Southern Africa Telecommunication Networks and Applications Conference (SATNAC) 2017, 3-10 Septem... more Southern Africa Telecommunication Networks and Applications Conference (SATNAC) 2017, 3-10 September 2017, Freedom of the Seas Cruise
Proceedings of the 3rd International Conference on Information Systems Security and Privacy, 2017
The bulk of currently available research in identity deception focuses on understanding the psych... more The bulk of currently available research in identity deception focuses on understanding the psychological motive behind persons lying about their identity. However, apart from understanding the psychological aspects of such a mindset, it is also important to consider identity deception in the context of the technologically integrated society in which we live today. With the proliferation of social media, it has become the norm for many people to present a false identity for various purposes, whether for anonymity or for something more harmful like committing paedophilia. Social media platforms (SMPs) are known to deal with massive volumes of big data. Big data characteristics such as volume, velocity and variety make it not only easier for people to deceive others about their identity, but also harder to prevent or detect identity deception. This paper describes the challenges of identity deception detection on SMPs. It also presents attributes that can play a role in identity deception detection, as well as the results of an experiment to develop a so-called Identity Deception Indicator (IDI). It is believed that such an IDI can assist law enforcement with the early detection of potentially harmful behaviour on SMPs.
25th Annual International Computer Software and Applications Conference. COMPSAC 2001
and the notion of organizational positions, it seems easy to construct role hierarchies. This is,... more and the notion of organizational positions, it seems easy to construct role hierarchies. This is, however, a misconception. This paper argues that, in order to reflect the functional requirements, a role hierarchy becomes very complex. In a bid to simplify the design of role hierarchies suitable for the expression of access control requirements in workflow systems, the paper proposes a "typed" role hierarchy. In a "typed" role hierarchy a role is of a specific type. The associations between different types of roles are limited by rules that govern the construction of a role hierarchy. This paper proposes a methodology to systematically construct a "typed" role hierarchy. Since the "typed" nature of the role hierarchy is only relevant during the construction of the role hierarchy, it can seamlessly be integrated into existing RBAC schemes that support the concept of role hierarchies.
A Big Data Science Experiment -- Identity Deception Detection
2015 International Conference on Computational Science and Computational Intelligence (CSCI), 2015
Identity Deception Detection is a problem on social media platforms today. Not only is there chal... more Identity Deception Detection is a problem on social media platforms today. Not only is there challenges towards determining the authenticity of people, but also with analyzing the data that forms part of the communications. These data are of heterogeneous type and include photos, videos and sound. Furthermore, most social media platforms are operating in an uncontrolled environment. Any person can contribute content and take part. Even though age restrictions do exist there are no enforcement of these laws and honesty of the public is expected. This is dangerous for minors specifically as they are either unaware of the dangers or not mature enough to be responsible for their actions online. Online predators are aware of this fact and targeting this group specifically. This paper presents work-in-progress towards developing an intelligent Identity Deception Indicator (IDI). It is envisaged that this work could eventually assists authorities in doing large-scale observation on publicly available social media platforms, such as Twitter. Of particular interest are those personas whose behavior and online content does not fit with the age group they are conversing with.
Computers and networks have provided for increased connectivity, ease of use and convenience. Oth... more Computers and networks have provided for increased connectivity, ease of use and convenience. Other advantages include the ability to communicate across borders, have access to information at your fingertips and the huge capacity for storage and transport. However, there also arises the need to properly protect these vital resources. At a computer security level, there exists the underworld community of hackers and crackers who seek to cause damage. From a military point of view, offensive actions are part of the warfare mode of operation. Thus, the attack, together with the protection of information, can take place for various reasons ranging from recreational pastimes, to skilful challenges, as well as military requirements. Networks and cyberspace have become the battleground as attacks are launched to disrupt, destroy or deny access to valuable resources. Network Warfare can thus be seen as the branch of Information Warfare that deals with the utlisation of Information and Communication Technology (ICT) to carry out various exploits of information, as well as the various defensive mechanisms that are deployed in order protect information against attack. Individual users and organisations need to be warned about the latest face of warfare that is not only being played out in the military networks, but also on the Internet and cyberspace. Consequently, Network Warfare has various facets which are often difficult to distinguish between. This paper builds on the field of Network Warfare and contains the motivation for determining a Network Warfare Capability. The motivation and requirements for determining a Network Warfare Capability are explored in this paper. This helps to recognise important considerations for determining a Network Warfare Capability. Some of the requirements are intricate and required further discussion. The extended discussion served to describe some of the requirements in greater detail. A noteworthy requirement of portraying offensive and defensive techniques is elaborated on through the use of UML diagrams. This paper, thus describes the importance of determining a Network Warfare Capability and serves as an introduction to future work in which a model to determine a Network Warfare Capability is proposed.
IFIP Advances in Information and Communication Technology, 2006
Network forensics involves capturing, recording and analysing network audit trails. A crucial par... more Network forensics involves capturing, recording and analysing network audit trails. A crucial part of network forensics is to gather evidence at the server level, proxy level and from other sources. A web proxy relays URL requests from clients to a server. Analysing web proxy logs can give unobtrusive insights to the browsing behavior of computer users and provide an overview of the Internet usage in an organization. More importantly, in terms of network forensics, it can aid in detecting anomalous browsing behavior. This paper demonstrates the use of a selforganising map (SOM) , a powerful data mining technique, in network forensics. In particular, it focuses on how a SOM can be used to analyse ' data gathered at the web proxy level.
Workflow Systems are increasingly being used to streamline organizations' business processes. Dur... more Workflow Systems are increasingly being used to streamline organizations' business processes. During the execution of business processes, information often traverses organizations' networks as documents. With the proliferation of the Internet, documents travel across open networks. These documents can, however, contain potentially sensitive information. The documents used in Workflow Systems must therefore be protected from unauthorized access. Thereafter the CSAC (Context-sensitive Access Control) model is presented to address the requirements. In conclusion it is demonstrated how this model can be implemented in an agent-based architecture. 1. 1. 1.
... General Conference Chairs Hein Venter (Department of Computer Science, University of Pretoria... more ... General Conference Chairs Hein Venter (Department of Computer Science, University of Pretoria) Marijke Coetzee (Academy for Information Technology, University of Johannesburg) Les Labuschagne (Department of Business Information Technology, University of ...
Social media platforms allow billions of individuals to share their thoughts, likes and dislikes ... more Social media platforms allow billions of individuals to share their thoughts, likes and dislikes in real-time, without any censorship. This freedom, however, comes at a cyber-security risk. Cyber threats are more difficult to detect in a cyber world where anonymity and false identities are ever-present. The speed at which these deceptive identities evolve calls for solutions to detect identity deception. Cybersecurity threats caused by humans on social media platforms are widespread and warrant attention. This research posits a solution towards the intelligent detection of deceptive identities contrived by human individuals on social media platforms (SMPs). Firstly, this research evaluates machine learning models by using attributes such as the "profile image" found on SMPs. To improve on the results delivered by these models, past research findings from the field of psychology, such as that humans lie about their gender, are used. Newly engineered features such as "gender-derived-from-the-profileimage" are evaluated to grasp whether these features detect deception with greater accuracy. Furthermore, research results from detecting non-human (also known as bot) accounts are also leveraged to improve on the initial results. These machine learning results are lastly applied to a proposed model for the intelligent detection and interpretation of identity deception on SMPs. This paper shows that the cyber-security threat of identity deception can potentially be minimized, should the vulnerability in the current way of setting up user accounts on SMPs be re-engineered in the future.
The bulk of currently available research in identity deception focuses on understanding the psych... more The bulk of currently available research in identity deception focuses on understanding the psychological motive behind persons lying about their identity. However, apart from understanding the psychological aspects of such a mindset, it is also important to consider identity deception in the context of the technologically integrated society in which we live today. With the proliferation of social media, it has become the norm for many people to present a false identity for various purposes, whether for anonymity or for something more harmful like committing paedophilia. Social media platforms (SMPs) are known to deal with massive volumes of big data. Big data characteristics such as volume, velocity and variety make it not only easier for people to deceive others about their identity, but also harder to prevent or detect identity deception. This paper describes the challenges of identity deception detection on SMPs. It also presents attributes that can play a role in identity decep...
Workflow Systems are increasingly being used to streamline organizations' business processes. Dur... more Workflow Systems are increasingly being used to streamline organizations' business processes. During the execution of business processes, information often traverses organizations' networks as documents. With the proliferation of the Internet, documents travel across open networks. These documents can, however, contain potentially sensitive information. The documents used in Workflow Systems must therefore be protected from unauthorized access. This paper enumerates three access control requirements of workflow environments, including the well-known principle of separation of duty. Thereafter the CSAC (Context-sensitive Access Control) model is presented to address the requirements. In conclusion it is demonstrated how this model can be implemented in an agent-based architecture.
Southern Africa Telecommunication Networks and Applications Conference (SATNAC) 2017, 3-10 Septem... more Southern Africa Telecommunication Networks and Applications Conference (SATNAC) 2017, 3-10 September 2017, Freedom of the Seas Cruise
Proceedings of the 3rd International Conference on Information Systems Security and Privacy, 2017
The bulk of currently available research in identity deception focuses on understanding the psych... more The bulk of currently available research in identity deception focuses on understanding the psychological motive behind persons lying about their identity. However, apart from understanding the psychological aspects of such a mindset, it is also important to consider identity deception in the context of the technologically integrated society in which we live today. With the proliferation of social media, it has become the norm for many people to present a false identity for various purposes, whether for anonymity or for something more harmful like committing paedophilia. Social media platforms (SMPs) are known to deal with massive volumes of big data. Big data characteristics such as volume, velocity and variety make it not only easier for people to deceive others about their identity, but also harder to prevent or detect identity deception. This paper describes the challenges of identity deception detection on SMPs. It also presents attributes that can play a role in identity deception detection, as well as the results of an experiment to develop a so-called Identity Deception Indicator (IDI). It is believed that such an IDI can assist law enforcement with the early detection of potentially harmful behaviour on SMPs.
25th Annual International Computer Software and Applications Conference. COMPSAC 2001
and the notion of organizational positions, it seems easy to construct role hierarchies. This is,... more and the notion of organizational positions, it seems easy to construct role hierarchies. This is, however, a misconception. This paper argues that, in order to reflect the functional requirements, a role hierarchy becomes very complex. In a bid to simplify the design of role hierarchies suitable for the expression of access control requirements in workflow systems, the paper proposes a "typed" role hierarchy. In a "typed" role hierarchy a role is of a specific type. The associations between different types of roles are limited by rules that govern the construction of a role hierarchy. This paper proposes a methodology to systematically construct a "typed" role hierarchy. Since the "typed" nature of the role hierarchy is only relevant during the construction of the role hierarchy, it can seamlessly be integrated into existing RBAC schemes that support the concept of role hierarchies.
A Big Data Science Experiment -- Identity Deception Detection
2015 International Conference on Computational Science and Computational Intelligence (CSCI), 2015
Identity Deception Detection is a problem on social media platforms today. Not only is there chal... more Identity Deception Detection is a problem on social media platforms today. Not only is there challenges towards determining the authenticity of people, but also with analyzing the data that forms part of the communications. These data are of heterogeneous type and include photos, videos and sound. Furthermore, most social media platforms are operating in an uncontrolled environment. Any person can contribute content and take part. Even though age restrictions do exist there are no enforcement of these laws and honesty of the public is expected. This is dangerous for minors specifically as they are either unaware of the dangers or not mature enough to be responsible for their actions online. Online predators are aware of this fact and targeting this group specifically. This paper presents work-in-progress towards developing an intelligent Identity Deception Indicator (IDI). It is envisaged that this work could eventually assists authorities in doing large-scale observation on publicly available social media platforms, such as Twitter. Of particular interest are those personas whose behavior and online content does not fit with the age group they are conversing with.
Computers and networks have provided for increased connectivity, ease of use and convenience. Oth... more Computers and networks have provided for increased connectivity, ease of use and convenience. Other advantages include the ability to communicate across borders, have access to information at your fingertips and the huge capacity for storage and transport. However, there also arises the need to properly protect these vital resources. At a computer security level, there exists the underworld community of hackers and crackers who seek to cause damage. From a military point of view, offensive actions are part of the warfare mode of operation. Thus, the attack, together with the protection of information, can take place for various reasons ranging from recreational pastimes, to skilful challenges, as well as military requirements. Networks and cyberspace have become the battleground as attacks are launched to disrupt, destroy or deny access to valuable resources. Network Warfare can thus be seen as the branch of Information Warfare that deals with the utlisation of Information and Communication Technology (ICT) to carry out various exploits of information, as well as the various defensive mechanisms that are deployed in order protect information against attack. Individual users and organisations need to be warned about the latest face of warfare that is not only being played out in the military networks, but also on the Internet and cyberspace. Consequently, Network Warfare has various facets which are often difficult to distinguish between. This paper builds on the field of Network Warfare and contains the motivation for determining a Network Warfare Capability. The motivation and requirements for determining a Network Warfare Capability are explored in this paper. This helps to recognise important considerations for determining a Network Warfare Capability. Some of the requirements are intricate and required further discussion. The extended discussion served to describe some of the requirements in greater detail. A noteworthy requirement of portraying offensive and defensive techniques is elaborated on through the use of UML diagrams. This paper, thus describes the importance of determining a Network Warfare Capability and serves as an introduction to future work in which a model to determine a Network Warfare Capability is proposed.
IFIP Advances in Information and Communication Technology, 2006
Network forensics involves capturing, recording and analysing network audit trails. A crucial par... more Network forensics involves capturing, recording and analysing network audit trails. A crucial part of network forensics is to gather evidence at the server level, proxy level and from other sources. A web proxy relays URL requests from clients to a server. Analysing web proxy logs can give unobtrusive insights to the browsing behavior of computer users and provide an overview of the Internet usage in an organization. More importantly, in terms of network forensics, it can aid in detecting anomalous browsing behavior. This paper demonstrates the use of a selforganising map (SOM) , a powerful data mining technique, in network forensics. In particular, it focuses on how a SOM can be used to analyse ' data gathered at the web proxy level.
Workflow Systems are increasingly being used to streamline organizations' business processes. Dur... more Workflow Systems are increasingly being used to streamline organizations' business processes. During the execution of business processes, information often traverses organizations' networks as documents. With the proliferation of the Internet, documents travel across open networks. These documents can, however, contain potentially sensitive information. The documents used in Workflow Systems must therefore be protected from unauthorized access. Thereafter the CSAC (Context-sensitive Access Control) model is presented to address the requirements. In conclusion it is demonstrated how this model can be implemented in an agent-based architecture. 1. 1. 1.
... General Conference Chairs Hein Venter (Department of Computer Science, University of Pretoria... more ... General Conference Chairs Hein Venter (Department of Computer Science, University of Pretoria) Marijke Coetzee (Academy for Information Technology, University of Johannesburg) Les Labuschagne (Department of Business Information Technology, University of ...
Social media platforms allow billions of individuals to share their thoughts, likes and dislikes ... more Social media platforms allow billions of individuals to share their thoughts, likes and dislikes in real-time, without any censorship. This freedom, however, comes at a cyber-security risk. Cyber threats are more difficult to detect in a cyber world where anonymity and false identities are ever-present. The speed at which these deceptive identities evolve calls for solutions to detect identity deception. Cybersecurity threats caused by humans on social media platforms are widespread and warrant attention. This research posits a solution towards the intelligent detection of deceptive identities contrived by human individuals on social media platforms (SMPs). Firstly, this research evaluates machine learning models by using attributes such as the "profile image" found on SMPs. To improve on the results delivered by these models, past research findings from the field of psychology, such as that humans lie about their gender, are used. Newly engineered features such as "gender-derived-from-the-profileimage" are evaluated to grasp whether these features detect deception with greater accuracy. Furthermore, research results from detecting non-human (also known as bot) accounts are also leveraged to improve on the initial results. These machine learning results are lastly applied to a proposed model for the intelligent detection and interpretation of identity deception on SMPs. This paper shows that the cyber-security threat of identity deception can potentially be minimized, should the vulnerability in the current way of setting up user accounts on SMPs be re-engineered in the future.
The bulk of currently available research in identity deception focuses on understanding the psych... more The bulk of currently available research in identity deception focuses on understanding the psychological motive behind persons lying about their identity. However, apart from understanding the psychological aspects of such a mindset, it is also important to consider identity deception in the context of the technologically integrated society in which we live today. With the proliferation of social media, it has become the norm for many people to present a false identity for various purposes, whether for anonymity or for something more harmful like committing paedophilia. Social media platforms (SMPs) are known to deal with massive volumes of big data. Big data characteristics such as volume, velocity and variety make it not only easier for people to deceive others about their identity, but also harder to prevent or detect identity deception. This paper describes the challenges of identity deception detection on SMPs. It also presents attributes that can play a role in identity decep...
Workflow Systems are increasingly being used to streamline organizations' business processes. Dur... more Workflow Systems are increasingly being used to streamline organizations' business processes. During the execution of business processes, information often traverses organizations' networks as documents. With the proliferation of the Internet, documents travel across open networks. These documents can, however, contain potentially sensitive information. The documents used in Workflow Systems must therefore be protected from unauthorized access. This paper enumerates three access control requirements of workflow environments, including the well-known principle of separation of duty. Thereafter the CSAC (Context-sensitive Access Control) model is presented to address the requirements. In conclusion it is demonstrated how this model can be implemented in an agent-based architecture.
Uploads
Papers by J. Eloff