Unintentional Insider Threats: Social Engineering

January 2014 • Technical Note

CERT Insider Threat Center

In this report, the authors explore the unintentional insider threat (UIT) that derives from social engineering.

Publisher:

Software Engineering Institute

CMU/SEI Report Number

CMU/SEI-2013-TN-024

DOI (Digital Object Identifier):

10.1184/R1/6585599.v1

Subjects

Insider ThreatInsider Threat

Abstract

The research documented in this report seeks to advance the understanding of the unintentional insider threat (UIT) that derives from social engineering. The goals of this research are to collect data on additional UIT social engineering incidents to build a set of cases for the Management and Education of the Risk of Insider Threat (MERIT) database and to analyze such cases to identify possible behavioral and technical patterns and precursors. The authors hope that this research will inform future research and development of UIT mitigation strategies.

Download PDF

Cite This Report

SEI

CERT Insider Threat Center. Unintentional Insider Threats: Social Engineering. CMU/SEI-2013-TN-024. Software Engineering Institute, Carnegie Mellon University. 2014. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=77455

IEEE

CERT Insider Threat Center, "Unintentional Insider Threats: Social Engineering," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2013-TN-024, 2014. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=77455

APA

CERT Insider Threat Center. (2014). Unintentional Insider Threats: Social Engineering (CMU/SEI-2013-TN-024). Retrieved May 30, 2023, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=77455

CHI

CERT Insider Threat Center. Unintentional Insider Threats: Social Engineering (CMU/SEI-2013-TN-024). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2014. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=77455

MLA

CERT Insider Threat Center. 2014. Unintentional Insider Threats: Social Engineering (Technical Report CMU/SEI-2013-TN-024). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=77455

BibTex

@techreport{InsiderUnintentionalInsider2014,
title={Unintentional Insider Threats: Social Engineering},
author={CERT Insider Threat Center},
year={2014},
number={CMU/SEI-2013-TN-024},
institution={Software Engineering Institute, Carnegie Mellon University},
address={Pittsburgh, PA},
url={http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=77455} }

Ask a question about this Technical Note

Software Engineering Institute