Defining and Analyzing Insiders and Their Threats in Organizations

This paper is concerned about insiders and analyzing their threats in organizations. We start by deriving a novel definition of insiders, and identifying the criteria distinguishing insiders from potential insiders. The paper then discusses the main organization types, process workflow, and then derives their requirements. We analyze one of the major threats which affect secure information sharing, which is the content leakage threat that is caused by insiders. Subsequently, we analyze the state of the art schemes, which attempt to mitigate the risk of insider threats on content confidentiality. Such an analysis helps us to identify the weaknesses of the discussed schemes in addressing the identified organizational requirements and develop our research agenda in this direction.