A practical approach in detection and prevention of insider multi transaction malicious activity

Abstract

Information is probably the most valuable asset of many people and information systems. However, some data cannot be memorized easily. As a result, these data and information should be stored in a special place to recall later. Several technical methods and process for keeping data was designed by technology improvement such as database which is a data collection in a special arrangement and structure. Data protection is not only essentially important for some users like business users but also for nonprofessional’s computer users. Since some events such as natural disaster and human behavior causing harms and much more cost, evaluating possible threats and susceptibility of system which is employed to protect the data should be taken into account. Therefore, securing data by using some new methods is a significant subject. Many studies prove that the “insider threat” is the most dangerous information security threat in advanced technological organization. It can be inferred that workers employ their individual privileges to do actions on the basis of their information and have knowledge of some susceptibility of the system might be an insider and perform some attack. As a result, employee‘s attack has significant hazardous and critical effects. In this paper a practical approach in prevention and detection of such malicious attack is introduced.