Impact and key challenges of insider threats on organizations and critical businesses

Saxena, N ORCID: https://orcid.org/0000-0002-6437-0807, Hayes, E, Bertino, E, Ojo, P, Choo, K-K R and Burnap, P ORCID: https://orcid.org/0000-0003-0396-633X 2020. Impact and key challenges of insider threats on organizations and critical businesses. Electronics 9 (9) , 1460. 10.3390/electronics9091460

Preview

PDF - Published Version Available under License Creative Commons Attribution. Download (439kB) | Preview

Abstract

The insider threat has consistently been identified as a key threat to organizations and governments. Understanding the nature of insider threats and the related threat landscape can help in forming mitigation strategies, including non-technical means. In this paper, we survey and highlight challenges associated with the identification and detection of insider threats in both public and private sector organizations, especially those part of a nation’s critical infrastructure. We explore the utility of the cyber kill chain to understand insider threats, as well as understanding the underpinning human behavior and psychological factors. The existing defense techniques are discussed and critically analyzed, and improvements are suggested, in line with the current state-of-the-art cyber security requirements. Finally, open problems related to the insider threat are identified and future research directions are discussed.

Item Type:	Article
Date Type:	Publication
Status:	Published
Schools:	Computer Science & Informatics
Publisher:	MDPI
ISSN:	2079-9292
Date of First Compliant Deposit:	1 September 2020
Date of Acceptance:	27 August 2020
Last Modified:	17 Nov 2024 10:15
URI:	https://orca.cardiff.ac.uk/id/eprint/134573

Citation Data

Cited 17 times in Scopus. View in Scopus. Powered By Scopus® Data

Actions (repository staff only)

Edit Item