Enhancing the architecture of an insider threat detection system through file activity monitoring

F. Muxamadiyev

Samarqand davlat universiteti ilmiy tadqiqotlar axborotnomasi · 2026-yil

Annotatsiya

This paper proposes an improvement of a client-server architecture designed to detect insider threats by monitoring file operations of users working with documents in real time. The study considers actions such as file creation, deletion, copying, printing, transfer to USB devices, and access to confidential files as key features. These features are grouped by time intervals using a sliding window mechanism and transformed into vector form for intelligent models. The model evaluates user activity as normal or anomalous and generates an alert or response action when a risky state is detected. Performing the main computational processes on the client side enables faster real-time analysis, reduces server load, and limits unnecessary transmission of confidential data. The proposed improved architecture can be integrated into DLP, SIEM, and UEBA systems as an additional module.

Maqola ma’lumotlari
MualliflarF. Muxamadiyev
JurnalSamarqand davlat universiteti ilmiy tadqiqotlar axborotnomasi
NashriyotСамарқанд давлат университети
ISSN2091-5446, 2181-1296
Nashr sanasi2026-07-01
Jild2
Son3
Betlar45-55
TilIngliz
DOI10.59251/2181-3973.2025.v1.138.1.3953
Indeksga qo‘shilgan2026-09-02

DOI: 10.59251/2181-3973.2025.v1.138.1.3953 · Maqolaning asl sahifasi

Iqtibos keltirish

APAF. Muxamadiyev (2026). ENHANCING THE ARCHITECTURE OF AN INSIDER THREAT DETECTION SYSTEM THROUGH FILE ACTIVITY MONITORING. Samarqand davlat universiteti ilmiy tadqiqotlar axborotnomasi, 2(3), 45-55. https://doi.org/10.59251/2181-3973.2025.v1.138.1.3953
GOST (OAK)F. Muxamadiyev ENHANCING THE ARCHITECTURE OF AN INSIDER THREAT DETECTION SYSTEM THROUGH FILE ACTIVITY MONITORING // Samarqand davlat universiteti ilmiy tadqiqotlar axborotnomasi. – 2026. – T. 2, № 3. – P. 45-55. – DOI: 10.59251/2181-3973.2025.v1.138.1.3953.
MLAF. Muxamadiyev. “ENHANCING THE ARCHITECTURE OF AN INSIDER THREAT DETECTION SYSTEM THROUGH FILE ACTIVITY MONITORING.” Samarqand davlat universiteti ilmiy tadqiqotlar axborotnomasi, 2(3), 45-55, 2026. https://doi.org/10.59251/2181-3973.2025.v1.138.1.3953
ChicagoF. Muxamadiyev. “ENHANCING THE ARCHITECTURE OF AN INSIDER THREAT DETECTION SYSTEM THROUGH FILE ACTIVITY MONITORING.” Samarqand davlat universiteti ilmiy tadqiqotlar axborotnomasi, 2(3), 45-55 (2026). https://doi.org/10.59251/2181-3973.2025.v1.138.1.3953
HarvardF. Muxamadiyev (2026) ‘ENHANCING THE ARCHITECTURE OF AN INSIDER THREAT DETECTION SYSTEM THROUGH FILE ACTIVITY MONITORING’, Samarqand davlat universiteti ilmiy tadqiqotlar axborotnomasi, 2(3), 45-55. https://doi.org/10.59251/2181-3973.2025.v1.138.1.3953
BibTeX
@article{fmuxamadiyev2026,
  title = {ENHANCING THE ARCHITECTURE OF AN INSIDER THREAT DETECTION SYSTEM THROUGH FILE ACTIVITY MONITORING},
  author = {F. Muxamadiyev},
  journal = {Samarqand davlat universiteti ilmiy tadqiqotlar axborotnomasi},
  year = {2026},
  volume = {2},
  number = {3},
  pages = {45-55},
  doi = {10.59251/2181-3973.2025.v1.138.1.3953},
  url = {https://doi.org/10.59251/2181-3973.2025.v1.138.1.3953}
}

Boshqa maqola uchun iqtibos tayyorlash

Samarqand davlat universiteti ilmiy tadqiqotlar axborotnomasi jurnalidan boshqa maqolalar

Samarqand davlat universiteti ilmiy tadqiqotlar axborotnomasi — barcha maqolalar · 2026-yil arxivi