How to Catch an Insider Data Thief

  • Thursday, February 27, 2014 | 10:40 AM – 11:40 AM | West | Room: 3005
View all Sessions

Insider data theft leaves no broken windows, making traditional forensics blind. But you can still detect it. How? Filesystems have typical patterns of access, which data theft disturbs. By analyzing these patterns, you can detect data theft months after its occurrence. You'll learn how to use this method, called stochastic forensics, to catch otherwise invisible data thieves.


This document was retrieved from on Tue, 03 Mar 2015 06:08:14 -0500.
© 2015 EMC Corporation. All rights reserved.