Confronting the Insider Threat

Electronics

The insider threat has consistently been identified as a key threat to organizations and governments. Understanding the nature of insider threats and the related threat landscape can help in forming mitigation strategies, including non-technical means. In this paper, we survey and highlight challenges associated with the identification and detection of insider threats in both public and private sector organizations, especially those part of a nation’s critical infrastructure. We explore the utility of the cyber kill chain to understand insider threats, as well as understanding the underpinning human behavior and psychological factors. The existing defense techniques are discussed and critically analyzed, and improvements are suggested, in line with the current state-of-the-art cyber security requirements. Finally, open problems related to the insider threat are identified and future research directions are discussed.

Computer Fraud & Security, 2006

Security Journal, 2012

2023

This brief research paper presents an analysis of the evolution and challenges of the Department of Defense's (DoD) implementation of its Insider Threat (InT) program to help safeguard both Classified National Security Information (CNSI) and Controlled Unclassified Information (CUI) in all formats to include cyber or digital. The paper presents a brief history behind the program's creation, the definition of InT as well as identifying some of the more prevalent types, and a short overview of the key areas required in implementing the program. It provides a commentary on the various challenges the program experienced in the past as well as future ones: Financial; Personnel; Dependencies on other security and support programs. This document explains the challenges currently existing when a program is very dependent on other ones. It highlights several strengths and shortcomings of the program and identifies areas for improvement. It includes the author's summary of the InT literature as well as observations from personal experiences over the past seventeen years with DoD's InT and other security and support programs. After analysis and evaluation of existing activities, the author proposes several recommendations to mitigate some of the shortfalls of the current InT and its support programs.

Communications in Computer and Information Science, 2016

2014 47th Hawaii International Conference on System Sciences, 2014

Zenodo (CERN European Organization for Nuclear Research), 2023

Journal of Parliamentary and Political Law, 2024

This article explores the political motivations fueling episodes of voting system reform in Canada throughout its history, paying specific attention to how political parties have responded in different, sometimes rapidly changing contexts. The evidence decisively supports an interest-based explanation of party behaviour over alternatives that focus on the alleged influence of values or the functioning of different systems.

2019 ASEE Annual Conference & Exposition Proceedings, 2020