Advanced risk measurement approach to insider threats in cyberspace

Inhyun Cho, Kyung Ho Lee

Research output: Contribution to journalArticle

Abstract

Inside jobs have been a source of critical threats in cyberspace. To manage such insider threats, a proper measurement approach is required for effective risk-based decision-making. The measurement approach should include insider-related information (e.g. the significance of jobs, the position level, the required authority for data, and the type of employment) in order to better measure and analyze insider risks. In this paper, we suggest an approach that takes into account the insider-related information in calculating data leakage risk of insiders in the banking sector. We implement this approach by utilizing real-world data to calculate insider risks. We present an effective risk measurement approach, which we believe can enhance decision-making process for risk management for insider threats.

Original languageEnglish
Pages (from-to)1-9
Number of pages9
JournalIntelligent Automation and Soft Computing
DOIs
Publication statusAccepted/In press - 2016 Jan 6

Fingerprint

Decision making
Decision Making
Banking
Risk Management
Risk management
Leakage
Sector
Calculate

Keywords

  • banking Sector
  • cyberspace
  • data leakage
  • Insider threat
  • risk measurement

ASJC Scopus subject areas

  • Artificial Intelligence
  • Software
  • Theoretical Computer Science
  • Computational Theory and Mathematics

Cite this

Advanced risk measurement approach to insider threats in cyberspace. / Cho, Inhyun; Lee, Kyung Ho.

In: Intelligent Automation and Soft Computing, 06.01.2016, p. 1-9.

Research output: Contribution to journalArticle

@article{d9a04c3a80714381870bfef94ea7fac8,
title = "Advanced risk measurement approach to insider threats in cyberspace",
abstract = "Inside jobs have been a source of critical threats in cyberspace. To manage such insider threats, a proper measurement approach is required for effective risk-based decision-making. The measurement approach should include insider-related information (e.g. the significance of jobs, the position level, the required authority for data, and the type of employment) in order to better measure and analyze insider risks. In this paper, we suggest an approach that takes into account the insider-related information in calculating data leakage risk of insiders in the banking sector. We implement this approach by utilizing real-world data to calculate insider risks. We present an effective risk measurement approach, which we believe can enhance decision-making process for risk management for insider threats.",
keywords = "banking Sector, cyberspace, data leakage, Insider threat, risk measurement",
author = "Inhyun Cho and Lee, {Kyung Ho}",
year = "2016",
month = "1",
day = "6",
doi = "10.1080/10798587.2015.1121617",
language = "English",
pages = "1--9",
journal = "Intelligent Automation and Soft Computing",
issn = "1079-8587",
publisher = "AutoSoft Press",

}

TY - JOUR

T1 - Advanced risk measurement approach to insider threats in cyberspace

AU - Cho, Inhyun

AU - Lee, Kyung Ho

PY - 2016/1/6

Y1 - 2016/1/6

N2 - Inside jobs have been a source of critical threats in cyberspace. To manage such insider threats, a proper measurement approach is required for effective risk-based decision-making. The measurement approach should include insider-related information (e.g. the significance of jobs, the position level, the required authority for data, and the type of employment) in order to better measure and analyze insider risks. In this paper, we suggest an approach that takes into account the insider-related information in calculating data leakage risk of insiders in the banking sector. We implement this approach by utilizing real-world data to calculate insider risks. We present an effective risk measurement approach, which we believe can enhance decision-making process for risk management for insider threats.

AB - Inside jobs have been a source of critical threats in cyberspace. To manage such insider threats, a proper measurement approach is required for effective risk-based decision-making. The measurement approach should include insider-related information (e.g. the significance of jobs, the position level, the required authority for data, and the type of employment) in order to better measure and analyze insider risks. In this paper, we suggest an approach that takes into account the insider-related information in calculating data leakage risk of insiders in the banking sector. We implement this approach by utilizing real-world data to calculate insider risks. We present an effective risk measurement approach, which we believe can enhance decision-making process for risk management for insider threats.

KW - banking Sector

KW - cyberspace

KW - data leakage

KW - Insider threat

KW - risk measurement

UR - http://www.scopus.com/inward/record.url?scp=84953286434&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84953286434&partnerID=8YFLogxK

U2 - 10.1080/10798587.2015.1121617

DO - 10.1080/10798587.2015.1121617

M3 - Article

AN - SCOPUS:84953286434

SP - 1

EP - 9

JO - Intelligent Automation and Soft Computing

JF - Intelligent Automation and Soft Computing

SN - 1079-8587

ER -