A state machine system for insider threat detection

A state machine system for insider threat detection

The risk from insider threats is rising significantly, yet the majority of organizations are ill-prepared to detect and mitigate them. Research has focused on providing rule-based detection systems or anomaly detection tools which use features indicative of malicious insider activity. In this paper...

Descrizione completa

Dettagli Bibliografici
Autori principali:	Zhang, H, Agrafiotis, I, Erola, A, Creese, S, Goldsmith, M
Natura:	Conference item
Pubblicazione:	Springer, Cham 2019

Documenti analoghi

A Tripwire Grammar for Insider Threat Detection
di: Agrafiotis, I, et al.
Pubblicazione: (2016)

Formalising policies for insider-threat detection: A tripwire grammar
di: Agrafiotis, I, et al.
Pubblicazione: (2017)

Validating an insider threat detection system: A real scenario perspective
di: Agrafiotis, I, et al.
Pubblicazione: (2016)

Insider-threat detection: Lessons from deploying the CITD tool in three multinational organisations
di: Erola, A, et al.
Pubblicazione: (2022)

Smart insiders: exploring the threat from insiders using the Internet-of-Things
di: Nurse, J, et al.
Pubblicazione: (2016)

Towards a conceptual model and reasoning structure for insider threat detection
di: Legg, P, et al.
Pubblicazione: (2013)

A Bayesian approach to insider threat detection
di: Wall, A, et al.
Pubblicazione: (2021)

A critical reflection on the threat from human insiders − its nature‚ industry perceptions‚ and detection approaches
di: Nurse, J, et al.
Pubblicazione: (2014)

A system to calculate cyber-value-at-risk
di: Erola, A, et al.
Pubblicazione: (2021)

Analysing cyber-insurance claims to design harm-propagation trees
di: Axon, L, et al.
Pubblicazione: (2019)

Ransomware as a predator: modelling the systemic risk to prey
di: Axon, L, et al.
Pubblicazione: (2023)

Modeling Advanced Persistent Threats to enhance anomaly detection techniques
di: Atapour, C, et al.
Pubblicazione: (2018)

The data that drives cyber insurance: a study into the underwriting and claims processes
di: Nurse, JRC, et al.
Pubblicazione: (2020)

Understanding insider threat: a framework for characterising attacks
di: Nurse, J, et al.
Pubblicazione: (2014)

RicherPicture: Semi-automated cyber defence using context-aware data analytics
di: Erola, A, et al.
Pubblicazione: (2017)

Reflecting on the Ability of Enterprise Security Policy to Address Accidental Insider Threat
di: Buckley, O, et al.
Pubblicazione: (2014)

A new take on detecting insider threats: Exploring the use of hidden Markov Models
di: Rashid, T, et al.
Pubblicazione: (2016)

An independent assessment of the procedural components of the Estonian internet voting system
di: Nurse, J, et al.
Pubblicazione: (2016)

An assessment of the security and transparency procedural components of the Estonian internet voting system
di: Nurse, J, et al.
Pubblicazione: (2017)

Control effectiveness: a capture-the-flag study
di: Erola, A, et al.
Pubblicazione: (2021)

Cloud Computing: Insider Attacks on Virtual Machines During Migration
di: Duncan, A, et al.
Pubblicazione: (2013)

Insider threat response and recovery strategies in financial services firms
di: Eggenschwiler, J, et al.
Pubblicazione: (2016)

Applying Formal Methods to Detect and Resolve Ambiguities in Privacy Requirements.
di: Agrafiotis, I, et al.
Pubblicazione: (2010)

Applying Formal Methods to Detect and Resolve Ambiguities in Privacy Requirements
di: Agrafiotis, I, et al.
Pubblicazione: (2011)

Formalising Requirements for a Biobank Case Study Using a Logic for Consent and Revocation
di: Agrafiotis, I, et al.
Pubblicazione: (2012)

Developing a Strategy for Automated Privacy Testing Suites
di: Agrafiotis, I, et al.
Pubblicazione: (2012)

Insider Attacks in Cloud Computing
di: Duncan, A, et al.
Pubblicazione: (2012)

A combined attack-tree and kill-chain approach to designing attack-detection strategies for malicious insiders in cloud computing
di: Duncan, A, et al.
Pubblicazione: (2019)

Insider Threat Detection Using Machine Learning Approach
di: Bushra Bin Sarhan, et al.
Pubblicazione: (2022-12-01)

Anomaly detection using pattern-of-life visual metaphors
di: Happa, J, et al.
Pubblicazione: (2019)

Detecting insider threats
di: Lai, Rachel
Pubblicazione: (2016)

Insider threat detection for specific threat scenarios
di: Tian Tian, et al.
Pubblicazione: (2025-03-01)

Investigating the leakage of sensitive personal and organisational information in email headers
di: Nurse, J, et al.
Pubblicazione: (2015)

Investigating the leakage of sensitive personal and organisational information in email headers
di: Nurse, J, et al.
Pubblicazione: (2015)

The challenge of detecting sophisticated attacks: Insights from SOC Analysts
di: Akinrolabu, O, et al.
Pubblicazione: (2018)

The attacker in ubiquitous computing environments: formalising the threat model
di: Roscoe, A, et al.
Pubblicazione: (2003)

Reaching for informed revocation: shutting off the tap on personal data
di: Agrafiotis, I, et al.
Pubblicazione: (2010)

Reaching for Informed Revocation: Shutting Off the Tap on Personal Data.
di: Agrafiotis, I, et al.
Pubblicazione: (2009)

Tool for Insider Threat Detection in Corporative Information Systems
di: Victor Sergeevich Vedeneev, et al.
Pubblicazione: (2014-02-01)

A pragmatic system-failure assessment and response model
di: Happa, J, et al.
Pubblicazione: (2016)