Open Access
Peer-Reviewed
Original Research
Mitigating the Insider Threat to Information Systems Using Fully Embedded and Inseparable Autonomic Self-protection Capability
Abstract
The insider threat is a problem that organizations have to deal with . Regardless of its size, mission, or location, any company that uses information systems is potentially vulnerable to insider attacks. Federal agencies, non-governmental organizations, as well as data centers face the same risk of being attacked by an insider. Countering the insider threat is a difficult and daunting task. Organizations concerned with the problem usually train their employees on security -related matters, rules of behavior policies, and the consequences of committing criminal activities. More technically -oriented solutions include enhanced credentialing and access control, and the use of monitoring tools that provide insight into the health and status of systems. This paper addresses the deficiency of widely -used monitoring tools and strategies. It discusses the difference between traditional security approaches and autonomic-based self-protection. The paper then proposes a solution that equips a system with innate self-defense mechanisms that relieve the sys tem from having to rely on human intervention . The paper introduces the Insider Threat Minimization and Mitigation Framework. This framework equips systems with self-defense mechanisms such that a system can instantaneously respond to potential threats and defend itself against users who have unfettered access to it. The framework employs the autonomous demotion of power user s’ access privileges based on analysis and evaluation of the user’s risk level. The paper presents the details of the proposed framework and simulates its effectiveness within a data center environment of mission-critical systems.
Keywords
Insider Threat
Autonomous Computing
Self-Protection
Declarations & Ethics
Funding:
This research received academic dissemination support through ESCAP / JournalsHub publishing programs.
Conflicts of Interest:
The authors declare no competing financial or institutional interests.
Peer Review:
Double-blind peer reviewed by international subject specialists.
License:
Creative Commons Attribution 4.0 International (CC BY 4.0).
How to Cite This Article
APA / MLA / BibTeX
Jabbour, et al. (2021). Mitigating the Insider Threat to Information Systems Using Fully Embedded and Inseparable Autonomic Self-protection Capability. IADIS International Journal on Computer Science and Information Systems, 16(1). https://doi.org/10.33965/ijcsis_2021_v16i1_07
Jabbour, et al. "Mitigating the Insider Threat to Information Systems Using Fully Embedded and Inseparable Autonomic Self-protection Capability." IADIS International Journal on Computer Science and Information Systems, vol. 16, no. 1, 2021. https://doi.org/10.33965/ijcsis_2021_v16i1_07
Jabbour, et al. "Mitigating the Insider Threat to Information Systems Using Fully Embedded and Inseparable Autonomic Self-protection Capability." IADIS International Journal on Computer Science and Information Systems 16, no. 1 (2021). https://doi.org/10.33965/ijcsis_2021_v16i1_07