Understanding insiders: An analysis of risk-taking behavior
Understanding insiders: An analysis of risk-taking behavior
复制标题
了解内部人士：冒险行为分析
DOI：
--
复制
发表时间：
2013
期刊：
影响因子：
--
通讯作者：
E. Spafford
中科院分区：
文献类型：
--
作者：
Fariborz Farahmand;E. Spafford
针对内部人员威胁，有大量研究致力于开发新技术。同时，由于涉及经济和人为因素的非技术问题，现有技术未能得到充分利用。内部人员实际行为相关的问题对于确保最佳技术实现其预期目的至关重要。在我们的研究中，我们调查了被认可的风险认知模型以及内部人员威胁所特有的特征，并在这些模型中引入了顺序量表来衡量内部人员的风险认知。我们还研究了决策理论，得出的结论是，由特沃斯基（Tversky）和卡尼曼（Kahneman）提出的前景理论可用于描述内部人员的冒险行为，并可纳入我们的模型。我们的研究结果表明，内部人员所感知的风险和收益之间呈反比关系，并且基于传统工程风险分析方法和预期效用的模型无法很好地解释他们的行为。我们讨论了用来自不同组织的42名高级信息安全主管对该模型进行验证的结果。我们还讨论了如何利用该模型识别内部人员对风险和收益的认知特征、他们的冒险行为以及如何构建内部人员决策。最后，我们建议了解被发现的风险并营造公平的工作环境，以降低内部人员实施犯罪行为的可能性。
There is considerable research being conducted on insider threats directed to developing new technologies. At the same time, existing technology is not being fully utilized because of non-technological issues that pertain to economics and the human dimension. Issues related to how insiders actually behave are critical to ensuring that the best technologies are meeting their intended purpose. In our research, we have investigated accepted models of perceptions of risk and characteristics unique to insider threat, and we have introduced ordinal scales to these models to measure insider perceptions of risk. We have also investigated decision theories, leading to a conclusion that prospect theory, developed by Tversky and Kahneman, may be used to describe the risk-taking behavior of insiders and can be accommodated in our model. Our results indicate that there is an inverse relationship between perceived risk and benefit by insiders and that their behavior cannot be explained well by the models that are based on the traditional methods of engineering risk analysis and expected utility. We discuss the results of validating that model with forty-two senior information security executives from a variety of organizations. We also discuss how the model may be used to identify characteristics of insiders’ perceptions of risk and benefit, their risk-taking behavior and how to frame insider decisions. Finally, we recommend understanding risk of detection and creating a fair working environment to reduce the likelihood of committing criminal acts by insiders.