Work

Insider threat mitigation: Systematic literature review

Year: 2024

Type: review

Abstract: The increasing prevalence of cybercrime necessitates the implementation of robust security measures. The majority of these attacks are initiated by authorized users who possess knowledge of the system vulnerabilities. Thus, insider attack prevention (ITP) strategies need to be explored to ensure the security of organizations. This review comprehensively examines the existing literature on ITP methods, focusing on recent developments and their implementation in various corporations. This review categorizes and classifies different types of insider attacks and their corresponding prevention and detection techniques. This paper also introduces a multi-tiered activity monitoring model that integrates network, system, and physical security measures to provide comprehensive defense against insider threats. This review also provides a detailed taxonomy that classifies insider threats based on insider type, access level, and targeted security objectives. Finally, future directions for ITP are explored, highlighting the open issues and challenges that need to be addressed.

Source: Ain Shams Engineering Journal

DOI: 10.1016/j.asej.2024.103068

Authors: Usman Inayat, Mashaim Farzan, Sajid Mahmood, Muhammad Fahad Zia, Shahid Hussain, Fabiano Pallonetto

Institutions: University of Management and Technology, American University in Dubai, National University of Ireland, Maynooth

Language: English

Topic: Information and Cyber Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

SDG: Peace, justice, and strong institutions

Open Access status: gold

Estimated APC paid: $860