Integrating Cyber Deception Into Attribute-Based Access Control (ABAC) for Insider Threat Detection

Insider threat is an ever-present challenge to corporate security. The availability of knowledge and privileges insiders makes it extremely difficult prevent, detect or deter malicious insider activities. In the literature, several studies have proposed deception-based approaches mitigate threats through different layers systems. However, integration access control cyber deception methods has not been adequately discussed. this paper, we integrate Attribute-based Access Control (ABAC) with honey-based techniques effectively track insiders, particularly in context a dynamic work environment. To best our knowledge, first study design, implement evaluate integration. Our evaluation results show that framework reliably identifies sensitive attributes system generates indistinguishable honey values protect them average similarity score 0.90 truth.