Insider Threat Modeling: An Adversarial Risk Analysis Approach

Insider threats entail major security issues in many organizations. Game theoretic models of insider so far proposed do not take into account important factors such as the organizational culture and whether attacker was detected or not. They also fail to model defensive mechanisms already put place by an organization mitigate attacks. We propose two new which incorporate these settings and, hence, are more realistic, use adversarial risk analysis find their solutions. Our solutions general can be applied most threat scenarios. A data example illustrates discussion.