TRANSACTIONAL ANALYSIS FOR INSIDER THREAT DETECTION

“‘内部威胁’对企业来说是一个巨大的风险，因为它威胁到客户和员工的信任。意外或恶意滥用公司最敏感和最有价值的数据可能导致客户身份盗窃、金融欺诈、知识产权盗窃或基础设施损坏。由于内部人员拥有访问数据的特权，因此安全专业人员通常很难检测到可疑活动。2016年Forrester报告“Hunting Insider Threats”确定了八个关键因素作为内部人员威胁的常见动机：财务困境;员工不满;员工对敏感信息和IP的权利;工作不安全感;报复;工作冲突;意识形态和外部影响。我们在这个项目中的目标是使用先进的人工智能和交易分析来（i）识别团队和公司崩溃的沟通模式特征（从而识别团队和员工内部潜在的缺乏参与度的情况，从而有可能失去工作）;（二）识别具有欺骗特征的语言使用（以及经过验证的消息\“情感”指标），能够自动警报潜在的员工痛苦，不满，不安全等，以及（iii）识别典型的通信模式，以突出公司内潜在外部影响的信号特征。"

"'Insider Threat' is a formidable risk to business because it threatens both customer and employee trust. Accidental or malicious misuse of a firm's most sensitive and valuable data can result in customer identity theft, financial fraud, intellectual property theft, or damage to infrastructure. Because insiders have privileged access to data in order to do their jobs, it's usually difficult for security professionals to detect suspicious activity.The 2016 Forrester Report ""Hunting Insider Threats"" identified eight key factors as common motivators of Insider Threat: Financial distress; Employee disgruntlement; Perceived employee entitlement to sensitive information and IP; Job insecurity; Revenge; Conflict at work; Ideology and Outside influence.Our goal in this project is to use advanced AI and transactional analytics to (i) identify communication patterns characteristic of both team and company breakdown (hence identifying potential lack of engagement within teams and employees at risk of losing their job); (ii) identify language use characteristic of deception (alongside proven metrics of message \`sentiment'), enabling automatic alerts on potential employee distress, disgruntlement, insecurity etc. and (iii) identifying a-typical communication patterns to foreground signals characteristic of potential outside influence within a company."