Insider behavior: An analysis of decision under risk

CEUR Workshop Proceedings

Volumn 469, Issue , 2009, Pages 22-33

  Farahmand, Fariborz ^a   Spafford, Eugene H ^a  

^a Purdue University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

HUMAN DIMENSIONS; INSIDER THREAT; ORDINAL SCALE; PERCEPTIONS OF RISKS; PROSPECT THEORY; RISK-TAKING BEHAVIORS;

RISK PERCEPTION; SECURITY OF DATA; SECURITY SYSTEMS;

RISK ASSESSMENT;

EID: 84887231470     PISSN: 16130073     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (33)

1. Brackney, R.C., Anderson, R.H.: Understanding the insider threat. Proceedings of a March 2004 Workshop, RAND Corporation (2004).
2. Greitzer, F.e.a.: Combating the insider cyber threat. IEEE Security and Privacy, pp. 61-64. (2008).
3. Maloof, M., Stephens, G.: Elicit: A system for detecting insiders who violate needto- know. Lecture Notes in Computer Science, 4637, pp.146-166 (2007).
4. Stolfo, S., Bellovin, S., Hershkop, S., Keromytis, A., Sinclair, S., Smith, S.: Insider attack and cyber security. Advances in Information Security, Springer (2008).
5. Bishop, M., Gates, C.: Defining the insider threat. Proceedings of the Cyber Security and Information Intelligence Research Workshop, article 15 (2008).
6. Stamper, C.L., Masteson, S.: Insider or outsider? how employee perception of insider status affect their work behavior. Journal of Organizational Behavior, 23, pp. 875-894 (2002).
7. Fischhoff, B., Slovic, P., Lichtenstein, S., Read, S., Combs, B.: How safe is safe enough? a psychome-tric study of attitudes towards technological risks and benefits? Policy Sciences, 9(2), pp. 127-152 (1978).
8. Slovic, P.: Perceptions of risk. Science, 236, pp.280-285 (1987).
9. Stoneburner, G., Gougen, A., Feringa, A.: Risk Management Guide for Information Technology Systems. NIST SP800-30 (2002).
10. Bloom, B.S., Krathwohl, D.R.: Taxonomy of educational objectives: The classification of educational goals, by a committee of college and university examiners. Handbook 1: Cognitive domain, New York, Longmans (1956).
11. Farahmand, F., Atallah, M., Kensynski, B.: Incentives and perceptions of information security risks. Proc. of the Twenty Ninth International Conference on Information Systems, Paris (2008).
12. Wells, J.T.: Principles of Fraud Examination. John Wiley & Sons (2005).
13. Finucane, M.L., Alhakami, A., Slovic, P., Johnson, S.M.: The affect heuristic in judgments of risks and benefits. Journal of Behavioral Decision Making, Vol. 13, pp. 1-17 (2000).
14. Zajonc, R.B.: Feeling and thinking: Preferences need no inferences. American Psychologist, Vol. 35, pp.151-175 (1980).
15. Kahneman, D., Lovallo, D.: Timid choices and bold forecasts: A cognitive perspective on risk taking. Management Science, Vol. 39, No. 1, pp. 17-31 (1993).
16. MacGregor, D.G.e.a.: Perception of financial risk: A survey study of advisors and planners. Journal of Financial Planning, Vol. 12 Issue 8, pp. 68-86 (1999).
17. Lichtenstein, S., Slovic, P.: Reversals of preference between bids and choices in gamble decisions. Journal of Experimental Psychology, Vol. 89, No. 1, pp. 46-55 (1971).
18. von Neumann, J., Morgenstern, O.: Theory of Games and Economic Behavior. Princeton University Press (1947).
19. Savage, L.J.: The Foundations of Statistics. John Wiley & Sons (1954).
20. Kenney, R.L., Raiffa, H.: Decisions with Multiple Objectives: Preferences and Value Tradeoffs. John Wiley & Sons (1976).
21. Kahneman, D., Slovic, P., Tversky, A.: Judgment under uncertainty; heuristics and biases (1982).
22. Heath, L., Tindale, R., Edwards, J., Posavac, E., Bryant, F., Henderson-King, E., Suarez-Balcazar, Y., Myers, J.: Applications of Heuristics and Biases to Social Issues. Plenum Press (1994).
23. Paese, P.W., Bieser, M., Tubbs, M.E.: Framing effects and choose shifts in group decision making. Organizational Behavior and Human Decision Processes, 56, pp. 149-165 (1993).
24. Hammond, K.R.: Naturalistic decision making from a brunswikian viewpoint: Its past, present, future. In G. A. Klein, J., Orasanu, R., Calanrewood, Zsambok, E., (Eds.) Decision making in action: Models and Methods (pp. 205-227). Norwood, Albex (1993).
25. Tversky, A., Kahneman, D.: Judgment under uncertainty: Heuristics and biases. Science, 185, pp. 1124-1131 (1974).
26. Lehto, M.R., Buck, J.R.: Introduction to Human factors and Ergonomics for Engineers. CRC Press (2008).
27. Tversky, A., Kahneman, D.: Prospect theory: An analysis of decisions under risk. Econometrica, Vol. 47, No 2, pp. 263-291 (1979).
28. Wood, B.: An insider threat model for adversary simulation. SRI International, Research on Mitigating the Insider Threat to Information Systems - #2 Proceedings of a Workshop Held by RAND (2000).
29. Camerer, C.F.: Prospect theory in the wild. Cambridge Univ. Press, Cambridge, UK, (2000).
30. Odean, T.: Are investors reluctant to realize their losses? Journal of Finance, 53, pp. 1775-1798 (1998).
31. Trepel, C., Fox, C.R., Poldrack, R.A.: Prospect theory on the brain? toward a cognitive neuroscience of decision under risk. Cognitive Brain Research, Vol. 23, No 1, pp. 34-50 (2005).
32. Levy, M., Levy, H.: Prospect theory: Much ado about nothing. Management Science, Vol. 48, No. 10, October 2002, pp. 1334-1349 (2002).
33. Schroeder, N.J.: Using prospect theory to investigate decision-making bias within an information security context. Dept. of the Air Force Air University, Air Force Institute of Technology (2005).