A Critical Reflection on the Threat from Human Insiders – Its Nature, Industry Perceptions, and Detection Approaches

Nurse, Jason RC, Legg, Philip A, Buckley, Oliver, Agrafiotis, Ioannis, Wright, Gordon, Whitty, Monica, Upton, David, Goldsmith, Michael and Creese, Sadie (2014) A Critical Reflection on the Threat from Human Insiders – Its Nature, Industry Perceptions, and Detection Approaches. In: International Conference on Human Aspects of Information Security, Privacy, and Trust. Springer, pp. 270-281. ISBN 978-3-319-07619-5

Full text not available from this repository. (Request a copy)

Abstract

Organisations today operate in a world fraught with threats, including “script kiddies”, hackers, hacktivists and advanced persistent threats. Although these threats can be harmful to an enterprise, a potentially more devastating and anecdotally more likely threat is that of the malicious insider. These trusted individuals have access to valuable company systems and data, and are well placed to undermine security measures and to attack their employers. In this paper, we engage in a critical reflection on the insider threat in order to better understand the nature of attacks, associated human factors, perceptions of threats, and detection approaches. We differentiate our work from other contributions by moving away from a purely academic perspective, and instead focus on distilling industrial reports (i.e., those that capture practitioners’ experiences and feedback) and case studies in order to truly appreciate how insider attacks occur in practice and how viable preventative solutions may be developed.

Item Type: Book Section
Faculty \ School: Faculty of Science > School of Computing Sciences
Depositing User: Pure Connector
Date Deposited: 31 Jan 2018 10:30
Last Modified: 22 Apr 2020 11:13
URI: https://ueaeprints.uea.ac.uk/id/eprint/66150
DOI: 10.1007/978-3-319-07620-1

Actions (login required)

View Item View Item