Registered
INSIDER THREAT DETECTION DEVICE AND METHOD
- Inventors
-
Seon-Gyoung Sohn, Jeong Chi Yoon, Dong Ho Kang, Na Jung-Chan, Kim Ik Kyun, Cho Hyun Sook
- Application No.
-
13475880 (2012.05.18)
- Publication No.
-
20130091085 (2013.04.11)
- Registration No.
- 8965823 (2015.02.24)
- Country
- UNITED STATES
- Project Code
-
11MS2500, Development of Intrusion detection and response technology based on the security convergence for protecting Information assets of Industrial facilitie,
Na Jung-Chan
- Abstract
- The present invention relates to an insider threat detection device and method which collects and analyzes a variety of information generated by insiders working for an organization, such as behaviors, events, and states of the insider, and detects an abnormal insider who may become a potential threat. According to the present invention, the insider threat detection method and apparatus analyzes information related to insiders using the correlation analysis method, and previously detects an abnormal sign of an insider who may become a potential threat to an organization, which makes it possible to protect the organization from attacks on systems inside the organization or seizure of important information inside the organization.
- KSP Keywords
- Analysis method, Correlation Analysis, Correlation analysis method, Detection Method, Insider Threat, Insider threat detection, Threat Detection, detection device