%0 Conference Proceedings
%T Hunting the Unknown
%+ Eindhoven University of Technology [Eindhoven] (TU/e)
%+ Philips Research Europe [The Netherlands]
%+ University of Twente
%A Costante, Elisa
%A Hartog, Jerry, Den
%A Petković, Milan
%A Etalle, Sandro
%A Pechenizkiy, Mykola
%< avec comité de lecture
%( Lecture Notes in Computer Science
%B 28th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec)
%C Vienna, Austria
%Y David Hutchison
%Y Takeo Kanade
%Y Bernhard Steffen
%Y Demetri Terzopoulos
%Y Doug Tygar
%Y Gerhard Weikum
%Y Vijay Atluri
%Y Günther Pernul
%Y Josef Kittler
%Y Jon M. Kleinberg
%Y Alfred Kobsa
%Y Friedemann Mattern
%Y John C. Mitchell
%Y Moni Naor
%Y Oscar Nierstrasz
%Y C. Pandu Rangan
%I Springer
%3 Data and Applications Security and Privacy XXVIII
%V LNCS-8566
%P 243-259
%8 2014-07-14
%D 2014
%R 10.1007/978-3-662-43936-4_16
%K Leakage Detection
%K Privacy
%K Data Security
%K Anomaly Detection
%Z Computer Science [cs]Conference papers
%X Data leakage causes significant losses and privacy breaches worldwide. In this paper we present a white-box data leakage detection system to spot anomalies in database transactions. We argue that our approach represents a major leap forward w.r.t. previous work because: i) it significantly decreases the False Positive Rate (FPR) while keeping the Detection Rate (DR) high; on our experimental dataset, consisting of millions of real enterprise transactions, we measure a FPR that is orders of magnitude lower than in state-of-the-art comparable approaches; and ii) the white-box approach allows the creation of self-explanatory and easy to update profiles able to explain why a given query is anomalous, which further boosts the practical applicability of the system.
%G English
%Z TC 11
%Z WG 11.3
%2 https://inria.hal.science/hal-01284860/document
%2 https://inria.hal.science/hal-01284860/file/978-3-662-43936-4_16_Chapter.pdf
%L hal-01284860
%U https://inria.hal.science/hal-01284860
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-TC
%~ IFIP-WG
%~ IFIP-TC11
%~ IFIP-LNCS-8566
%~ IFIP-WG11-3