Digital Library
Topics: Insider Threat
In this paper, the authors describe the who, what, when, where, and how of attacks by insiders using programming techniques and includes case examples.
Topics: Insider Threat
In this report, the authors provide a snapshot of individuals involved in insider threat cases and recommends how to mitigate the risk of similar incidents.
Topics: Insider Threat
In this report, the authors define insider threats and outline current insider threat patterns and trends.
Topics: Insider Threat
In this article, the authors focus on cases in which the malicious insider was employed by a trusted business partner of the victim organization.
Topics: Insider Threat
In this presentation, Dawn Cappelli provides real-case examples to reinforce best practices in mitigating insider threat.
Topics: Insider Threat
In this book, the authors present best practices for managing the security and survivability of people, information, technology, and facilities.
Topics: Insider Threat
In this presentation, Dawn Cappelli describes the CERT Insider Threat Crime Profiles and strategies to mitigating insider threat.
Topics: Insider Threat
In this report, the authors describe general observations about and a preliminary system dynamics model of insider crime based on our empirical data.
Topics: Insider Threat
In this presentation, the authors discuss crime profiles and countermeasures related to insider IT sabotage.
Topics: Insider Threat
In this presentation, Software Engineering Institute researchers show how to detect insider threats successfully by monitoring and auditing network activity.
Topics: Insider Threat
In this report, the authors focus on cases in which the insider was employed by a trusted business partner of the victim organization.
Topics: Insider Threat
Two hundred and eighty-two cases of actual insider attacks suggest 16 best practices for preventing and detecting insider threat.
Topics: Insider Threat
In this paper, the authors describe general observations about, and a preliminary system dynamics model of, insider crime based on our empirical data.
Topics: Insider Threat
In this report, the authors focus on employees, contractors, and business partners who stole intellectual property to benefit a foreign entity.
Topics: Insider Threat
In this presentation, Dawn Cappelli and Randy Trzeciak describe sixteen best practices for mitigating insider threats.
Topics: Insider Threat
In this report, the authors focus on insider threat cases in which the insider had relationships with the internet underground community.
Topics: Insider Threat
In this paper, the authors present findings from examining insider crimes in a new way and add new practices that were not present in the second edition.
Topics: Insider Threat
In this report, the authors focus on persons who use programming techniques to commit malicious acts against their organizations.
Topics: Insider Threat
In this paper, the authors describe the MERIT insider threat model and simulation results.
Topics: Insider Threat
In this report, the authors describe seven observations about insider IT sabotage based on their empirical data and study findings.
Topics: Insider Threat
In this presentation, the authors describe different types of insider crime and best practices for mitigating that crime.
Topics: Insider Threat
In this podcast, Dawn Cappelli explains how insider threat vulnerabilities can be introduced during all phases of the software development lifecycle.
Topics: Insider Threat
In this paper, the authors present the findings of research examining reported insider incidents in the information technology and telecommunications sectors.
Topics: Insider Threat
In this paper, the authors present the findings of a research effort to examine reported insider incidents in the government sector.
Topics: Insider Threat
In this 2006 report, the authors describe MERIT insider threat model and simulation results.
Topics: Process Improvement
In this report, the authors examine the psychological, technical, organizational, and contextual factors that contribute to espionage and insider sabotage.
Topics: Insider Threat
In this podcast, Dawn Cappelli describes the real and substantial threat of attack from insiders.
Topics: Insider Threat
In this presentation, the authors describe an interactive case example of insider threat, discuss key sabotage observations, and provide an overview of MERIT.
Topics: Insider Threat
In this 2006 presentation, the authors describe the lessons they learned from real-world fraud, theft, and sabotage incidents.
Topics: Insider Threat
In this 2006 presentation, Dawn Cappelli discusses the insider threat, what the CERT Division is doing about it and what you need to know about it.
Topics: Insider Threat
This presentation on insider threats in the SDLC was delivered by Dawn Cappelli, Andrew P. Moore, and Randy Trzeciak of the Software Engineering Institute's CERT Program in 2006.
Topics: Insider Threat
In this 2005 presentation, Dawn Cappelli discusses preventing insider threat sabotage.
Topics: Insider Threat
In this paper, the authors identify actions that may inadvertently lead to increased vulnerability to threats from employees, contractors, and clients.
Topics: Insider Threat
In this 2005 report, the authors outline the ITS, a study of insider incidents identified by public reporting or in fraud cases from the Secret Service.
Topics: Insider Threat
In this report, the authors seek to close the gaps in the literature that make it difficult for organizations to fully understand the insider threat.
Topics: Insider Threat
This paper discusses the preliminary system dynamic maps of the insider cyber-threat and describes the main ideas behind the research proposal.
Topics: Insider Threat, Measurement and Analysis
In this presentation, the authors discuss the e-Crime Watch survey and the USSS/CERT Insider Threat study.
Topics: Insider Threat
In this report, the authors present an overview of the Insider Threat Study (ITS), including its background, scope, study methods, and findings.
This report is the second in a series on the use of representation clauses and implementation-dependent features in Ada.
This report, one in a series, provides a qualitative assessment of the support of representation clauses and implementation- dependent features in Ada provided by the VAX Ada compiler, Version 1.3.
This report is one in a series dealing with the use of representation clauses and implementation-dependent features in Ada. The purpose of this report is to discuss detailed experimental procedures to assess compiler support.
This report, one in a series, provides a qualitative assessment of the support of representation clauses and implementation-dependent features in Ada provided by the Ada/M(44) compiler, Version 1.6.