Software Engineering Institute

Empirical analysis of insider espionage incidents (non-moles) shows spy disengagement at work and home. A system dynamics (SD) model explains social network changes and helps analyze the benefits of greater job engagement.

Dynamic network metrics can be used to identify those people who are potential insider threats. The key: they grow structural holes and have unusual betweenness.