A probabilistic analysis framework for malicious insider threats

Chen, Taolue, Kammueller, Florian ORCID: https://orcid.org/0000-0001-5839-5488, Nemli, Ibrahim and Probst, Christian (2015) A probabilistic analysis framework for malicious insider threats. Human Aspects of Information Security, Privacy, and Trust: Third International Conference, HAS 2015, Held as Part of HCI International 2015, Los Angeles, CA, USA, August 2-7, 2015. Proceedings. In: 3rd International Conference on Human Aspects of Information Security, Privacy and Trust, HAS 2015, held as part of HCI International 2015, 2-7 Aug 2015, Los Angeles, California, USA. ISBN 9783319203751. ISSN 0302-9743 [Conference or Workshop Item]

Preview

PDF - Final accepted version (with author's formatting) Download (382kB) | Preview

Abstract

Malicious insider threats are difficult to detect and to mitigate. Many approaches for explaining behaviour exist, but there is little work to relate them to formal approaches to insider threat detection. In this work we present a general formal framework to perform analysis for malicious insider threats, based on probabilistic modelling, verification, and synthesis techniques. The framework first identifies insiders' intention to perform an inside attack, using Bayesian networks, and in a second phase computes the probability of success for an inside attack by this actor, using probabilistic model checking.

Actions (login required)

View Item

Statistics

DownloadsShow export options

Export as CSVXMLJSON

Activity Overview

6 month trend

299Downloads

6 month trend

546Hits

Additional statistics are available via IRStats2.