Insider Threat Control: Using Centralized Logging to Detect Data Exfiltration Near Insider Termination.

摘要

This report describes a new insider threat study funded by DHS S&T in collaboration with the USSS and the CERT(reg) Insider Threat Center, part of Carnegie Mellon University's Software Engineering Institute. The primary goal of the current research is to produce empirically derived findings from insider and outsider computer criminal activity within the banking and finance sector to help security professionals prevent, detect, and manage malicious insider activity and risk.