Accession Number:

AD1147218

Title:

Spotlight On: Malicious Insiders with Ties to the Internet Underground Community

Descriptive Note:

[Technical Report, Technical Paper]

Corporate Author:

CARNEGIE-MELLON UNIV PITTSBURGH PA

Personal Author(s):

• Hanley, Michael
• Moore, Andrew P.
• Cappelli, Dawn M.
• Trzeciak, Randall F.

Report Date:

2009-03-01

Pagination or Media Count:

14

Abstract:

In this article, we focus on insider threat cases in which the insider had relationships with the internet underground community. We begin by defining what we mean by the internet underground as it is used in the context of this article. We then provide a snapshot of the cases that focuses on who, what, why, and how. Next, we provide references to best practices that might have been effective in countering these incidents.

Descriptors:

• employment
• insider threats
• best practices
• denial of service attack
• law
• trade secrets
• commerce
• computer access control
• detection
• risk
• security
• vulnerability
• communication systems
• computers
• crime
• intellectual property
• materials

Subject Categories:

• Computer Systems Management and Standards
• Sociology and Law

Distribution Statement:

[A, Approved For Public Release]