Journal of Computer Security, 06/08/2016, Vol.24(3), pp.321-345
The detection and handling of data leakages is becoming a critical issue for organizations. To this end, data leakage solutions are usually employed by organizations to monitor network traffic and the use of portable storage devices. However, these solutions often produce a large number of alerts, whose analysis is time-consuming and costly for organizations. To effectively handle leakage incidents, organizations should be able to focus on the most severe incidents. Therefore, alerts need to be analyzed and prioritized with respect to their severity. This work presents a novel approach for the quantification of data leakages based on their severity. The approach quantifies the severity of leakages with respect to the amount and sensitivity of the leaked information as well as the ability to re-identify the data subjects of the leaked information. To specify and reason on data sensitivity in an application domain, we propose a data model representing the knowledge within the domain. We validate...
Alert Visualization ; Data Leakage Detection ; Data Leakage Quantification ; Data Sensitivity Model ; Severity Metrics ; Computer Networks And Communications ; Hardware And Architecture ; Software ; Safety, Risk, Reliability And Quality;
Permalink to record