AZALIA: an A to Z Assessment of the Likelihood of Insider Attack

Conference · Tue May 12 04:00:00 EDT 2009

DOI:https://doi.org/10.1109/THS.2009.5168063· OSTI ID:973999

Bishop, Matt; Gates, Carrie; Frincke, Deborah A; Greitzer, Frank L

Recent surveys indicate that the ``financial impact and operating losses due to insider intrusions are increasing'' . Within the government, insider abuse by those with access to sensitive or classified material can be particularly damaging. Further, the detection of such abuse is becoming more difficult due to other influences, such as out-sourcing, social networking and mobile computing. This paper focuses on a key aspect of our enterprise-wide architecture: a risk assessment based on predictions of the likelihood that a specific user poses an increased risk of behaving in a manner that is inconsistent with the organization’s stated goals and interests. We present a high-level architectural description for an enterprise-level insider threat product and we describe psychosocial factors and associated data needs to recognize possible insider threats.

• Research Organization: Pacific Northwest National Laboratory (PNNL), Richland, WA (US)
• Sponsoring Organization: USDOE
• DOE Contract Number: AC05-76RL01830
• OSTI ID: 973999
• Report Number(s): PNNL-SA-66272
• Country of Publication: United States
• Language: English

Related Subjects

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEFENSE
99 GENERAL AND MISCELLANEOUS
DETECTION
HUMAN INTRUSION
NATIONAL SECURITY
RISK ASSESSMENT
SABOTAGE
cybersecurity
insider threat