Franqueira, Virginia Nunes Leal and van Eck, Pascal (2007) Defense against Insider Threat: a Framework for Gathering Goal-based Requirements. In: Proceedings of the 12th International Workshop on Exploring Modeling Methods in Systems Analysis and Design (EMMSAD 2007), held in conjuction with CAISE'07, June 11-15, 2007, Trondheim, Norway.
- Accepted Version
Official URL: http://ftp.informatik.rwth-aachen.de/Publications/...
Insider threat is becoming comparable to outsider threat in frequency of security events. This is a worrying situation, since insider attacks have a high probability of success because insiders have authorized access and legitimate privileges. Despite their importance, insider threats are still not properly addressed by organizations. We contribute to reverse this situation by introducing a framework composed of a method for identification and assessment of insider threat risks and of two supporting deliverables for awareness of insider threat. The deliverables are: (i) attack strategies structured in four decomposition trees, and (ii) a matrix which correlates defense strategies, attack strategies and control principles. The method output consists of goal-based requirements for the defense against insiders.
|Item Type:||Conference or Workshop Item (Paper)|
|Uncontrolled Keywords (separate with ;):||Modeling of Security; Risk Assessment; Insider Threat|
|Subjects:||Computer science > Computer architectures & operating systems|
|Schools:||College of Science and Technology > School of Physical Sciences and Computing|
|Deposited By:||Carmit Erez|
|Deposited On:||01 Nov 2012 16:36|
|Last Modified:||17 May 2016 12:34|
Downloads per month over past year
Downloads for past 30 days
Repository Staff Only: item control page