Sciweavers

IEEEARES
2010
IEEE

External Insider Threat: A Real Security Challenge in Enterprise Value Webs

14 years 6 months ago
External Insider Threat: A Real Security Challenge in Enterprise Value Webs
—Increasingly, organizations collaborate with other organizations in value webs with various arrangements, such as outsourcing, partnering, joint ventures, or subcontracting. As the Jericho Forum (an industry consortium of the Open Group) observed, in all these forms of collaboration, the boundaries between organizations become permeable and, as a consequence, insiders and outsiders can no longer be neatly separated using the notion of a perimeter. Such organizational arrangements have security implications because individuals from the value web are neither outsiders nor completely insiders. To address this phenomenon this paper proposes a third set of individuals, called External Insiders. External insiders add challenges to the already known insider threat problem because, unlike outsiders, external insiders have granted access and are trusted; and, unlike traditional insiders, external insiders are not subjected to as many internal controls enforced by the organization for which t...
Virginia N. L. Franqueira, André van Cleeff
Added 17 May 2010
Updated 17 May 2010
Type Conference
Year 2010
Where IEEEARES
Authors Virginia N. L. Franqueira, André van Cleeff, Pascal van Eck, Roel Wieringa
Comments (0)