Insider Threats and Linguistics
Bill Claycomb ( Carnegie Mellon University )
- 14:00 27th October 2015 ( Michaelmas Term 2015 )Tony Hoare Room, Robert Hooke Building
Preventing, detecting, and responding to malicious insider activity poses a significant challenge to enterprise and organisational security. Studies continue to show the insider threat problem has not abated, and may be increasing. We could speculate on cause, perhaps looking at workforce demographics, new information-sharing technologies, or evolving policies regarding personal devices in the workplace. But regardless of the factors driving this trend, the problem of trusted individuals causing harm to the organisation by exploiting authorized access is ancient, and will remain a serious problem ad infinitum. This talk will highlight recent work on insider threat detection: analysis of social network dynamics and behavioural analysis derived from language use. We will also discuss an emerging issue of concern – insider cyber terrorism, particularly as it relates to the Internet of Things.