%0 Conference Proceedings %T Towards Creating Believable Decoy Project Folders for Detecting Data Theft %+ Eindhoven University of Technology [Eindhoven] (TU/e) %+ Philips Research Laboratories [Eindhoven] %A Thaler, Stefan %A Hartog, Jerry, Den %A Petkovic, Milan %Z Part 4: Protection and Privacy of Data and Big Data %< avec comité de lecture %( Lecture Notes in Computer Science %B 30th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec) %C Trento, Italy %Y Silvio Ranise %Y Vipin Swarup %I Springer International Publishing %3 Data and Applications Security and Privacy XXX %V LNCS-9766 %P 161-169 %8 2016-07-18 %D 2016 %R 10.1007/978-3-319-41483-6_12 %K Data theft detection %K Data theft %K Intrusion detection %K Decoy %K Honey pot %K Trap-based defense %K Deception %Z Computer Science [cs]Conference papers %X Digital data theft is difficult to detect and typically it also takes a long time to discover that data has been stolen. This paper introduces a data-driven approach based on Markov chains to create believable decoy project folders which can assist in detecting potentially ongoing attacks. This can be done by deploying these intrinsically valueless folders between real project folders and by monitoring interactions with them. We present our approach and results from a user study demonstrating the believability of the generated decoy folders. %G English %Z TC 11 %Z WG 11.3 %2 https://inria.hal.science/hal-01633683/document %2 https://inria.hal.science/hal-01633683/file/428203_1_En_12_Chapter.pdf %L hal-01633683 %U https://inria.hal.science/hal-01633683 %~ IFIP-LNCS %~ IFIP %~ IFIP-TC %~ IFIP-WG %~ IFIP-TC11 %~ IFIP-WG11-3 %~ IFIP-DBSEC %~ IFIP-LNCS-9766