search menu icon-carat-right cmu-wordmark

Insider Threat Mitigation

October 2015 Presentation
William R. Claycomb, Andrew P. Moore

Explores hypothesis that over time, insider social networks exhibit weakening of internal connections and strengthening of external connections to adversaries


Software Engineering Institute



To examine the hypothesis regarding social network behavior, SEI researchers used data from ~140 insider espionage incidents and measured connection strength over time between insider and family/coworkers/adversaries through communication frequency and affect positivity.