IEEE Security & Privacy · 2008 · 97 citations · 6 references
Insider ThreatsEngineeringInformation SecurityThreat DetectionInsider Cyber ThreatCybersecurity PolicyManagementThreat HuntingSecurityInformation ForensicsSecurity AwarenessCyber Threat IntelligenceComputer ScienceCybersecurity EducationCommunicationCrisis ManagementUs National SecurityInsider Threat
The penetration of US national security by foreign agents as well as American citizens is a historical and current reality that's a persistent and increasing phenomenon. Surveys, such as the e-crime watch survey, reveal that current or former employees and contractors are the second greatest cybersecurity threat, exceeded only by hackers, and that the number of security incidents has increased geometrically in recent years. The insider threat is manifested when human behavior departs from compliance with established policies, regardless of whether it results from malice or a disregard for security policies. In this article, we focus on the need for effective training to raise staff awareness about insider threats and the need for organizations to adopt a more effective approach to identifying potential risks and then taking proactive steps to mitigate them.
6
Comparing Insider IT Sabotage and Espionage: A Model-Based Analysis
Stephen R. Band, Dawn M. Cappelli, Lynn Fischer et al. · Figshare · 2006 · 99 citations · Full text