Anomaly detection in multiple scale for insider threat analysis
Yoohwan Kim, Frederick T. Sheldon · 2011
Insiders now pose the greatest risk to organizations' information infrastructure when they have the incentive, opportunity, rationalization and the capability to circumvent rules. Cost estimates approach $1000 B/year from modification of data, security mechanisms, unauthorized network connections, covert channels, and physical damage and destruction including information extrusion/exfiltration.