Identifying attack patterns for insider threat detection

摘要: The threat that insiders pose to businesses, institutions and governmental organisations continues be of serious concern. Recent industry surveys provide unequivocal evidence support the significance this its prevalence in enterprises today. 1 In an attempt address challenge, several approaches systems have been proposed by practitioners researchers. These focus on defining insider exploring human psychological factors involved, through detection deterrence these threats via technological behavioural theories. 2 , 3 4 5 6 Insider major concerns organisations. Few solutions problem consider all technical, organisational aspects. new research, Ioannis Agrafiotis, Jason RC Nurse, Oliver Buckley, Phil Legg, Sadie Creese Michael Goldsmith define attack patterns could key assisting insider-threat detection, based 120 real-world case studies. They present their findings, representing each study as a series steps identify common trends between different attacks.