Ten Tales of Betrayal: The Threat to Corporate Infrastructure by Information Technology Insiders Analysis and Observations

摘要

This report offers an overview and analysis of 10 significant cases of trust betrayal. The cases in question were information technology (IT) insider events in which an insider or former insider, having had legitimate access to a critical information system, abused or violated that trust for personal advantage or to exact revenge on a person or organization. In each case the actions of a disgruntled or self-interested offender seriously damaged or compromised the operability of a critical information system. Also included in this report is a discussion of common themes and patterns emerging from the examination of these incidents under five general headings corresponding to clusters of significant issues or lessons emerging from the substance of the case narratives. These issue areas are: Subject and Attack Characteristics, Screening, Attack Detection, Organizational and Social Environment, and Personnel Management Issues.