@inproceedings{66743e5e80b54981968701974d2dde4b,
title = "M-score: Estimating the potential damage of data leakage incident by assigning misuseability weight",
abstract = "Over the past few years data leakage and data misuse have become a major concern for organizations. A data leakage or data misuse incident can damage an organization's reputation and brand name as well as compromise the privacy of its customers. Much research has been conducted in order to find a solution to these threats. Most methods are based on anomaly detection that tracks the user's behavior by examining the syntax of SQL queries in order to detect outlier queries. Other methods examine the data retrieved by the query. In this paper, we propose a new concept for analyzing the retrieved data - the Misuseability Weight. This approach focuses on assigning a score that represents the sensitivity level of the data exposed to the user. This measure predicts the ability of a user to exploit the exposed data in a malicious way. We suggest a new measure, the M-score, which assigns a misuseability weight to a table of data, propose some properties of the new measure and demonstrate its usefulness using over several leakage scenarios.",
keywords = "data leakage, data misuse, misuseability weight, security measures",
author = "Amir Harel and Asaf Shabtai and Lior Rokach and Yuval Elovici",
year = "2010",
month = dec,
day = "20",
doi = "10.1145/1866886.1866891",
language = "English",
isbn = "9781450300926",
series = "Proceedings of the ACM Conference on Computer and Communications Security",
pages = "13--20",
booktitle = "Proceedings of the 2010 ACM Workshop on Insider Threats, Insider Threats '10, Co-located with CCS'10",
note = "2010 ACM Workshop on Insider Threats, Insider Threats '10, Co-located with CCS'10 ; Conference date: 04-10-2010 Through 08-10-2010",
}