Entry Shabtai:2016:BSU from tissec.bib
Last update: Sun Oct 15 02:58:48 MDT 2017
Top |
Symbols |
Numbers |
Math |
A |
B |
C |
D |
E |
F |
G |
H |
I |
J |
K |
L |
M |
N |
O |
P |
Q |
R |
S |
T |
U |
V |
W |
X |
Y |
Z
BibTeX entry
@Article{Shabtai:2016:BSU,
author = "Asaf Shabtai and Maya Bercovitch and Lior Rokach and
Ya'akov (Kobi) Gal and Yuval Elovici and Erez Shmueli",
title = "Behavioral Study of Users When Interacting with Active
Honeytokens",
journal = j-TISSEC,
volume = "18",
number = "3",
pages = "9:1--9:??",
month = apr,
year = "2016",
CODEN = "ATISBQ",
DOI = "https://doi.org/10.1145/2854152",
ISSN = "1094-9224 (print), 1557-7406 (electronic)",
ISSN-L = "1094-9224",
bibdate = "Fri Apr 15 13:02:47 MDT 2016",
bibsource = "http://portal.acm.org/;
http://www.math.utah.edu/pub/tex/bib/tissec.bib",
abstract = "Active honeytokens are fake digital data objects
planted among real data objects and used in an attempt
to detect data misuse by insiders. In this article, we
are interested in understanding how users (e.g.,
employees) behave when interacting with honeytokens,
specifically addressing the following questions: Can
users distinguish genuine data objects from
honeytokens? And, how does the user's behavior and
tendency to misuse data change when he or she is aware
of the use of honeytokens? First, we present an
automated and generic method for generating the
honeytokens that are used in the subsequent behavioral
studies. The results of the first study indicate that
it is possible to automatically generate honeytokens
that are difficult for users to distinguish from real
tokens. The results of the second study unexpectedly
show that users did not behave differently when
informed in advance that honeytokens were planted in
the database and that these honeytokens would be
monitored to detect illegitimate behavior. These
results can inform security system designers about the
type of environmental variables that affect people's
data misuse behavior and how to generate honeytokens
that evade detection.",
acknowledgement = ack-nhfb,
articleno = "9",
fjournal = "ACM Transactions on Information and System Security",
journal-URL = "http://portal.acm.org/browse_dl.cfm?idx=J789",
}
Related entries
- active,
5(4)492,
15(1)5,
15(2)9,
15(3)14,
17(2)6
- addressing,
11(4)19,
13(4)31,
15(3)13
- advance,
11(4)22,
14(1)2,
16(2)7
- affect,
14(3)23,
17(4)16
- article,
10(1)3,
11(1)3,
11(1)4,
11(2)5,
11(3)12,
11(3)14,
11(3)15,
11(3)16,
11(4)20,
11(4)22,
11(4)23,
12(1)1,
12(1)2,
12(1)4,
12(1)6,
12(2)8,
12(2)10,
12(2)13,
12(3)14,
12(3)16,
12(3)17,
12(3)19,
12(4)21,
12(4)22,
13(3)22,
13(3)24,
13(3)25,
13(3)27,
13(3)28,
13(4)29,
13(4)31,
13(4)32,
13(4)34,
13(4)36,
13(4)41,
14(1)2,
14(1)3,
14(1)4,
14(1)10,
14(1)13,
14(1)14,
14(3)23,
14(3)25,
14(4)30,
15(2)9,
15(2)10,
15(3)11,
15(3)12,
15(3)13,
15(4)15,
15(4)16,
15(4)17,
16(1)1,
16(1)4,
16(2)6,
16(2)7,
16(2)8,
16(3)10,
16(4)14,
16(4)15,
17(2)8,
17(3)9,
17(3)11,
17(3)12,
17(4)13,
17(4)16,
18(1)3,
18(2)5,
18(2)7,
18(3)10,
18(3)11,
18(4)12,
18(4)14
- attempt,
11(4)19,
12(1)5,
12(2)11,
12(2)12,
12(4)22,
13(4)41,
14(3)27,
15(3)12,
17(4)16
- automated,
6(1)1,
9(3)352,
10(3)12,
12(1)4,
13(1)2,
15(1)3,
15(3)12,
15(4)17,
17(4)14
- automatically,
10(2)8,
12(2)10,
13(3)24,
14(1)2,
15(2)6,
15(4)18,
16(2)5,
16(2)7,
17(2)7,
17(4)13
- aware,
10(1)2
- behave,
10(4)6,
12(2)11,
12(3)19,
18(4)14
- behavior,
2(3)295,
2(4)354,
10(4)6,
11(4)19,
12(1)5,
12(3)14,
12(3)19,
14(1)10,
14(4)32,
15(1)2,
15(2)10,
15(3)14,
16(3)12,
17(2)8,
18(2)5,
18(2)7
- behavioral,
18(3)11
- change,
2(3)332,
12(3)14,
13(4)30,
13(4)34,
14(1)2,
15(3)13,
15(4)16,
15(4)17,
16(4)17,
17(4)15
- database,
1(1)26,
1(1)93,
2(4)354,
4(4)321,
8(1)119,
9(1)31,
10(1)2,
10(4)4,
11(2)5,
12(2)8,
13(4)31,
13(4)32,
14(3)25,
16(3)12,
17(3)11
- designers,
11(4)19
- detect,
2(3)295,
10(4)6,
11(3)14,
11(3)15,
12(2)10,
12(2)11,
12(2)13,
12(3)19,
14(1)13,
15(2)6,
16(2)5,
16(4)14,
17(4)16,
18(2)7
- detection,
2(2)159,
2(3)295,
3(1)1,
3(3)186,
3(4)227,
3(4)262,
4(4)407,
5(3)203,
6(2)173,
6(4)443,
7(4)591,
9(1)61,
10(1)4,
11(2)2,
11(3)12,
11(3)15,
11(4)19,
11(4)20,
12(2)11,
12(2)12,
12(2)13,
12(4)22,
13(2)12,
13(4)30,
14(1)13,
14(3)27,
15(2)6,
15(3)11,
15(4)17,
17(4)13,
17(4)15,
18(1)2,
18(2)7
- differently,
13(3)28
- difficult,
11(2)2,
11(2)5,
11(3)15,
11(3)16,
13(3)28,
16(2)5,
17(1)4,
17(3)12,
17(4)16,
18(4)13
- digital,
2(4)354,
7(1)1,
10(3)12,
11(4)21,
12(1)3,
12(3)15,
14(1)5,
17(3)12,
17(4)16,
18(1)1
- distinguish,
1(1)66,
16(3)12,
17(1)2
- do,
2(3)230,
2(3)269,
9(4)421,
10(4)1,
11(1)4,
11(2)2,
11(4)19,
12(1)3,
12(2)10,
13(2)13,
13(4)33,
13(4)35,
14(3)23,
14(3)27,
14(4)28,
16(1)1,
16(3)12,
16(4)13,
17(1)1
- e.g.,
1(1)66,
2(2)177,
2(3)230,
2(4)354,
2(4)390,
10(4)1,
11(4)22,
12(1)1,
12(2)10,
12(2)12,
14(1)2,
15(2)6,
16(2)7,
16(4)14,
17(1)1,
17(3)12,
17(4)15
- employees,
11(2)2
- first,
2(1)34,
2(1)105,
2(4)354,
9(2)181,
10(4)6,
11(2)3,
11(2)4,
11(3)13,
11(4)18,
11(4)22,
12(1)3,
12(1)5,
12(3)18,
12(4)22,
13(4)31,
13(4)32,
14(1)13,
14(3)25,
14(4)30,
14(4)31,
15(4)17,
15(4)18,
16(3)10,
17(1)4,
17(2)6,
17(3)11,
18(1)4,
18(4)12,
18(4)13
- following,
2(2)177,
11(1)3,
11(3)13,
12(3)18,
16(3)10
- generate,
2(4)390,
10(2)5,
10(4)2,
11(4)18,
12(2)10,
12(2)11,
13(3)24,
14(1)6,
14(1)12,
16(2)7,
16(2)8
- generating,
12(2)10,
12(2)11,
13(1)10
- generic,
11(2)4,
13(4)33,
15(4)17,
16(2)6,
16(4)15
- how,
2(1)3,
2(2)138,
2(3)269,
7(2)319,
10(2)5,
10(2)8,
10(4)1,
10(4)2,
10(4)5,
11(3)13,
11(4)18,
12(1)2,
12(2)9,
12(2)12,
12(3)18,
12(3)19,
13(1)10,
13(2)13,
13(3)25,
13(4)31,
13(4)36,
14(1)2,
14(3)26,
15(1)5,
15(3)14,
15(4)15,
16(1)3,
16(2)5,
16(2)8,
17(1)1,
17(1)2,
17(1)3,
17(4)15,
18(1)1,
18(1)3,
18(2)6,
18(4)14
- indicate,
2(3)230,
10(4)2,
12(1)6,
13(4)35,
16(3)11,
17(2)6,
18(4)13
- informed,
17(1)2
- insider,
13(4)38,
17(4)13
- interacting,
14(1)13,
18(2)6
- method,
1(1)3,
1(1)26,
2(2)159,
2(3)295,
2(3)332,
2(4)416,
9(3)259,
10(1)3,
10(3)10,
10(4)4,
10(4)5,
11(2)2,
11(3)16,
11(4)19,
11(4)22,
12(1)2,
12(1)6,
12(2)13,
12(3)16,
13(2)15,
13(4)35,
15(1)4,
15(2)10,
15(3)12,
15(4)15,
15(4)17,
17(3)12
- monitored,
11(2)2
- not,
1(1)26,
2(1)65,
2(2)177,
2(3)230,
2(3)269,
2(4)390,
9(4)421,
10(1)3,
10(4)2,
11(1)3,
11(1)4,
11(2)2,
11(2)4,
11(2)5,
11(3)12,
11(3)13,
11(3)15,
11(3)16,
11(4)19,
11(4)20,
11(4)22,
12(1)1,
12(1)2,
12(1)3,
12(1)6,
12(2)10,
12(2)11,
12(2)13,
12(3)14,
12(4)22,
13(1)10,
13(3)28,
13(4)33,
13(4)35,
13(4)36,
13(4)37,
13(4)39,
13(4)40,
14(3)23,
14(3)27,
14(4)28,
14(4)29,
14(4)31,
15(2)6,
15(2)9,
15(2)10,
15(3)12,
15(3)13,
16(1)1,
16(2)5,
16(2)6,
16(3)9,
16(3)12,
16(4)13,
16(4)15,
16(4)16,
17(1)2,
17(3)10,
17(4)15,
18(1)1,
18(4)13
- object,
1(1)26,
10(1)2,
11(1)3,
12(3)18,
14(3)23,
16(2)5,
16(4)13
- people,
8(4)424,
18(4)12
- possible,
2(1)105,
10(2)5,
10(4)2,
10(4)4,
11(2)6,
11(3)16,
11(4)22,
12(1)6,
12(2)10,
13(3)28,
13(4)33,
13(4)35,
13(4)39,
14(1)3,
14(1)14,
14(3)25,
14(4)32,
15(2)10,
17(1)2,
17(3)9,
18(1)4
- present,
1(1)26,
2(1)3,
2(1)65,
2(2)177,
2(3)230,
2(3)269,
2(3)295,
2(4)354,
7(2)319,
9(2)181,
9(4)461,
10(1)2,
10(2)7,
10(3)10,
10(3)11,
10(3)12,
10(4)2,
10(4)3,
11(1)2,
11(1)4,
11(2)2,
11(2)5,
11(3)14,
11(4)22,
12(1)2,
12(1)4,
12(2)10,
12(2)11,
12(3)14,
12(3)15,
12(3)16,
12(3)17,
12(4)22,
13(1)10,
13(3)20,
13(3)22,
13(3)25,
13(3)28,
13(4)29,
13(4)41,
14(1)4,
14(1)5,
14(1)6,
15(1)2,
15(2)6,
15(2)8,
15(2)10,
15(3)12,
15(3)13,
15(4)16,
15(4)18,
16(2)6,
16(2)7,
16(4)13,
16(4)14,
17(1)4,
17(2)6,
17(2)7,
17(2)8,
17(3)9,
17(3)12,
17(4)14,
17(4)15,
17(4)16,
18(1)3,
18(1)4,
18(2)7,
18(3)10,
18(3)11,
18(4)12,
18(4)14
- question,
10(4)1,
11(2)3,
11(4)21,
13(4)35,
14(3)26,
15(4)18,
17(1)1,
17(3)11
- real,
10(1)2,
10(4)1,
10(4)4,
11(2)3,
11(3)16,
11(4)17,
12(2)10,
12(2)11,
12(2)13,
13(4)30,
14(4)30,
16(3)10,
16(4)14,
16(4)17,
17(4)16,
18(1)3,
18(4)12
- result,
1(1)3,
1(1)26,
2(3)230,
2(4)390,
9(2)162,
10(1)3,
10(1)4,
10(2)5,
10(2)6,
10(3)9,
10(3)11,
10(4)2,
10(4)5,
11(2)3,
11(2)5,
11(3)13,
11(3)15,
11(4)18,
11(4)20,
11(4)21,
11(4)22,
12(1)4,
12(2)9,
12(3)14,
12(3)17,
13(1)10,
13(3)22,
13(3)24,
13(3)25,
13(4)33,
13(4)35,
14(1)2,
14(1)14,
14(2)19,
15(1)5,
15(2)7,
15(2)8,
15(3)12,
15(3)13,
15(3)14,
15(4)15,
16(1)2,
16(1)3,
16(2)5,
16(2)6,
16(2)7,
16(3)10,
16(3)11,
16(4)14,
16(4)17,
17(2)7,
17(3)9,
17(3)10,
17(3)12,
17(4)14,
18(1)4,
18(2)5,
18(2)6,
18(3)11,
18(4)12,
18(4)13
- second,
9(2)181,
9(4)461,
11(2)3,
11(2)6,
11(4)22,
12(1)3,
12(1)5,
12(2)11,
13(4)31,
13(4)37,
16(3)9,
16(3)10,
16(3)12,
17(3)10
- specifically,
9(2)181,
10(3)12,
11(1)4,
11(3)16,
12(1)6,
12(2)12,
12(3)16,
15(2)6,
15(2)8,
15(4)16,
16(4)17,
17(4)13,
18(2)5,
18(2)6
- study,
2(3)230,
2(4)416,
7(2)206,
10(2)5,
10(4)5,
11(1)3,
11(2)3,
11(4)23,
12(1)6,
12(3)14,
12(4)20,
13(4)40,
14(1)7,
14(2)18,
14(2)19,
15(1)5,
15(2)7,
15(2)8,
15(2)10,
15(3)13,
17(1)1,
17(2)7,
17(3)12,
17(4)14,
18(1)1,
18(1)2,
18(1)4,
18(2)5,
18(2)7,
18(4)13
- token,
7(3)333,
11(1)2,
17(2)6,
17(3)10
- type,
10(1)2,
10(1)3,
10(3)11,
10(4)5,
11(2)1,
11(3)14,
12(1)1,
12(3)15,
13(3)21,
13(3)25,
13(4)32,
15(2)7,
15(2)10,
16(1)4,
18(1)1
- understanding,
9(2)181,
12(1)2,
12(3)19,
17(4)14
- use,
2(1)3,
2(1)105,
2(2)138,
2(2)177,
2(3)230,
2(3)269,
2(3)332,
2(4)354,
2(4)390,
4(2)103,
7(1)21,
9(4)391,
9(4)421,
9(4)461,
10(1)4,
10(2)5,
10(3)11,
10(4)1,
10(4)3,
10(4)5,
10(4)6,
11(1)2,
11(1)3,
11(1)4,
11(2)1,
11(2)4,
11(3)13,
11(3)14,
11(4)18,
11(4)19,
11(4)21,
11(4)22,
12(2)10,
12(3)16,
12(3)18,
13(3)22,
13(3)24,
13(3)25,
13(4)29,
13(4)31,
13(4)36,
14(1)6,
14(1)8,
14(1)10,
14(1)11,
14(4)31,
14(4)32,
15(1)3,
15(1)4,
15(1)5,
15(2)7,
15(3)12,
15(4)15,
15(4)16,
15(4)17,
16(2)8,
16(4)15,
16(4)17,
17(2)5,
17(2)6,
17(2)7,
17(2)8,
17(4)15,
17(4)16,
18(1)1,
18(2)6,
18(4)14
- used,
1(1)3,
2(1)65,
2(4)416,
7(2)319,
9(2)181,
10(1)2,
10(2)5,
10(2)7,
10(2)8,
10(4)2,
11(1)2,
11(1)3,
11(2)3,
11(3)14,
11(3)15,
11(3)16,
11(4)21,
11(4)22,
12(2)8,
12(3)15,
13(1)10,
13(3)22,
13(3)25,
13(4)29,
13(4)34,
14(1)3,
14(1)12,
14(1)13,
14(3)27,
15(1)3,
15(1)5,
15(3)12,
15(4)17,
15(4)18,
16(2)7,
16(2)8,
16(3)10,
17(1)1,
17(2)7,
17(3)9,
17(4)13,
18(1)3,
18(2)5,
18(2)6,
18(4)13,
18(4)14
- variable,
12(3)17,
13(4)35
- were,
2(1)34,
2(1)105,
10(1)4,
12(3)14,
13(3)25,
13(4)38,
15(3)12,
16(2)8,
16(3)9,
16(3)10
- when,
2(3)295,
10(2)7,
10(3)12,
10(4)4,
10(4)6,
11(2)3,
11(2)6,
11(3)15,
11(3)16,
11(4)17,
11(4)18,
12(2)10,
12(2)11,
12(4)20,
12(4)22,
13(1)10,
13(3)27,
13(4)32,
13(4)34,
13(4)35,
13(4)37,
15(2)6,
15(2)9,
15(2)10,
15(3)14,
16(1)3,
16(2)8,
17(3)9,
17(4)13,
18(4)12
- would,
2(2)159,
10(4)1,
12(2)13,
12(4)22,
13(3)26,
15(2)6,
15(2)10,
16(2)8,
17(3)11