Insider Threat Identification by Process Analysis
IEEE Symposium on Security and Privacy Workshops, pp. 251-264, 2014.
The insider threat is one of the most pernicious in computer security. Traditional approaches typically instrument systems with decoys or intrusion detection mechanisms to detect individuals who abuse their privileges (the quintessential \"insider\"). Such an attack requires that these agents have access to resources or data in order to c...More
Full Text (Upload PDF)
PPT (Upload PPT)