Insider Threat Mitigation

October 16, 2015 • Presentation

By

William R. Claycomb and Andrew P. Moore

Explores hypothesis that over time, insider social networks exhibit weakening of internal connections and strengthening of external connections to adversaries.

Publisher

Software Engineering Institute

Watch

Abstract

To examine the hypothesis regarding social network behavior, SEI researchers used data from ~140 insider espionage incidents and measured connection strength over time between insider and family/coworkers/adversaries through communication frequency and affect positivity.