One of the primary concerns of data security specialists is to mitigate insider threats and prevent data leaks. Often, unfortunately, insider threats go unnoticed. In most cases, the longer such activity goes unnoticed, the greater the resulting damages are likely to be. This paper provides an overview of the basic data exfiltration techniques that deal with file structures and were utilized in multiple scenarios in an attempt to bypass a Data Loss Prevention system. Details show which of the scenarios have been detected and which have not been by the Data Loss Prevention system. The paper also proposed solutions for the undetected scenarios.
BT - 2019 International Arab Conference on Information Technology (ACIT) CY - Al Ain University of Science and Technology, Al Ain, United Arab Emirates DA - 12/2019 DO - https://doi.org/10.1109/ACIT47987.2019.8991131 LA - eng N2 -One of the primary concerns of data security specialists is to mitigate insider threats and prevent data leaks. Often, unfortunately, insider threats go unnoticed. In most cases, the longer such activity goes unnoticed, the greater the resulting damages are likely to be. This paper provides an overview of the basic data exfiltration techniques that deal with file structures and were utilized in multiple scenarios in an attempt to bypass a Data Loss Prevention system. Details show which of the scenarios have been detected and which have not been by the Data Loss Prevention system. The paper also proposed solutions for the undetected scenarios.
PB - IEEE PP - Al Ain University of Science and Technology, Al Ain, United Arab Emirates PY - 2019 T2 - 2019 International Arab Conference on Information Technology (ACIT) TI - Data Exfiltration Techniques and Data Loss Prevention System UR - https://ieeexplore.ieee.org/document/8991131 ER -