Preliminary System Dynamics Maps of the Insider Cyber-Threat Problem

January 1, 2005 • White Paper

By

David F. Andersen (University at Albany State University of New York), Dawn Cappelli, Jose J. Gonzalez (Agder University College Norway), Mohammad Mojtahedzadeh (Attune Group, Inc.), Andrew P. Moore, Eliot Rich (University at Albany State University of New York), Jose M. Sarriegui (University of Navarra Spain), Timothy J. Shimeall, Jeffrey M. Stanton (Syracuse University, School of Information Studies), Elise A. Weaver (Worcester Polytechnic Institute), and Aldo Zagonel (University at Albany, Rockefeller College of Public Affairs and Policy)

This paper discusses the preliminary system dynamic maps of the insider cyber-threat and describes the main ideas behind the research proposal.

Publisher

Software Engineering Institute

Subjects

Insider Threat

Abstract

Twenty five researchers from eight institutions and a variety of disciplines, viz. computer science, information security, knowledge management, law enforcement, psychology, organization science and system dynamics, found each other February 2004 in the "System Dynamics Modelling for Information Security: An Invitational Group Modeling Workshop" at Software Engineering Institute, Carnegie Mellon University. The exercise produced preliminary system dynamics models of insider and outsider cyber attacks that motivated five institutions, viz. Syracuse University, TECNUN at University of Navarra, CERT/CC at Carnegie Mellon University, University at Albany and Agder University College, to launch an interdisciplinary research proposal (Improving Organizational Security and Survivability by Suppression of Dynamic Triggers). This paper discusses the preliminary system dynamic maps of the insider cyber-threat and describes the main ideas behind the research proposal.

Software Engineering Institute