search menu icon-carat-right cmu-wordmark

Insider Threat Mitigation Posters (SEI 2015 Research Review)

October 2015 Poster
William R. Claycomb, Andrew P. Moore

Two posters on insider threat research: Social network dynamics and holes in dynamic networks


Software Engineering Institute


Empirical analysisof insider espionage incidents(non-moles) show spy disengagement at work and home. A system dynamics (SD) model explains social network changes & helps analyze benefits of greater job engagement.

Dynamic network metrics can be used to identify those people who are potential insider threats. The key: they grow structural holes and have unusual betweenness.