Article

Case Studies of an Insider Framework

HICSS '09: Proceedings of the 42nd Hawaii International Conference on System Sciences

Pages 1 - 10

https://doi.org/10.1109/HICSS.2009.104

Published: 05 January 2009 Publication History

Abstract

Much of the literature on insider threat assumes, explicitly or implicitly, a binary, perimeter-based notion of an insider. However, it is generally accepted that this notion is unrealistic. The Attribute-Based Group Access Control (ABGAC) framework is a generalization of Role-Based Access Control (RBAC) which allows us to define a non-binary notion of "insiderness". In this paper, we illustrate how to use ABGAC to perform insider threat analysis of high-risk resources with three case studies. This precise yet flexible identification of high-risk resources and associated insiders allows organizations to understand where to target efforts towards defending against the insider problem.

Cited By

View all

Zimmer EBurkert CFederrath H(2021)Insiders Dissected: New Foundations and a Systematisation of the Research on InsidersDigital Threats: Research and Practice10.1145/34736743:1(1-35)Online publication date: 22-Oct-2021
https://dl.acm.org/doi/10.1145/3473674
Homoliak IToffalini FGuarnizo JElovici YOchoa M(2019)Insight Into Insiders and ITACM Computing Surveys10.1145/330377152:2(1-40)Online publication date: 2-Apr-2019
https://dl.acm.org/doi/10.1145/3303771
Sanzgiri ADasgupta DTrien JProwell SGoodall JBridges R(2016)Classification of Insider Threat Detection TechniquesProceedings of the 11th Annual Cyber and Information Security Research Conference10.1145/2897795.2897799(1-4)Online publication date: 5-Apr-2016
https://dl.acm.org/doi/10.1145/2897795.2897799
Show More Cited By

Case Studies of an Insider Framework
1. Security and privacy
  1. Systems security
2. Social and professional topics
  1. Computing / technology policy

Recommendations

Detecting Insider Theft of Trade Secrets

Trusted insiders who misuse their privileges to gather and steal sensitive information represent a potent threat to businesses. Applying access controls to protect sensitive information can reduce the threat but has significant limitations. Even if ...
Insider threat mitigation framework
CERIAS '12: Proceedings of the 13th Annual Information Security Symposium

In military cyber operations, Mission Oriented Risk Design Analysis (MORDA) (Buckshaw et al 2005) is used to carry out risk assessment of adversary action. MORDA has been used in operations since 1999 in various missions. It is a systemic and ...
Lessons Learned from a Comparative Analysis of Counterintelligence and Insider Threat Mitigation Case Studies in Nuclear Facilities
Abstract
According to the International Atomic Energy Agency’s (IAEA) Information Circular (INFCIRC) 908, because “insiders possess access, authority and knowledge … [they] pose an elevated threat to nuclear security.” However, the lack of publicly ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

HICSS '09: Proceedings of the 42nd Hawaii International Conference on System Sciences

January 2009

4812 pages

ISBN:9780769534503

Publisher

IEEE Computer Society

United States

Publication History

Published: 05 January 2009

Qualifiers

Article

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

5
Total Citations
View Citations
0
Total Downloads

Downloads (Last 12 months)0
Downloads (Last 6 weeks)0

Reflects downloads up to 21 Dec 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Zimmer EBurkert CFederrath H(2021)Insiders Dissected: New Foundations and a Systematisation of the Research on InsidersDigital Threats: Research and Practice10.1145/34736743:1(1-35)Online publication date: 22-Oct-2021
https://dl.acm.org/doi/10.1145/3473674
Homoliak IToffalini FGuarnizo JElovici YOchoa M(2019)Insight Into Insiders and ITACM Computing Surveys10.1145/330377152:2(1-40)Online publication date: 2-Apr-2019
https://dl.acm.org/doi/10.1145/3303771
Sanzgiri ADasgupta DTrien JProwell SGoodall JBridges R(2016)Classification of Insider Threat Detection TechniquesProceedings of the 11th Annual Cyber and Information Security Research Conference10.1145/2897795.2897799(1-4)Online publication date: 5-Apr-2016
https://dl.acm.org/doi/10.1145/2897795.2897799
Bishop MPeisert SHoke CGraff MJefferson D(2009)E-voting and forensicsProceedings of the 2009 conference on Electronic voting technology/workshop on trustworthy elections10.5555/1855491.1855494(3-3)Online publication date: 10-Aug-2009
https://dl.acm.org/doi/10.5555/1855491.1855494
Schaefer R(2009)The epistemology of computer securityACM SIGSOFT Software Engineering Notes10.1145/1640162.165527434:6(8-10)Online publication date: 3-Dec-2009
https://dl.acm.org/doi/10.1145/1640162.1655274

Abstract

Cited By

Recommendations

Detecting Insider Theft of Trade Secrets

Insider threat mitigation framework

Lessons Learned from a Comparative Analysis of Counterintelligence and Insider Threat Mitigation Case Studies in Nuclear Facilities

Comments

Information

Published In

Publisher

Publication History

Qualifiers

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

View options

Figures

Other

Share

Share this Publication link

Share on social media