Title :
Analysis of Unintentional Insider Threats Deriving from Social Engineering Exploits
Author :
Greitzer, Frank L. ; Strozer, Jeremy R. ; Cohen, Sholom ; Moore, Andrew P. ; Mundie, David ; Cowley, Jennifer
Author_Institution :
PsyberAnalytix, Richland, WA, USA
Abstract :
Organizations often suffer harm from individuals who bear no malice against them but whose actions unintentionally expose the organizations to risk-the unintentional insider threat (UIT). In this paper we examine UIT cases that derive from social engineering exploits. We report on our efforts to collect and analyze data from UIT social engineering incidents to identify possible behavioral and technical patterns and to inform future research and development of UIT mitigation strategies.
Keywords :
security of data; UIT mitigation strategies; UIT social engineering incidents; social engineering exploits; unintentional insider threats; Computers; Context; Educational institutions; Electronic mail; Organizations; Security; Taxonomy; social engineering; unintentional insider threat;
Conference_Titel :
Security and Privacy Workshops (SPW), 2014 IEEE
Conference_Location :
San Jose, CA
DOI :
10.1109/SPW.2014.39
