Considering the Problem of Insider IT Misuse

Australasian Journal of Information Systems

Steven Furnell¹  Aung Htike Phyo¹ 

[1] Steven Furnell

关键词: insider;    misuse;    intrusion;    security;   

DOI  :  10.3127/ajis.v10i2.160

学科分类：计算机科学（综合）

来源: University of Canberra * Faculty of Information Sciences and Engineering

【 摘 要 】

In recent years the Internet connection has become a frequent point of attack for most organisations. However, the loss due to insider misuse is far greater than the loss due to external abuse. This paper focuses on the problem of insider misuse, the scale of it, and how it has effected the organisations. The paper also discusses why access controls alone cannot be used to address the problem, and proceeds to consider how techniques currently associated with Intrusion Detection Systems can potentially be applied for insider misuse detection. General guidelines for countermeasures against insider misuse are also provided to protect data and systems.

【 授权许可】

Unknown