Michael Hanley

Author

Software Engineering Institute
Michael Hanley is a member of the technical staff in the CERT Program, part of the Software Engineering Institute at Carnegie Mellon University. His research interests include insider threats, security metrics, digital forensics, and network security. Prior to joining the SEI, Michael was a technical leader for a remote system administration team working in a large manufacturing IT environment. During his tenure there, Michael was involved in testing and deploying new software, managing incidents, and supporting systems across the globe. He holds an MSc in Information Security Policy and Management from Carnegie Mellon University and a BA in Economics from Michigan State University.

April 2012 - Technical Report A Pattern for Increased Monitoring for Intellectual Property Theft by Departing Insiders

Topics: Insider Threat

Authors: Andrew P. Moore, Michael Hanley, Dave Mundie

In this report, the authors present techniques for helping organizations plan, prepare, and implement means to mitigate insider theft of intellectual property.

October 2011 - Technical Note Insider Threat Control: Using Centralized Logging to Detect Data Exfiltration Near Insider Termination

Topics: Insider Threat

Authors: Michael Hanley, Joji Montelibano

In this report, the authors present an insider threat pattern on how organizations can combat insider theft of intellectual property.

February 2011 - Technical Note An Analysis of Technical Observations in Insider Theft of Intellectual Property Cases

Topics: Insider Threat

Authors: Michael Hanley, Tyler Dean, Will Schroeder, Matt Houy, Randall F. Trzeciak, Joji Montelibano

In this report, the authors provide an overview of techniques used by malicious insiders to steal intellectual property.

January 2011 - Podcast Indicators and Controls for Mitigating Insider Threat

Topics: Insider Threat

Authors: Michael Hanley, Julia H. Allen

In this podcast, Michael Hanley explains how technical controls can be effective in helping to prevent, detect, and respond to insider crimes.

January 2011 - Technical Note Deriving Candidate Technical Controls and Indicators of Insider Attack from Socio-Technical Models and Data

Topics: Insider Threat

Authors: Michael Hanley

In this 2011 report, Michael Hanley demonstrates how a method for modeling insider crimes can create candidate technical controls and indicators.

March 2009 - White Paper Spotlight On: Malicious Insiders with Ties to the Internet Underground Community

Topics: Insider Threat

Authors: Michael Hanley, Andrew P. Moore, Dawn Cappelli, Randall F. Trzeciak

In this report, the authors focus on insider threat cases in which the insider had relationships with the internet underground community.

Digital Library

Advanced Search

Content Type

Topics

Publication Date

Michael Hanley