Title: Defending against malicious insiders: a conceptual framework for predicting, detecting, and deterring malicious insiders

Authors: Marwan Omar; Derek Mohammed; Van Nguyen

Addresses: Saint Leo University, 33701 State Road 52, Saint Leo, FL 33574-6665, USA ' Saint Leo University, 33701 State Road 52, Saint Leo, FL 33574-6665, USA ' Saint Leo University, 33701 State Road 52, Saint Leo, FL 33574-6665, USA

Abstract: Malicious insiders are posing unique security challenges to organisations owing to their knowledge, capabilities, and authorised access to information systems. Data theft and IT sabotage are two of the most recurring themes among crimes committed by malicious insiders. This paper has two aims: first, we investigate the scale and scope of malicious insider risks and explore the impact of such threats on business operations. Secondly, we present a conceptual design of the insider threat security framework (ITSF) that is able to provide self-protection capabilities. Our objective is to propose protection mechanisms that could minimise risk and battle unique threats posed by potential malicious insiders. Although as yet untested, the ITSF will treat every employee or user of a system as a prospective hacker. We believe this approach is feasible, affordable and assures compliance with systems security requirements as well as regulatory standards.

Keywords: insider threat; data theft; IT sabotage; security policy; security controls.

DOI: 10.1504/IJBPIM.2017.083794

International Journal of Business Process Integration and Management, 2017 Vol.8 No.2, pp.114 - 119

Accepted: 30 Oct 2016
Published online: 22 Apr 2017 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article