Detection of Stego-Insiders in Corporate Networks Based on a Hybrid NoSQL Database Model

The paper describes the hybrid model of a NoSQL database for storing and subsequent processing of attributes of users, applications, devices, packets containing information on the use of steganographic methods to search for the insiders in corporate networks. Experiments were carried out with data on the network activity of users.