Sharing but Protecting Content Against Internal Leakage for Organisations

Abstract. Dishonest employees, who have privileges to obtain corporate critical information and access internal resources, cause the problem of internal leakage. Employees, who have such privileges and know from where to obtain corporate sensitive information, are far more dangerous than outsiders. This paper proposes a mechanism for protecting information inside organisations against unauthorised disclosure by internal adversaries. It mainly focusses on sharing and simultaneously guarding information assets from one another. This paper proposes a novel solution for binding sensitive content to organisation devices, thereby preventing uncontrolled content leakage to other devices. In the proposed solution we used trusted computing technology to provide a hardware-based root of trust on client side.

• Type: Conference
• Year: 2008
• Where: DBSEC
• Authors: Muntaha Alawneh, Imad M. Abbadi
• Keywords: Access Internal Resources, Corporate Sensitive Information, Database, DBSEC 2008, Internal Leakage