Approach for the analysis of the contacts of the critical infrastructure employees
Evgenia Sergeevna Novikova, Yana A. Bekeneva, Aleksey A. Volkov, Andrey Vladimirovich Shorov · 2018
The detection of the sophisticated information threats such as insider threat or financial frauds requires construction of the employees' behavior patterns. The analysis of the existing interaction patterns enhances understanding of the employee's behavior. The paper presents an approach for the visualization-driven analysis of the contacts of the employees' of the organization. The specific feature of the approach is that the interaction patterns of the employees' are extracted from the proximity switch logs. The key elements of the proposed approach are graph of the employee's contacts and Gannt-based visualization of the contacts to establish both patterns and anomalies in the existing employees' contact. The approach is tested against data set provided within VAST MiniChallenge-2 contest that contains logs from access control sensors describing employees' movement within organization building.