Ayesha Gul

Academic

Career

Verbatim text

Insider Threat Detection 
 
Threats to data and security don’t always start on the outside, most of the time it’s actors within 
the organizations who carry out malicious and sophisticated acts. Within an organization, every 
employee is capable of accessing a wide range of information which unintentionally or intentionally 
can put the organization in danger.  Our software is capable of detecting activities that can lead to 
such malicious acts i.e. monitoring applications as well as complete directories, tracking data 
movements, detecting IP/MAC spoofing, tracking shell usage, logging connection information to 
external devices, detecting privilege escalation and providing a user friendly dashboard. Moreover, 
our application is running as a hidden service in the background. It also supports a rule-based reasoning 
module 
capable 
of 
detecting 
insider 
threats 
before 
they 
occur. 
Features include: 
-Storing logs locally while connection to server is severed. 
-Detecting 
any 
change 
in 
IP 
or 
MAC 
address. 
-Dynamically monitoring directories and their subdirectories for any change. 
-Tracking 
shell 
access 
and 
usage. 
-Detecting insertion of any external device and copying data to the external device. 
-Two-admin 
authentication 
for 
greater 
security 
on 
the 
admin 
dashboard. 
-Rule based inference engine capable of using the logs to generate critical alerts. 
-Using encryption while communicating data to the server. 
 
 
 
 
 
Technology Used: 
C#, .Net core framework , ReactJS, SqlLite,  
Supervisor Name: 
Dr. Muhammad Asim 
Group Members:   
Adan Abbas (I18-0401) 
Ayesha Gul (I18-0467)