Naslov
An event based framework for facilitating database activity tracking

Autori
Šaban, Josip ; Gržinić, Toni ; Mršić, Leo

Vrsta, podvrsta i kategorija rada
Radovi u zbornicima skupova, cjeloviti rad (in extenso), znanstveni

Izvornik
25th Central European Conference on Information and Intelligent Systems / - Varaždin : Fakultet organizacije i informatike Sveučilišta u Zagrebu, 2014, 26-31

Skup
Proceedings of 25th Central European Conference on Information and Intelligent Systems

Mjesto i datum
Varaždin, Hrvatska, 17.09.2014. - 19.09.2014

Vrsta sudjelovanja
Predavanje

Vrsta recenzije
Međunarodna recenzija

Ključne riječi
database system ; misuse detection ; fraud transactions

Sažetak
During a database analytic investigation investigator tracks intruder’s actions on the system until incident occurs - the investigator identifies that the intruder has, indeed, accessed the database in an unauthorized way. Combined with the data about the actions following the incident, it is also crucial to collect data about user activity on the server before the incident so that a log of actions can be created. The goal of this paper is to propose which data should be collected before the security incident occurs, focusing on two parts: Users on the level of the operating system which have access to either the shared file system or the direct access to the operating system by using remote connection SQL database users (either native or domain users), key tables with sensitive data and the activity of users in relation to those table

Izvorni jezik
Engleski

Znanstvena područja
Računarstvo, Informacijske i komunikacijske znanosti

POVEZANOST RADA