AN AGENT BASED FRAMEWORK FOR INSIDER THREAT,PRIVACY AND ADAPTABILITY MANAGEMENT
作者单位：Department of Computer ScienceShah Abdul Latif UniversityKhairpurPakistan
会议名称：《The 2nd Session of 2010 Workshop of Pakistan Academy of Sciences》
会议日期：2010年
学科分类：0839[工学-网络空间安全] 08[工学]
关 键 词：Insider threat software agents privacy agent framework .NET framework network security
摘 要：This paper targets Network Security and more specifically deals with Insider *** Agents have been used as a technology in this *** literature survey shows that FIPA（Foundation for Intelligent Physical Agents） and MASIF（Mobile System Interoperability Facility） agent standards have many limitations,therefore their combination or a new standard is proposed for a true agent *** milestones were set and bottom-up approach is used to achieve the overall *** based vulnerability assessment model has been developed in which various practical issues have been identified and appropriate solutions have been ***-dependent and platform-independent approaches were used to achieve the task and results of both approaches are *** is the key source of identifying insider threat therefore an Agentbased Profiling model has been developed that considers an individual’s personality profile to identify real personality.A FIPAcompliant agent framework（ACENET） for profiling has been developed to achieve the *** framework allows identifying,online and offline,anomalies in user *** ACENET（Agent collaborative Environment ***） scores every user of the organization and maintains a detailed profile of whether a legitimate user is doing any malicious *** framework checks out whether user activities are in accordance with organization’s policy or *** is adaptable to deploy in any organization where agents are designed as services on the top layers of the *** threats have been categorized in various classes and for each category agents have been *** privacy as a major concern,the professional issues were studied and it is proposed that the organization may announce in advance what can be monitored and what cannot be monitored through a user monitoring *** framework has been tested on real data and the performance has also been evaluated on the basis of specified paramete