State services will spread misinformation to calculate insiders
Among the new projects that received funding from the US military agency DARPA, an interesting development from the company Allure Security Technology was found under the convoluted title Anomaly Detection At Multiple Scales, in short, ADAMS.
The ADAMS system is aimed at combating the leakage of secret documents, which then get into open access (for example, on the Wikileaks website). According to the developers, the example of Wikileaks demonstrates “a new systemic threat of leakage and mass disclosure of state confidential information”. Oppose it offer "techniques and mechanisms for identifying dangerous insiders in the organization by applying automatically generated plausible disinformation and modern network monitoring systems such as Data Leakage Prevention (DLP)."
In the future, the system will be able to track access and attempts of illegal distribution of generated misinformation.
Reportedly, this technology was developed at Columbia University and can be used under license. For the demonstration, a prototype was created that works with the open source Data Leak Prevention system.
')
Indeed, on the website of Columbia University there is a demo version of a certain program called FOG (“Fog”). There you can generate a plausible document (PDF, HTML, image) on a given topic, which is supposed to be added to real secret documents on your hard disk or in the cloud.
When you open such a document, he tries to send a message to the server, and the server notifies about the leak of information of the author of the document. Even without such messages, the appearance of misinformation on Wikileaks or another similar site can seriously undermine the trust of the audience.
Now ADAMS works quite buggy, but the Pentagon should bring the project to mind. By the way, Peter [Mudge] Zatko , a renowned IT security professional, former activist of the hacker groups L0pht and The Cult of the Dead Cow, author of the L0phtCrack, AntiSniff and l0phtwatch programs, deals with the selection and financing of high-tech projects in DARPA.
via Wired
The ADAMS system is aimed at combating the leakage of secret documents, which then get into open access (for example, on the Wikileaks website). According to the developers, the example of Wikileaks demonstrates “a new systemic threat of leakage and mass disclosure of state confidential information”. Oppose it offer "techniques and mechanisms for identifying dangerous insiders in the organization by applying automatically generated plausible disinformation and modern network monitoring systems such as Data Leakage Prevention (DLP)."
In the future, the system will be able to track access and attempts of illegal distribution of generated misinformation.
Reportedly, this technology was developed at Columbia University and can be used under license. For the demonstration, a prototype was created that works with the open source Data Leak Prevention system.
')
Indeed, on the website of Columbia University there is a demo version of a certain program called FOG (“Fog”). There you can generate a plausible document (PDF, HTML, image) on a given topic, which is supposed to be added to real secret documents on your hard disk or in the cloud.
When you open such a document, he tries to send a message to the server, and the server notifies about the leak of information of the author of the document. Even without such messages, the appearance of misinformation on Wikileaks or another similar site can seriously undermine the trust of the audience.
Now ADAMS works quite buggy, but the Pentagon should bring the project to mind. By the way, Peter [Mudge] Zatko , a renowned IT security professional, former activist of the hacker groups L0pht and The Cult of the Dead Cow, author of the L0phtCrack, AntiSniff and l0phtwatch programs, deals with the selection and financing of high-tech projects in DARPA.
via Wired
Source: https://habr.com/ru/post/131984/
All Articles