The insider problem revisited

ABSTRACT

The "insider problem" is considered the most difficult and critical problem in computer security. But studies that survey the seriousness of the problem, and research that analyzes the problem, rarely define the problem precisely. Implicit definitions vary in meaning. Different definitions imply different countermeasures, as well as different assumptions.

REFERENCES

• 1: R. Brackney and R. Anderson, Understanding the Insider Threat: Proceedings of a March 2004 Workshop, RAND Corp., Santa Monica, CA (Mar. 2004).
• 2: CSI/FBI Computer Crime and Security Survey, Computer Security Institute (2003).
• 3: J. Patzakis, New Incident Response Best Practices: Patch and Proceed is No Longer Acceptable Incident Response Procedure, Guidance Software, Pasadena, CA (Sep. 2003).
• 4: E. Shaw, K. Ruby, and J. Post, "The Insider Threat to Information Systems," Security Awareness Bulletin No. 2--98, Department of Defense Security Institute (Sep. 1998); available at http://rf-web.tamu.edu/security/secguide/Treason/Infosys.htm