Online Monitoring and Prevention of Internal Security Threats in Academic Campuses
D. S. Bhilare · 2013
It has always been challenging to keep watch on a watchman. In most of the institutions responsibility of protecting student, faculty and research data is entrusted to handful of trusted technocrats. As they are trusted persons, they are usually not monitored. There are several studies, which show that in majority of Information Security breaches, insiders were involved. Academic institutions have important student information and sensitive information about ongoing and finished research projects. As per various laws and acts, it is mandatory to protect student information and Intellectual Property. Generally University campuses are less disciplined compared to a business organization, which makes it more difficult. Further, fast moving student population and budget constraint also make the job further difficult. Most of the tools provide information about suspicious host but are unable to identify the exact user. Proposed architecture addresses this issue by capturing user actions and associated applications. In order to track and monitor user activities, they are correlated with active directory context. The proposed architecture enables implementation without disrupting the Campus Network and doesn’t degrade the network performance. Further, it allows real-time monitoring and communication of alerts to concerned persons.