Advanced framework of defense system for prevetion of insider's malicious behaviors

Preventing data misuse by trusted users is the hardest information protection challenge to solve. Traditional IT security measures which simply control unauthorized network or application access is ineffective, as insiders already have full authorization to the data. A more powerful security approach is required to defend against the Insider Threat. Our proposed advanced framework provides high level security for intranets and will defend against the above challenges. The main key is detection, deterrence, and prevention in both physical and virtual environments. We are going to address insider threat by monitoring and controlling both user access and usage rights to data using advanced distinction basis of normal, abnormal and suspicious behavior.