Inside Job

[Spekter1080]

this is a sister thread to 'New patch from "the good people at Microsoft"', as I found the article on the same site, however they are of different topics.

http://www.technewsworld.com/story/M...creasing.xhtml

Still, the article contains interesting information and will hopefully make you more aware.

[thehorse13]

Interesting article but this problem has been around since the beginning of time. Any security professional that's worth his/her salt will be very proficient in this area.

The condition of insider threat is also living and cyclical. This means that as technologies come and go, so will the threats and countermeasures. As the line continues along the time axis, you'll see the advantage fall to one side or the other. For those not in "the know" the security experts are currently at the disadvantage in this area.

Thanks for the post.

--TH13

[ric-o]

The good folks at Carnegie Mellon's CERT did a study on this topic. See here http://www.cert.org/archive/pdf/insidercross051105.pdf

Also published a lessons learned guide too - http://www.cert.org/archive/pdf/InsiderThreatCSI.pdf

Scary stuff...one threat that is hard to mitigate IMO.

[Spekter1080]

I totally agree with you, thehorse, I posted the link just as a thoughtful reminder. I also agree with your point that for every security there will always be an anti-security.

ric-o, thanks for posting, the links have some good stuff and really add to the thread!

[MrCoffee]

Somewhere out there I spotted a McAfee whitepaper PDF that was recently released. The study was based on data collected in Europe.

I believe the link to it is:

http://www.mcafeeprovensecurity.com/whitepaper/en/

It was a bit simplistic, but a good read to pass up the line to not so technical folks.