Building a system for insider security

IEEE Security and Privacy

Volumn 7, Issue 6, 2009, Pages 30-38

  Durán, Felicia A ^a   Conrad, Stephen H ^a   Conrad, Gregory N ^a   Duggan, David P ^a   Held, Edward Bruce ^a  

^a UNIVERSITY OF TEXAS AT AUSTIN   (United States)

Author keywords

And visualization; Applications; Computing methodologies.; Insider security; Insider security systems; Insider threat; Model development; Modeling; Modeling methodologies; Simulation; System dynamics modeling

Indexed keywords

COMPUTING METHODOLOGIES; INSIDER THREAT; MODEL DEVELOPMENT; MODELING METHODOLOGY; SIMULATION SYSTEMS; VISUALIZATION APPLICATION;

PERSONNEL; SECURITY SYSTEMS; SYSTEM THEORY; VISUALIZATION;

NETWORK SECURITY;

EID: 75149188648     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2009.111     Document Type: Article

References (14)

1. B. Hoffman et al., Insider Crime: The Threat to Nuclear Facilities and Programs, tech. report R-3782-DOE, RAND Corp., Feb. 1990.
2. R.H. Anderson et al., Conf. Proc.-Research on Mitigating the Insider Threat to Information Systems #2, CF- 163-DARPA, RAND Nat'l Defense Research Inst., RAND Corp., Aug. 2000.
3. M. Keeney et al., Insider Threat Study: Computer System Sabotage in Critical Infrastructure Sectors, US Secret Service and CERT Coordination Center, Software Eng. Inst., Carnegie Mellon Univ., May 2005; www.secret service.gov/ntac/its-report-050516.pdf.
4. S.R. Band et al., Comparing Insider IT Sabotage and Espionage: A Model-Based Analysis, tech. report CMU/SEI- 2006-TR-026, ESC-TR-2006-2091, Software Eng. Inst., Carnegie Mellon Univ., Dec. 2006.
5. D. Andersen et al., "Preliminary System Dynamics Maps of the Insider Cyber-Threat Problem, Proc. 22nd Int'l Conf. System Dynamics Soc., the System Dynamics Soc., 2004; www.systemdynamics.org/conferences/ 2004/SDS-2004/PAPERS/ 186GONZA.pdf.
6. S. Hodel, Black Dahlia Avenger: A Genius for Murder, HarperCollins, 2004, p. 36.
7. C. Crayton, Security Exam + Guide, Charles River Media, 2003.
8. M. Gregg, "Network Security Threats and Answers, By Industry," Search Networking, 15 Jan. 2007; http://search networking.techtarget.com/ generic/0,295582,sid7-gci1238902,00.html.
9. K.L. Herbig and M.F. Wiskoff, Espionage Against the United States by American Citizens 1947-2001, PERSEREC tech. report 02-5, Defense Personnel Security Research Center, July 2002.
10. E. Rich et al., "Simulating Insider Cyber-Threat Risks: A Model-Based Case and a Case-Based Model," Proc. 23th Int'l Conf. System Dynamics Soc., the System Dynamics Soc., 2005; www.systemdynamics.org/ conferences/2005/proceed/papers/RICH343.pdf.
11. I.J. Martinez-Moyano et al., "A Behavioral Theory of Insider-Threat Risks: A System Dynamics Approach," ACM Trans. Modeling and Computer Simulation, vol.18, Apr. 2008, pp. 1-36.
12. J.T. Turner and M.G. Gelles, Threat Assessment: A Risk Management Approach, Haworth Press, 2003.
13. "Insider Analysis," The 19th Int'l Training Course, SAND2006-1987C, Sandia Nat'l Laboratories, 2006, module 23, pp. 214-287.
14. B. Schneier, Secrets & Lies: Digital Security in a Networked World, John Wiley & Sons, 2000.