Secure Team Composition to Thwart Insider Threats and Cyber-Espionage
Áron Lászka, Benjamin Johnson, Pascal Schöttle, Jens Großklags, Rainer Böhme · ACM Transactions on Internet Technology · 2014
We develop a formal nondeterministic game model for secure team composition to counter cyber-espionage and to protect organizational secrets against an attacker who tries to sidestep technical security mechanisms by offering a bribe to a project team member. The game captures the adversarial interaction between the attacker and the project manager who has a secret she wants to protect but must share with a team of individuals selected from within her organization. Our interdisciplinary work is important in the face of the multipronged approaches utilized by well-motivated attackers to circumvent the fortifications of otherwise well-defended targets.