2012
By Andrew P. Moore
Senior Member of the Technical Staff
The CERT Program
Since 2001, researchers at the CERT Insider Threat Center
have documented malicious insider activity by examining media reports
and court transcripts and conducting interviews with the United States
Secret Service, victims’ organizations, and convicted felons. Among the
more than 700 insider threat cases that we’ve documented, our analysis
has identified more than 100 categories of weaknesses in systems,
processes, people or technologies that allowed insider threats to occur.
One aspect of our research has focused on identifying enterprise
architecture patterns that protect organization systems from malicious
insider threat. Enterprise architecture patterns are organization
patterns that involve the full scope of enterprise architecture
concerns, including people, processes, technology, and facilities. Our
goal with this pattern work is to equip organizations with the tools
necessary to institute controls that will reduce the incidence of
insider compromise. This blog post is the second in a series that describes our research to create and validate an insider threat mitigation pattern language that focuses on helping organizations balance the cost of security controls with the risk of insider compromise.
Recent Comments