Lockheed MartinThe DatAvengers:

Jessica Morris, Zeyad Negash, Noelle Browne, Sarah Grandfield

Who is Lockheed Martin? American company with global presence Aerospace, defense, security, and advanced technologies

World’s largest defense contractor Involved with many various government contracts

In the US: CIA, FBI, NSA, ILS, The Pentagon, Census Bureau and Postal Service

Security of the organization is EXTREMELY IMPORTANT

A Vested Interest in Keeping Spies Out

Telling Phone Calls

Suspicious Access Patterns Most users access a small set of IP

addresses, at an about equal amount. A handful of users access only one IP

address or one IP address disproportionately to the others accessed.

Although use of one IP is unusual, it does not necessarily mean guilt alone.

All users with a count of IPs above the median were examined

Suspicious

Median count of IPsAverage count of IPs

Air Travel Patterns

Employee Termination

Terminated employees are especially suspicious

Worth looking at crossover factors between terminated employees

Reasons for termination a factor

Reasons for Employee Termination

Terminated Employees With Single IP Address Counts > 300

Factors for Investigation

Check outgoing calls to North Korea, Peru, and Eritrea Cross reference with users who were fired or demoted that had

suspicious IP patterns Compare with air travel data

List of Potential Spies

Questions?