Insider threats entail major security issues in many organizations. Game theoretic models of insider threats so far proposed do not take into account important factors such as the organizational culture and whether the attacker was detected or not. They also fail to model defensive mechanisms already put in place by an organization to mitigate insider attacks. We propose two new models which incorporate these settings and, hence, are more realistic, and use adversarial risk analysis to find their solutions. Our models and solutions are general and can be applied to most insider threat scenarios. A data security example illustrates the discussion.

中文翻译：

---

内部威胁建模：对抗性风险分析方法


内部威胁会给许多组织带来重大安全问题。迄今为止提出的内部威胁博弈论模型没有考虑组织文化以及攻击者是否被发现等重要因素。他们也无法对组织已经建立的防御机制进行建模，以减轻内部攻击。我们提出了两种新模型，它们结合了这些设置，因此更加现实，并使用对抗性风险分析来找到解决方案。我们的模型和解决方案是通用的，可以应用于大多数内部威胁场景。一个数据安全示例说明了这一讨论。