Lost in Translation: Improving Decoy Documents Via Automated Translation

Date Added: Apr 2012
Format: PDF

Detecting insider attacks continues to prove to be one of the most difficult challenges in securing sensitive data. Decoy information and documents represent a promising approach to detecting malicious masqueraders; however, false positives can interfere with legitimate work and take up user time. The authors propose generating foreign language decoy documents that are sprinkled with untranslatable enticing proper nouns such as company names, hot topics, or apparent login information. Their goal is for this type of decoy to serve three main purposes.