Answers are grounded in this paper and cite their sources.
Insider attacks-that is, attacks by users with privileged knowledge about a system-are a growing problem for many organizations. To address this threat, the authors have designed an architecture for insider threat detection that combines an array of complementary monitoring and auditing techniques.
No takes yet. Share an insight, caveat, or question.
Bowen et al. (2009) studied this question.
Synapse has enriched 10 related papers. Consider them for comparative context: