Insider Threat Behavior Factors: A comparison of theory with reported incidents

6
Insider Threat Behavior Factors: A comparison of theory with reported incidents Asmaa Munshi, Peter Dell and Helen Armstrong 2012 45 th Hawaii International Conference on System Sciences

description

Insider Threat Behavior Factors: A comparison of theory with reported incidents. Asmaa Munshi , Peter Dell and Helen Armstrong 2012 45 th Hawaii International Conference on System Sciences. Summary. This paper I dentifies the factors for insiders behavior - PowerPoint PPT Presentation

Transcript of Insider Threat Behavior Factors: A comparison of theory with reported incidents

Page 1: Insider Threat Behavior Factors: A comparison of theory with reported incidents

Insider Threat Behavior Factors:A comparison of theory with reported incidents

Asmaa Munshi, Peter Dell and Helen Armstrong 2012 45th Hawaii International Conference on System Sciences

Page 2: Insider Threat Behavior Factors: A comparison of theory with reported incidents

Summary

This paper Identifies the factors for insiders behavior Provides a comparison of academic

research with empirical evidence from reported incidents

Recommends future research directions

Page 3: Insider Threat Behavior Factors: A comparison of theory with reported incidents

Appreciative Comments

The paper identified the need for a holistic approach to encapsulate a broader perspective of the insiders behavior.

The research conducted is beneficial for security professionals for protection of organizational data.

Page 4: Insider Threat Behavior Factors: A comparison of theory with reported incidents

Appreciative Comments The paper proposed directions for further

research

Gender and Remote Access as factors totally overlooked by Literature.

Psychological Factors needs Literature based research Outsourcing and Cultural Factor needs Evidence Based

Research

Page 5: Insider Threat Behavior Factors: A comparison of theory with reported incidents

Critical Comment

Cultural Factor

“According to Royds most of the data losses reported by the government of the UK since the HRMC incident show that only 5% occur because of technology issues while 95% occur as a result of cultural factors”

“Empirical evidence from reported incidents reviewed in this study has found no evidence to support the assertions”

HMRC [UK Government’s Revenues and Customs Department]

Page 6: Insider Threat Behavior Factors: A comparison of theory with reported incidents

Question For Discussion

Let suppose you observe some suspicious activity at your workplace.

What would be your reaction?


Real-world Cases of Insider Threat: Combating Malicious IT ... · The CERT Insider Threat Center The CERT Insider Threat Center is a Center of Insider Threat Expertise at the Software

Real-world Cases of Insider Threat: Combating Malicious IT ... · The CERT Insider Threat Center The CERT Insider Threat Center is a Center of Insider Threat Expertise at the Software

Insider Threat Records Checks

Insider Threat Records Checks

Insider Threat Experiences

Insider Threat Experiences

Mitigating Your Biggest Security Challenge: Your Insider Threat · 2015-06-23 · According to Verizon Data Breach Report 2013, 69% of reported security incidents involved an insider.

Mitigating Your Biggest Security Challenge: Your Insider Threat · 2015-06-23 · According to Verizon Data Breach Report 2013, 69% of reported security incidents involved an insider.

2016 Insider Threat Report - Crowd Research Partnerscrowdresearchpartners.com/wp-content/uploads/2017/07/Insider... · insider threat spotlight report 5 insider threats and vulnerability.

2016 Insider Threat Report - Crowd Research Partnerscrowdresearchpartners.com/wp-content/uploads/2017/07/Insider... · insider threat spotlight report 5 insider threats and vulnerability.

LEGAL HURDLES TO INSIDER THREAT INFORMATION SHARING€¦ · a National Insider Threat Task Force (NITTF), required that agencies implement insider threat detection and prevention

LEGAL HURDLES TO INSIDER THREAT INFORMATION SHARING€¦ · a National Insider Threat Task Force (NITTF), required that agencies implement insider threat detection and prevention

Developing Your Insider Threat Program: Insider Threat Best Practices

Developing Your Insider Threat Program: Insider Threat Best Practices

2018 Insider Threat Report - Crowd Research Partnerscrowdresearchpartners.com/.../2017/07/Insider-Threat-Report-2018.pdf · The resulting Insider Threat Report is the most comprehensive

2018 Insider Threat Report - Crowd Research Partnerscrowdresearchpartners.com/.../2017/07/Insider-Threat-Report-2018.pdf · The resulting Insider Threat Report is the most comprehensive

MITIGATING THE INSIDER THREAT WITH HIGH · PDF filemitigating the insider threat with high-dimensional anomaly ... mitigating the insider threat with high-dimensional anomaly detection

MITIGATING THE INSIDER THREAT WITH HIGH · PDF filemitigating the insider threat with high-dimensional anomaly ... mitigating the insider threat with high-dimensional anomaly detection

Insider threat v3

Insider threat v3

Evolving Insider Threat Detection

Evolving Insider Threat Detection

Insider Threat Mitigation

Insider Threat Mitigation

Understanding the Insider Threat

Understanding the Insider Threat

CYBERSECURITY - SIFMA€¦ · the insider threat at financial institutions; and (3) to help financial firms measure their insider threat program’s effectiveness. The Insider Threat

CYBERSECURITY - SIFMA€¦ · the insider threat at financial institutions; and (3) to help financial firms measure their insider threat program’s effectiveness. The Insider Threat

ADVISORY: Insider Threat Competency Resource Guide · 2017-08-30 · UNCLASSIFIED Insider Threat CRG 4 UNCLASSIFIED 4. Execute insider threat awareness training requirements: Insider

ADVISORY: Insider Threat Competency Resource Guide · 2017-08-30 · UNCLASSIFIED Insider Threat CRG 4 UNCLASSIFIED 4. Execute insider threat awareness training requirements: Insider

SureView® Insider Threat

SureView® Insider Threat

Insider threat event presentation

Insider threat event presentation

… the INSIDER THREAT

… the INSIDER THREAT

INSIDER THREAT DEFENSE Threat Defense-Insider... · INSIDER THREAT DEFENSE Security Behind The Firewall Is Our Business Table of Contents Page The Insider Threat - How Vulnerable

INSIDER THREAT DEFENSE Threat Defense-Insider... · INSIDER THREAT DEFENSE Security Behind The Firewall Is Our Business Table of Contents Page The Insider Threat - How Vulnerable

Cyber, Physical or Insider Threat? - ASIS Europe 2018 · Cyber, Physical or Insider Threat? ... navigating a complex risk landscape? physical threat cyber threat insider threat ...

Cyber, Physical or Insider Threat? - ASIS Europe 2018 · Cyber, Physical or Insider Threat? ... navigating a complex risk landscape? physical threat cyber threat insider threat ...