namgup001/insider-threat-detection

Insider-Threat-Detection

The ability to detect insider threats is important for many organizations.However, the field of insider threat detection is not well understood.

Biometric behavior

Detecting inconsistent biometrics is one of thefour approaches of identifying insider threats, andin particular, of identifying masquerading activities. Organizations first build a profile of each employeerepresenting their legitimate behavior, then identifysubsequent behaviors inconsistent with the profiles asmasquerading attempts.

Psychosocial behavior

Psychosocial behaviors are analyzed to detect saboteurs,who are known to often display concerning psychosocialbehaviors prior to carrying out their attacks.

#Conclusion We surveyed different insider threat detectionapproaches and found that insider threat detectionis not a single research field, but a conglomerationof independent research fields in computer scienceand even psychology or sociology.