Risk of insider threats in information technology outsourcing: Can deceptive techniques be applied?

Proceedings of The 2006 International Conference on Security and Management, SAM'06

Volumn , Issue , 2006, Pages

  Gaonjur, P ^a   Bokhoree, C ^a  

^a UNIVERSITY OF TECHNOLOGY   (Mauritius)

Author keywords

Honeypots; IDS; Information technology outsourcing; IT security; Risk

Indexed keywords

BUSINESS DECISIONS; HONEYPOTS; IDS; INFORMATION TECHNOLOGY OUTSOURCING; INSIDER THREATS; IT OUTSOURCINGS; IT SECURITY; LITTLE RESEARCHES; OUTSOURCE; RISK FACTORS; SECURITY RISKS; SECURITY THREATS;

INFORMATION TECHNOLOGY; RISK ASSESSMENT; SECURITY SYSTEMS;

OUTSOURCING;

EID: 66149159220     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (24)

1. L. Loh and N. Venkatraman, "Determinants of Information Technology Outsourcing: A cross-sectional Analysis", Journal of Management Information Systems 9(1), 1992
2. Wonsock Oh, "Why do some firms outsource IT more aggressively than others? The effects of organizational characteristics on IT Outsourcing decisions", Proceedings of the 38th Hawaii Conference on system sciences, 2005
3. W. McFarlan and L. Nolan, "How to Manage an IT Outsourcing Alliance", Sloan Management Review, 1995
4. B. A. Aubert, M. Patry, S. Rivard, "Assessing IT Outsourcing Risk", Proceedings of the 31st Hawaii International Conference on System Sciences, Jan 1998
5. B. A. Aubert, M. Patry, S. Rivard and S. Dussault, "Managing the Risks of IT Outsourcing Risk", Proceedings of the 32nd Hawaii International Conference on System Sciences HICSS, Jan 1999
6. B. A. Aubert, M. Patry, S. Rivard and H. Smith, H, "IT Outsourcing Risk Management at British Petroleum", Proceedings of the 34th Hawaii International Conference on System Sciences HICSS, Jan 5-8, 2001
7. M. J Earl, "The Risks of Outsourcing IT", Sloan Management Review, 37, 3, Spring 1996
8. L. Willcocks, M. Lacity, T. Kern, "Risk mitigation in IT outsourcing strategy revisited: Longitudinal case research at LISA", Journal of Strategic Information Systems, 8, 1999
9. R. Power, 2002 CSI/FBI computer crime and security survey. Computer Security Issues & Trends 8, 1 (2002)
10. B. Mukherjee, L.T. Heberlein, and K.N. Levitt, "Network Intrusion detection", IEEE Network, Vol.8, No. 3, 1994.
11. D.E. Denning. "An Intrusion Detection Model", IEEE Transactions on Software Engineering, 13(2), 1987
12. R. Power, 1998 CSI/FBI computer crime and security survey. Computer Security Issues.
13. L. Spitzner, "The Honeynet Project: Trapping the Hackers," IEEE Security & Privacy, March/April 2004
14. L. Spitzner, "Honeypots: Catching the Insider Threat" Proceedings of the 19th Annual Computer Security Applications Conference, IEEE Computer Society, 2003
15. C. E. Irvine, "Cybersecurity Considerations for Information Systems", Handbook of Public Information Systems, 2nd. Edition, ed. D. Garson, CRC Press, 2004
16. C. Eagle, J. L. Clark, "Capture-the-Flag: Learning Computer Security Under Fire", Proceedings from the Sixth Workshop on Education in Computer Security, Monterey, CA, 12-14, July 2004
17. Michael Lesk, "Averting Security Missteps in Outsourcing", IEEE Security and Privacy, 2005
18. nd Hawaii International Conference on System Scineces, 1999
19. CBC Online News, "Co-operators Life CEO Apologizes for Theft of Sensitive Customer Data," 30 Jan. 2003; www.cbc.ca/stories/2003/01/30/ cooperators030130
20. A. Mullholland, "Computer File with Vital ID Data Goes Missing," CTV.ca, 31 Jan. 2003; www.ctv.ca/servlet/ArticleNews/story/ CTVNews/1043943775310-127
21. Anderson. "Computer security threat monitoring and surveillance" Technical report, James P. Anderson Co., Fort Washington, PA, April 1980
22. V. Jacobson, C. Leres and S. McCanne, "Tcpdump", Available via anonymous FTP from ftp.ee.lbl.gov. 1989
23. John McHugh, Alan Christie, and Julia Allen, "Defending Yourself: The Role of Intrusion Detection Systems", IEEE Software, 2000
24. R. A. Kemmerer and G. Vigna,"Intrusion detection: a brief history and overview", IEEE Security & Privacy, URL http://computer.org/ computer/sp/articles/kem/, 2002