Insider threat detection model based on operation tree
Yao Dan-lin · Hebei Sheng Kexueyuan xuebao · 2008
Threats that business corporations are facing come from not only the outsider,but also the insider.Nowadays,insider threats are widely recognized as an issue of ulmost importance for security management.However,the development of assessing instrument for discovery and analysis of insider threats is still in an explore stage.The present study provides a novel model for detecting insider threats.This model offers a minimal operation tree on the basis of the specific operation system of the customer.And this model can detect the operation behaviors of the insider in the real time,and make decisions to insider threats.