Mujeeb Alam

Academic

Career

Verbatim text

Insider Threat Management System 
An insider threat management app is being made, whilst keeping the perspective of sensitive 
organizations like NESCOM in mind. This is a web application to detect data exfiltration events. This 
is to make sure an organization does not lose assets and important information due to a trusted 
employee within the organization turning malicious. It can only be accessed by a highly authorized 
person i.e. admin with login credentials for the app. The admin can check the users involved in 
malicious activities by monitoring activities done on sensitive data and also, check for its 
movement. Moreover, the admin can track the external devices that have been connected along 
with monitoring activities like movement to and from the device. The user involved in such 
malicious activities can be detected by the identity management module.       
Features include: 
- Identity management: Information about each system captured and stored along with logon and 
logoff times. 
- Real-time monitoring of sensitive data. Capturing events such as renaming, creation, deletion and 
modifying of data. 
- Tracking sensitive data movement locally within the system. Capturing old and new paths. 
- Tracking and monitoring user application usage.  
- Real-time monitoring of new device connections internal and external to the system along with 
data movement monitoring. 
- Deployment of application as a service to run silently in the background. 
External connection 
-External info extraction 
-External movement 
-Integration of modules 
-Database setup 
-Remote server setup 
-Web app development and testing 
 
 
Technology Used: 
C#  .NET Framework 4.7.2 Python 3.9.4 HTML, CSS,  
JavaScript Django Web Framework 2.2.10 
Visual Studio, Atom Editor 
Supervisor Name: 
Internal: Dr. Muhammad Asim 
External: Ms. Sameera Amjad (NESCOM) 
Group Members:   
Myra Rafique Khan (i17 - 0129) 
Mujeeb Alam (i17 - 0164) 
                                                                                                                                  Amina Siddique (i17 - 0289)