Evaluating and managing the integrity of computerized accountability systems against insider threats

Conference · Sat Jun 01 04:00:00 EDT 1996

OSTI ID:378783

Jones, E; Sicherman, A

Accountability applications such as nuclear material accountability systems at Department of Energy (DOE) facilities provide for tracking inventories, documenting transactions, issuing periodic reports, and assisting in the detection of unauthorized system access and data falsification. Insider threats against the system represent the potential to degrade the integrity with which these functions are addressed. While preventing unauthorized access by external threats is vital, it is also critical to understand how application features affect the ability of insiders to impact the integrity of data in the system. Aspects of modern computing systems including powerful personal computers and applications on networks, mixed security environments, and more users with increased software knowledge and skills help heighten the concern about insider threats. A question arises as follows. How can managers and policy makers logically and pragmatically analyze the myriad customization and design options for accountability applications with respect to the insider threat. In this paper, we describe a methodology for addressing this question, along with insights from its application to local area network (LAN) material accountability systems.

• Research Organization: Lawrence Livermore National Lab., CA (United States)
• Sponsoring Organization: USDOE, Washington, DC (United States)
• DOE Contract Number: W-7405-ENG-48
• OSTI ID: 378783
• Report Number(s): UCRL-JC--124361; CONF-9606221--8; ON: DE96050335
• Country of Publication: United States
• Language: English

Related Subjects

05 NUCLEAR FUELS
99 GENERAL AND MISCELLANEOUS
ACCOUNTING
COMPUTER NETWORKS
FISSILE MATERIALS
LOCAL AREA NETWORKS
NUCLEAR FACILITIES
NUCLEAR MATERIALS DIVERSION
NUCLEAR MATERIALS MANAGEMENT
SAFEGUARDS
SECURITY
THEFT