Bans of probability measures in the problem of insider detection

E. A. Martyanov

Faculty of Computational Mathematics and Cybernetics, M. V. Lomonosov Moscow State University, 1-52 Leninskie Gory, GSP-1, Moscow 119991, Russian Federation

Abstract: A data model for a common work of a finite set of analysts is considered. Among analysts, there can be an insider who due to access to forbidden data can cause damage to the organization. Operation of each analyst is described by a random series of samples of data, admissible for him. The process of addressing the forbidden data is described by bans of probability measures defining honest operation of analysts. The method of definition of the set of bans which allows to use the theory of bans correctly is constructed. It helps to identify the insider by a finite number of observations over operations of analysts.

Keywords: insider; information security; theory of bans of probability measures; mathematical statistics.

Received: 15.09.2017

DOI: 10.14357/08696527170411

Bibliographic databases:

•