A Probabilistic Analysis Framework for Malicious Insider Threats

Taolue Chen, Florian Kammüller, Ibrahim Nemli, Christian W. Probst

    Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

    14 Citations (Scopus)

    Abstract

    Malicious insider threats are difficult to detect and to mitigate. Many approaches for explaining behaviour exist, but there is little work to relate them to formal approaches to insider threat detection. In this work we present a general formal framework to perform analysis for malicious insider threats, based on probabilistic modelling, verification, and synthesis techniques. The framework first identifies insiders’ intention to perform an inside attack, using Bayesian networks, and in a second phase computes the probability of success for an inside attack by this actor, using probabilistic model checking.
    Original languageEnglish
    Title of host publicationHuman Aspects of Information Security, Privacy, and Trust
    Subtitle of host publicationThird International Conference, HAS 2015, Held as Part of HCI International 2015, Los Angeles, CA, USA, August 2-7, 2015. Proceedings
    EditorsTheo Tryfonas, Ioannis Askoxylakis
    Place of PublicationBerlin
    PublisherSpringer
    Pages178-189
    Number of pages12
    ISBN (Electronic)978-3-319-20376-8
    ISBN (Print)9783319203751
    DOIs
    Publication statusPublished - 21 Jul 2015
    EventThird International Conference on Human Aspects of Information Security, Privacy, and Trust (HAS), Los Angeles, US: Third International Conference on Human Aspects of Information Security, Privacy, and Trust (HAS) - Berlin
    Duration: 21 Jul 2015 → …

    Publication series

    NameLecture notes in computer science
    PublisherSpringer
    Volume9190
    ISSN (Print)0302-9743
    ISSN (Electronic)1611-3349

    Conference

    ConferenceThird International Conference on Human Aspects of Information Security, Privacy, and Trust (HAS), Los Angeles, US
    CityBerlin
    Period21/07/15 → …

    Keywords

    • EC Grant Agreement nr.: FP7/2007-2013
    • EC Grant Agreement nr.: FP7/318003
    • Malicious insider threats
    • Probabilistic analysis

    Fingerprint Dive into the research topics of 'A Probabilistic Analysis Framework for Malicious Insider Threats'. Together they form a unique fingerprint.

    Cite this