How to Catch an Insider Data Thief

  • Thursday, February 27, 2014 | 10:40 AM – 11:40 AM | West | Room: 3005

View all Sessions

Insider data theft leaves no broken windows, making traditional forensics blind. But you can still detect it. How? Filesystems have typical patterns of access, which data theft disturbs. By analyzing these patterns, you can detect data theft months after its occurrence. You'll learn how to use this method, called stochastic forensics, to catch otherwise invisible data thieves.


This document was retrieved from on Mon, 19 Aug 2019 10:07:54 -0400.