Introduction to Insider Threat Modeling, Detection, and Mitigation Minitrack

The insider threat continues to be one of the prime security concerns of government and industry organizations. The topic is perceived by senior organizational leadership as one of the most significant and difficult to mitigate security vulnerabilities. The threat from insider activity can be broadly defined as threats introduced to an organization by a trusted entity. This definition encompasses both malicious insider activity where the participant plays a knowing role in the activity and the user who unknowingly introduces a threat inside the organizational security boundaries. Despite research into the psychology and motivation of malicious insiders, predicting insider attacks is a non-trivial exercise.