms of security accidents occurring recently.

빅데이터를 이용한 보안정책 개선에 관한 연구

The information protection systems of company are intended to detect all weak points, intrusion, document drain. All actions of people in company are recorded and can check persistently. On the other hand, what analyze security log generated by these systems becomes more difficult. Most staff who manages the security systems, and analyze log is more incomprehensible than a user or a person of drain for an information distribution process of the work-site operations and the management procedure of the critical information. Such a reality say the serious nature of the internal information leakage that can be brought up more. While the research on the big data proceeds actively recently, the successful cases are being announced in the various areas. This research is going to present the improved big data processing technology and case of the security field.

PDT-BI: Proactive Detection Technology based on the Biometric Information for Preventing Internal Information Leakage

National Industrial Security Center of National Intelligence Service has announced that information leakages by insiders occurred at the total of 294 cases during the last 8 years. Difficulty of acquiring omen of a security incident and the fact that insiders usually have legitimate privileges make prevent security defense. Therefore, we need to research about developing methods to obtain factors for prediction of information leakage by insiders in a whole new different perspective. When an insider tries to do something malicious, biometric information of the body changes due to tension. This means that biometric information can be used as factor for detecting malicious activities of an insider. In this paper, we propose the proactive detection technique that can detect malicious behaviors of an insider by biometric information. Additionally, we compare proposed technique with other techniques that use biometric information in the security field.

Enterprise Information Security Management Based on Context-Aware RBAC and Communication Monitoring Technology

Information technology has an enormous influence in many enterprises. Computers have not only become important devices that people rely on in their daily lives and work, but have also become essential tools for enterprises. More and more enterprises have shifted their focus to how to prevent outer forces from invading and stealing from networks. However, many enterprises have disregarded the significance of internal leaking, which also plays a vital role in information management. This research proposes an information security management approach that is based on context-aware role-based access control (RBAC) and communication monitoring technology, in order to achieve enterprise information security management. In this work, it is suggested that an enterprise may, first, use an organizational chart to list job roles and corresponding permissions. RBAC is a model that focuses on different work tasks and duties. Subsequently, the enterprise may define a security policy to enforce the context-aware RBAC model. Finally, the enterprise may use communication monitoring technology in order to implement information security management. The main contribution of this work is the potential it provides to both reduce information security incidents, such as internal information leakage, and allow for effective cost control of information systems.

핵심 쿼리 결제를 통한 DB 보호 시스템 설계 및 구현

정보보호의 패러다임 진화와 함께 데이터베이스에 저장된 증요 데이터의 유출이나 도난의 위험성이 증가되고 있으며 실제로 개인정보의 대량 유출 사건이 끊임없이 발생하고 있어 데이터베이스 보안에 대한 요구사항이 매우 높아지고 있다. 기업 내부 정보 유출방지를 위하여 개발된 기술은 관리자의 정책 설정 및 허가된 사용자만이 DBMS 접속 권한을 갖게 되는 수동적인 제어 방식으로 완벽하게 보호하기에는 기술적인 제약이 따르고 있다. 이에, 본 논문에서는 데이터베이스에 핵심 정보에 접근하는 중요 Query에 대하여 파싱하고, 인터럽트하여 결제함으로써 데이터베이스 시스템을 적극적으로 보호하고 획일적 보안 정책을 적용할 수 있는 데이터베이스 보호를 위한 Query 결재 시스템을 제안한다. The risk of leakage or theft of critical data which is stored in database is increasing in accordance with evolution of information security paradigm. At the same time, needs for database security have been on the rapid increase due to endless leakage of massive personal information. The existing technology for prevention of internal information leakage possesses the technical limitation to achieve security goal completely, because the passive control method including a certain security policy, which allows the only authorized person to access to DBMS, may have a limitation. Hence in this study, we propose Query Signature System which signatures the queries accessing to the critical information by interrupting and passing them. Furthermore this system can apply a constant security policy to organization and protect database system aggressively by restricting critical query of database.