Reference no: EM131937552

Please paraphrase the below

Insider Threats  A natural consequence of having defined the term "insider" is to consider the term "insider threat". As discussed in the previous section, again many different aspects can be important:

• Risk to organization or organizational resources posed by actions (the entity as agent of the business);
• Access type or system role;
• Aim or intentionality or reason for misuse;
• Level of technical expertise;
• Type of malicious insider behaviour or system consequences; and
• Threats from masquerader, traitors, and naive insiders.

The last point of masqueraders (individuals pretending to be legitimate insiders but without valid access), traitors (legitimate insiders acting in malicious ways), and na ¨ive insiders (who cause damage without malicious intent) is very closely related to the question of motivation discussed above. The problem of interest is dealing with the "real real insider"-an individual deeply embedded in an organization (e.g., a high level executive, or a systems administrator). Detection techniques for each of these types of insider threats will vary. ?The impact of insider threats can occur in multiple dimensions: financial loss, disruption to the organization, loss of reputation, and long term impacts on organi- zational culture. These impacts can be highly nuanced, and are neither well or easily measured or accounted for. An important aspect here is that "bonus round" insider threats (actions taken in anger, revenge, spite regarding bonuses, compensation) can have severe consequences on all levels of an organization. Thus a rather "small" or meaningless motivation for the individual can have a rather huge impact for the organization. Equally, the impact may not depend on motivation-an innocent act can have as devastating an effect as a maliciously motivated attack. The goal of detecting insider threats may therefore be to avoid catastrophic consequences regardless of the motivation. These aspects as well as other risk accelerants should be represented in threat models, to acknowledge their importance.