insider threat
siseoht (1), siseringioht
olemus
oht, mille allikaks on organisatsiooni töötajad või
nendega seotud isikud
=
a threat originating from an employee, vendor, executive, contractor, or other person who works directly with an organization
NIST SP 800-53 Rev. 5:
The threat that an insider will use her/his authorized access, wittingly or unwittingly, to do harm to the security of organizational operations and assets, individuals, other organizations, and the Nation. This threat can include damage through espionage, terrorism, unauthorized disclosure of national security information, or through the loss or degradation of organizational resources or capabilities.
ülevaateid
https://en.wikipedia.org/wiki/Insider_threat
https://www.cisa.gov/defining-insider-threats
https://www.cs.cmu.edu/~jfrankli/talks/insider-threat.ppt
http://www.ieee-security.org/TC/SPW2014/papers/5103a214.PDF
tõrje
https://zinatullin.com/tag/attacker-types/
https://www.us-cert.gov/sites/default/files/publications/Combating%20the%20Insider%20Threat_0.pdf
https://www.documentcloud.org/documents/3538059-FBI-Insider-Threat-Training-Program.html
https://www.cisa.gov/insider-threat-mitigation
https://www.lightedge.com/blog/protect-against-insider-threats/
https://ccdcoe.org/uploads/2018/10/Insider_Threat_Study_CCDCOE.pdf
https://isyou.info/jowua/papers/jowua-v2n1-1.pdf
vt ka
- siseoht (2)
- siserünne