icon-carat-right menu search cmu-wordmark

A Pattern for Increased Monitoring for Intellectual Property Theft by Departing Insiders

Technical Report
In this report, the authors present techniques for helping organizations plan, prepare, and implement means to mitigate insider theft of intellectual property.
Publisher

Software Engineering Institute

CMU/SEI Report Number
CMU/SEI-2012-TR-008
DOI (Digital Object Identifier)
10.1184/R1/6571703.v1
Topic or Tag

Abstract

A research project at the CERT Program is identifying enterprise architectural patterns to protect against the insider threat to organizations. This report presents an example of such a pattern—Increased Monitoring for Intellectual Property (IP) Theft by Departing Insiders—to help organizations plan, prepare, and implement a means to mitigate the risk of insider theft of IP. Our case data shows that many insiders who stole IP did so within 30 days of their termination. Based on this insight, this pattern helps reduce that risk through increased monitoring of departing insiders during their last 30 days of employment. The increased monitoring suggested by the pattern is above and beyond what might be required for a baseline organizational detection of potentially malicious insider actions. Future work will include development of a library of enterprise architectural patterns for mitigating the insider threat based on the data we have collected. Our goal is for organizational resilience to insider threat to emerge from repeated application of patterns from the library.

Cite This Technical Report

Moore, A., Hanley, M., & Mundie, D. (2012, April 1). A Pattern for Increased Monitoring for Intellectual Property Theft by Departing Insiders. (Technical Report CMU/SEI-2012-TR-008). Retrieved December 30, 2024, from https://doi.org/10.1184/R1/6571703.v1.

@techreport{moore_2012,
author={Moore, Andrew and Hanley, Michael and Mundie, David},
title={A Pattern for Increased Monitoring for Intellectual Property Theft by Departing Insiders},
month={{Apr},
year={{2012},
number={{CMU/SEI-2012-TR-008},
howpublished={Carnegie Mellon University, Software Engineering Institute's Digital Library},
url={https://doi.org/10.1184/R1/6571703.v1},
note={Accessed: 2024-Dec-30}
}

Moore, Andrew, Michael Hanley, and David Mundie. "A Pattern for Increased Monitoring for Intellectual Property Theft by Departing Insiders." (CMU/SEI-2012-TR-008). Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, April 1, 2012. https://doi.org/10.1184/R1/6571703.v1.

A. Moore, M. Hanley, and D. Mundie, "A Pattern for Increased Monitoring for Intellectual Property Theft by Departing Insiders," Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, Technical Report CMU/SEI-2012-TR-008, 1-Apr-2012 [Online]. Available: https://doi.org/10.1184/R1/6571703.v1. [Accessed: 30-Dec-2024].

Moore, Andrew, Michael Hanley, and David Mundie. "A Pattern for Increased Monitoring for Intellectual Property Theft by Departing Insiders." (Technical Report CMU/SEI-2012-TR-008). Carnegie Mellon University, Software Engineering Institute's Digital Library, Software Engineering Institute, 1 Apr. 2012. https://doi.org/10.1184/R1/6571703.v1. Accessed 30 Dec. 2024.

Moore, Andrew; Hanley, Michael; & Mundie, David. A Pattern for Increased Monitoring for Intellectual Property Theft by Departing Insiders. CMU/SEI-2012-TR-008. Software Engineering Institute. 2012. https://doi.org/10.1184/R1/6571703.v1