Data exfiltration detection and prevention: Virtually distributed POMDPs for practically safer networks

• Main Authors: MC CARTHY, Sara Marie, SINHA, Arunesh, TAMBE, Milind, MANADHATA, Pratyusa
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2016
• Subjects: Databases and Information Systems
• Online Access: https://ink.library.smu.edu.sg/sis_research/4665; https://ink.library.smu.edu.sg/context/sis_research/article/5668/viewcontent/Data_ExfiltrationPaper_1_.pdf
• Institution: Singapore Management University

We address the challenge of detecting and addressing advanced persistent threats (APTs) in a computer network, focusing in particular on the challenge of detecting data exfiltration over Domain Name System (DNS) queries, where existing detection sensors are imperfect and lead to noisy observations a...