Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Report

Insider Threat Security Reference Architecture

  • April 2012
  • By Joji Montelibano, Andrew P. Moore
  • In this report, the authors describe the Insider Threat Security Reference Architecture (ITSRA), an enterprise-wide solution to the insider threat.
  • Insider Threat
  • Publisher: Software Engineering Institute
    CMU/SEI Report Number: CMU/SEI-2012-TR-007
  • Abstract

    The Insider Threat Security Reference Architecture (ITSRA) provides an enterprise-wide solution to insider threat. The architecture consists of four security layers: Business, Information, Data, and Application. Organizations should deploy and enforce controls at each layer to address insider attacks. None of the layers function in isolation or independently of other layers. Rather, the correlation of indicators and application of controls across all four layers form the crux of this approach. Empirical data consisting of more than 700 cases of insider crimes show that insider attacks proved successful in inflicting damage when an organization failed to implement adequate controls in any of three security principles: authorized access, acceptable use, and continuous monitoring. The ITSRA draws from existing best practices and standards as well as from analysis of these cases to provide actionable guidance for organizations to improve their posture against the insider threat.

  • Download

Cite This Report

SEI

Montelibano, Joji; & Moore, Andrew. Insider Threat Security Reference Architecture. CMU/SEI-2012-TR-007. Software Engineering Institute, Carnegie Mellon University. 2012. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=10125

IEEE

Montelibano. Joji, and Moore. Andrew, "Insider Threat Security Reference Architecture," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2012-TR-007, 2012. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=10125

APA

Montelibano, Joji., & Moore, Andrew. (2012). Insider Threat Security Reference Architecture (CMU/SEI-2012-TR-007). Retrieved July 21, 2017, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=10125

CHI

Joji Montelibano, & Andrew Moore. Insider Threat Security Reference Architecture (CMU/SEI-2012-TR-007). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2012. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=10125

MLA

Montelibano, Joji., & Moore, Andrew. 2012. Insider Threat Security Reference Architecture (Technical Report CMU/SEI-2012-TR-007). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=10125

BibTex

@techreport{MontelibanoInsiderThreat2012,
title={Insider Threat Security Reference Architecture},
author={Joji Montelibano and Andrew Moore},
year={2012},
number={CMU/SEI-2012-TR-007},
institution={Software Engineering Institute, Carnegie Mellon University},
address={Pittsburgh, PA},
url={http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=10125} }