DocumentCode
1058966
Title
Combating the Insider Cyber Threat
Author
Greitzer, Frank L. ; Moore, Andrew P. ; Cappelli, Dawn M. ; Andrews, Dee H. ; Carroll, Lynn A. ; Hull, Thomas D.
Author_Institution
Pacific Northwest Nat. Lab., Richland
Volume
6
Issue
1
fYear
2008
Firstpage
61
Lastpage
64
Abstract
The penetration of US national security by foreign agents as well as American citizens is a historical and current reality that´s a persistent and increasing phenomenon. Surveys, such as the e-crime watch survey, reveal that current or former employees and contractors are the second greatest cybersecurity threat, exceeded only by hackers, and that the number of security incidents has increased geometrically in recent years. The insider threat is manifested when human behavior departs from compliance with established policies, regardless of whether it results from malice or a disregard for security policies. In this article, we focus on the need for effective training to raise staff awareness about insider threats and the need for organizations to adopt a more effective approach to identifying potential risks and then taking proactive steps to mitigate them.
Keywords
computer crime; government policies; national security; training; E-Crime Watch Survey; cyber threat; cybersecurity threat; hackers; insider threat; national security; security incidents; security policy; staff awareness; Computer security; Humans; Laboratories; Management training; National security; Predictive models; Research and development; Software engineering; Systems engineering education; Watches; CERT; Education; Merit Interactive; attack; insideer attack; threat mitigation; training;
fLanguage
English
Journal_Title
Security & Privacy, IEEE
Publisher
ieee
ISSN
1540-7993
Type
jour
DOI
10.1109/MSP.2008.8
Filename
4446699
Link To Document