Insider Threat Behavior Factors: A comparison of theory with reported incidents

Insider Threat Behavior Factors:A comparison of theory with reported incidents

Asmaa Munshi, Peter Dell and Helen Armstrong 2012 45th Hawaii International Conference on System Sciences

Summary

This paper Identifies the factors for insiders behavior Provides a comparison of academic

research with empirical evidence from reported incidents

Recommends future research directions

Appreciative Comments

The paper identified the need for a holistic approach to encapsulate a broader perspective of the insiders behavior.

The research conducted is beneficial for security professionals for protection of organizational data.

Appreciative Comments The paper proposed directions for further

research

Gender and Remote Access as factors totally overlooked by Literature.

Psychological Factors needs Literature based research Outsourcing and Cultural Factor needs Evidence Based

Research

Critical Comment

Cultural Factor

“According to Royds most of the data losses reported by the government of the UK since the HRMC incident show that only 5% occur because of technology issues while 95% occur as a result of cultural factors”

“Empirical evidence from reported incidents reviewed in this study has found no evidence to support the assertions”

HMRC [UK Government’s Revenues and Customs Department]

Question For Discussion

Let suppose you observe some suspicious activity at your workplace.

What would be your reaction?

Insider Threat Behavior Factors: A comparison of theory with reported incidents

Documents

Transcript of Insider Threat Behavior Factors: A comparison of theory with reported incidents

Insider Threat Working Group

INSIDER THREAT DEFENSE Threats Incidents... · Definitions Of Insider And Insider Threat An Insider is someone who has authorized access to an organization facilities, data, information

Understanding the Insider Threat

Real-world Cases of Insider Threat: Combating Malicious IT ... · The CERT Insider Threat Center The CERT Insider Threat Center is a Center of Insider Threat Expertise at the Software

Radicalisation and Insider Threat

Evolving Insider Threat Detection

You've caught an Insider Threat, now what? The Human Side of Insider Threat Investigations

Insider threat v3

Insider Threat and Security Clearance Reform · Insider Threat and Security Clearance Reform Goal Leaders: ... • Conducted scenario-based training course for Insider Threat program

MITIGATING THE INSIDER THREAT WITH HIGH · PDF filemitigating the insider threat with high-dimensional anomaly ... mitigating the insider threat with high-dimensional anomaly detection

Insider Threats - University of Pittsburgh · Unintentional Insider Threat Definition • An unintentional insider threat is (1) a currentAn unintentional insider threat is (1) a

Privacy Impact Assessment for Insider Threat Reporting ......Insider Threat Reporting Mobile Platform Page 3 either mitigate the potential insider threat concern, or obtain articulable

LEGAL HURDLES TO INSIDER THREAT INFORMATION SHARING€¦ · a National Insider Threat Task Force (NITTF), required that agencies implement insider threat detection and prevention

Network Security, Incident Management, and Insider … · Network Security, Incident Management, and Insider Threats ... 2. Insider Threat Agenda. ... Insider Threat Issue.

Managing insider threat

Insider Threat Summit - The Future of Insider Threat Detection

Insider Threat 2 v1

SureView® Insider Threat

Forcepoint Insider Threat · Forcepoint Insider Threat Empowers Your Organization Forcepoint Insider Threat saves you time and effort by automatically scoring and prioritizing your

@Vectra_networks Insider threat report