OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Eric Hacker (ehackerLUCENT.COM)
Date: Thu Jan 18 2001 - 10:19:12 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hello,

    Does anyone know of IDS tools that attempt to detect data-mining activity,
    especially with regards to web traffic?

    Here is the scenario: An organization has a database driven B to (C or B)
    website that contains product information (price/availability etc.) that is
    variable. In individual quantities, this information is mostly harmless and
    necessary to give to the customer. However, in aggregate, this data may give
    competitors information that would otherwise be confidential.

    The idea would be to detect data-mining efforts of competitors to aggregate
    the data. One must assume that efforts will be made on the part of the
    competitor to disguise such activity. It would seem to me, however, that
    there are practical limitations on the disguising capability and that IDS
    technology looking for anomalous traffic patterns may detect such.

    Anyone have any leads/ideas?

    Due to time constraints, I'm asking this question without being able to do
    much research. I apologize if I missed something obvious.

    Thank you,
    Eric Hacker, CISSP, GCIA, MCSE, CCSE
    Network Security Consultant
    Lucent Worldwide Services
    "Long gone are the days when one's surname referred to the role
    one had in the community."