A Framework for Insider Threat Detection Using Role-Based Profile Assessment and Threshold
Qais Al-Na’amneh, Mahmoud Mohammad Aljawarneh, Rahaf Hazaymih · Advances in computational intelligence and robotics book series · 2025
Insider threats are a major worry for organizations and governments. Insiders often have significant knowledge of an organization's architecture, making traditional intrusion detection systems ineffective. Sophisticated measures are needed to analyze internal behaviors and assess potential threats. The insider threat has started to represent a significant growing challenge for organizations and companies This chapter dives into the nature of insider threats in general, with a special focus on the malicious insider psychological factors exploring their causes and impacts, and how that can help predict and prevent such incidents. In comparison, providing and examining real-world cases and providing suggestions on how to deal with them .Furthermore, this chapter proposes a framework approach for detecting insider threats. The model is built on a layered method that connects the real world, measurements, and parameters to assess the likelihood of an insider threat.