free amp template


Sensitive Information Detection and Reporting (SIDR)

Team Red, CS410 & CS411W 2020

Problem Team Presentations Deliverables Labs Glossary ReferencesReports


Problem Statement

For enterprises of any size, the release of sensitive information can provide bad actors unauthorized access to private digital assets, potentially resulting in tarnished reputations and costing millions of dollars in damage.

Problem Characteristics

  • Large breaches can develop from small mistakes
  • Private or confidential information is sometimes placed in publicly accessible files or web pages
  • Public file/web page directories may be shared with individuals who are no longer active
  • Humans can not manually search everywhere that potentially contains their confidential information

Problem History

  • 60% of 4856 organizational data breaches reported in 2019 were the result of human error (Winder, 2019).
  • According to IBM's 2019 Cost of a Data Breach Report, the average cost is $3.9 million (IBM, 2019).

Solution Statement

By employing a convenient and actively maintained web crawler or file scanner to scour web content for sensitive data, enterprises will be kept notified of potential data leaks and unauthorized access to sensitive information.

Solution Characteristics

  • Prevents data breaches that would have been caused by human error
  • Allows for the correction of small mistakes that could potentially become a large data breach
  • Allows automated searching of every local and public location that could potentially contain confidential information
  • Finds private or confidential information that was mistakenly put on public files or web pages
  • Allows searching of public file/web page directories that are no longer actively maintained

Team

The Red Team is comprised of students at Old Dominion University who oversee the development of Sensitive Information Detection & Reporting (SIDR), software that will help the University's Computer Science Department identify data leaks.

Andrew Paterson

Software Developer & Detection Specialist

Andrew is a senior in the Computer Science program at Old Dominion University. He will graduate in the Fall of 2020 with plans of becoming a full-time data science software engineer. Some of Andrew's hobbies include surfing, weight-lifting, and playing soccer. As the Detection Specialist, he is an charge of designing SIDR's lexical analyzer for detection of information deemed as sensitive or confidential.

Cameron Allen

Project Lead

Cameron is a senior majoring in Computer Science and minoring in Cybersecurity at Old Dominion University. He has real world experience developing professional applications in C#, C++, and Python, as well as experince protecting the digital network of one of seventeen U.S. Department of Energy national laboratories. His long term career dream is to become a web application penetration tester. In his free time he often plays video games, but also enjoys reading, hiking, and coding for personal projects. He is in charge of designing the web crawler component.

Dane Bruce

Web Developer & Front-End Specialist

Dane is a senior in Computer Science through Old Dominion University's Online curriculum. He currently lives in Charleston, SC with his wife and their Italian Greyhound, Nero. In his spare time he enjoys video games, light video game modding, woodworking, the beach, and Charleston's wonderful food. As the Front-End Specialist, he is in charge of designing the UI.

Evan Mulloy

Web Developer & Back-End Specialist

Evan Mulloy is a Computer Science major and Cybersecurity minor who first began learning how to program at the age of 12. A problem-solver at heart, he enjoys making functional programs and websites. C# is his favorite programming language, but he's also familiar with Java, JavaScript, C, C++, PHP, and Python. He has experience as a developer for an MMOG server emulator project. Currently, he is an intern for a management consulting company that specializes in IT Modernization and Cybersecurity. As the Back-End Specialist, he is in charge of using APIs and programming the underlying logic of the file scanner component.

Michael Hewitt

Documentation Specialist

Michael is a senior undergraduate and Computer Science major at Old Dominion University. In addition to being a student, Michael lives in Fairfax, VA, and works as a Cybersecurity Engineer and Advisor in the Washington, D.C. metro area. As a security engineer, Michael is responsible for vulnerability and configuration management, advises his customers on the implementation of new security tools and legal requirements, and writes systems documentation, standard operating procedures, and proposals. When he has free time outside of family, work, and school, he enjoys TV shows, video games, podcasts, books, and audiobooks. As the Documentation Specialist, he is in charge of overseeing which documents are published by the web developers. He also oversees the Machine-Learning aspects of SIDR along with Andrew Paterson.

Mohammad Bashghareh

Undecided

Mohammad is an undergraduate Computer Science major at Old Dominion University who lives in Richmond, VA. His expertise includes cybersecurity, C++, and Graphic User Interface (GUI) design. He enjoys spending his free time learning new programming languages and volunteering for non-profit organizations.

Kasey Howlett

Database Engineer

Kasey Howlett is a senior Computer Science student at Old Dominion University. She is currently working at Newport News Shipbuilding as a Data Science Co-op. Her biggest interest outside of computer science is baking. Kasey intends to get a job in the field of either Data Science of Data Engineering. As the Database Specialist, she is in charge of overseeing all aspects related to the SIDR databases.

References