Game-theoretic modeling and analysis of insider threats

International Journal of Critical Infrastructure Protection

Volumn 1, Issue , 2008, Pages 75-80

  Liu, Debin ^a   Wang, XiaoFeng ^a   Camp, Jean ^a  

^a INDIANA UNIVERSITY   (United States)

Author keywords

Insider game; Insider threat; Stochastic game

Indexed keywords

COMPUTING SYSTEM; DEFENSE STRATEGY; EQUILIBRIUM STRATEGY; EXTERNAL ATTACKER; GAME-THEORETIC MODEL; INFORMATION ASSETS; INSIDER GAME; INSIDER THREAT; MALICIOUS INSIDERS; MODELING AND ANALYSIS; SECURITY CONTROLS; STATE MACHINE; STOCHASTIC GAME; SYSTEM ADMINISTRATORS; SYSTEM STATE; TARGET SYSTEMS;

SECURITY OF DATA;

GAME THEORY;

EID: 68949143256     PISSN: 18745482     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijcip.2008.08.001     Document Type: Article

References (12)

1. A. Arora, H. Xu, R. Padman, W. Vogt, Optimal bidding in sequential online auctions. www.ftc.gov/be/vogt.pdf, 2004
2. Association of Certified Fraud Examiners, 2006 ACFE Report to the Nation on Occupational Fraud and Abuse, Austin, Texas. www.acfe.com/documents/2006-RttN.pdf, 2006
3. D. Cappelli, A. Desai, A. Moore, T. Shimeall, E. Weaver, B. Willke, Management and education of the risk of insider threat (MERIT): System dynamics modeling of computer system sabotage, in: Proceedings of the International Conference of the System Dynamics Society, 2006
4. Filar J., and Vrieze K. Competitive Markov Decision Processes (1997), Springer-Verlag, New York
5. Fudenberg D., and Tirole J. Game Theory (1991), MIT Press, Cambridge, Massachusetts
6. L. Gordon, M. Loeb, W. Lucyshyn, R. Richardson, 2006 CSI/FBI Computer Crime and Security Survey, Computer Security Institute, San Francisco, California, 2006
7. M. Hines, Insider threats remain IT's biggest nightmare, InfoWorld, September 22, 2007
8. M. Keeney, E. Kowalski, D. Cappelli, A. Moore, T. Shimeall, S. Rogers, Insider Threat Study: Computer System Sabotage in Critical Infrastructure Sectors, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania. www.cert.org/archive/pdf/insidercross051105.pdf, 2005
9. Kuhn H. Extensive games and the problem of information. In: Kuhn H., and Tucker A. (Eds). Contributions to the Theory of Games (1953), Princeton University Press, Princeton, New Jersey 193-216
10. E. Rich, I. Martinez-Moyano, S. Conrad, D. Cappelli, A. Moore, T. Shimeall, D. Andersen, J. Gonzalez, R. Ellison, H. Lipson, D. Mundie, J. Sarriegi, A. Sawicka, T. Stewart, J. Torres, J. Wiik, E. Weaver, Simulating insider cyber-threat risks: A model-based case and a case-based model, in: Proceedings of the International Conference of the Systems Dynamics Society, 2005
11. M. Scalora, D. Bulling, Developing Threat Assessment Best Practice Standards: Leveraging Behavioral Science Strategies to Enhance Decision-Making, Public Policy Center, University of Nebraska, Lincoln, Nebraska, 2007
12. Wood B. An insider threat model for adversary simulation. In: Anderson R., Bozek T., Longstaff T., Meitzler W., Skroch M., and Wyk K. (Eds). Research on Mitigating the Insider Threat to Information Systems (2000), RAND Corporation, Pittsburgh, Pennsylvania