@inproceedings{37f5f5ff1a6b431a9fa4cb3c68ca0baf,
title = "Towards reducing the data exfiltration surface for the insider threat",
abstract = "Unauthorized data exfiltrations from both insiders and outsiders are costly and damaging. Network communication resources can be used for transporting data illicitly out of the enterprise or cloud. Combined with built-in malware copying utilities, we define this set of tools as comprising the Data Exfiltration Surface (DXS). For securing valuable data, it is desirable to reduce the DXS and maintain controls on the egress points. Our approach is to host the data in a protected enclave that includes novel Software Data Diode (SDD) installed on a secured, border gateway. The SDD allows copying data into the enclave systems but denies data from being copied out. Simultaneously, it permits remote access with remote desktop and console applications. Our tests demonstrate that we are able to effectively reduce the DXS and we are able to protect data from being exfiltrated through the use of the SDD.",
keywords = "Data Exfiltration, Data Exfiltration Surface, Insider Threat, Software Data Diode",
author = "Schlicher, {Bob G.} and MacIntyre, {Lawrence P.} and Abercrombie, {Robert K.}",
note = "Publisher Copyright: {\textcopyright} 2016 IEEE.; 49th Annual Hawaii International Conference on System Sciences, HICSS 2016 ; Conference date: 05-01-2016 Through 08-01-2016",
year = "2016",
month = mar,
day = "7",
doi = "10.1109/HICSS.2016.345",
language = "English",
series = "Proceedings of the Annual Hawaii International Conference on System Sciences",
publisher = "IEEE Computer Society",
pages = "2749--2758",
editor = "Sprague, {Ralph H.} and Bui, {Tung X.}",
booktitle = "Proceedings of the 49th Annual Hawaii International Conference on System Sciences, HICSS 2016",
}