VB2017 preview: From insider threat to insider asset: a practical guide

Posted by   Martijn Grooten on   Aug 30, 2017

"How to catch a Snowden" was the slogan branded across an exhibition booth at the recent Infosecurity Europe event by an exhibitor apparently offering a solution to insider threats. Whether you think it appropriate to use the NSA whistle-blower as an example, insider threats are real, and the concern organizations have – both about employees whose accounts get compromised and about those whose interests don't align with the organization's – are genuine.

The subject is discussed at great length in the paper "From insider threat to insider asset: a practical guide", which will be presented at VB2017 in Madrid by Forcepoint's Kristin Leary and Richard Ford. The latter has a long history in security (including a stint working as Editor of Virus Bulletin), but it is Kristin's role as the company's Chief Human Resources Officer that makes this paper particularly interesting.

In their paper, Kristin and Richard first discuss various technical approaches to creating an insider threat programme (ITP), many of which seem rather Orwellian. Indeed, they argue that such an approach could create a hostile environment that may actually encourage employees to turn against the organization. Instead, they argue, the issue of insider threats, and how to prevent them, should be approached as just as much an HR issue as a technical one – and this is the philosophy behind the ITP they built at Forcepoint. In their paper, they share some of the lessons they learned in rolling out their ITP within the company.

Even if insider threats are not something you're particularly concerned about, there are important lessons to be learned from this paper, which are that not every security problem is a technical one, and that non-technical solutions can have a great impact.

Register for VB2017 now to hear Kristin, Richard and more than 50 other speakers discuss the latest threats and how to defend against them.

Or maybe you have your own story of a real inside attack to share? The call for last-minute papers remains open until the end of this week (3 September 2017).

VB2017-325w.jpg

twitter.png
fb.png
linkedin.png
googleplus.png
reddit.png

 

Latest posts:

VB2018 paper: Uncovering the wholesale industry of social media fraud: from botnet to bulk reseller panels

Today, we publish the VB2018 paper by Masarah Paquet-Clouston (GoSecure) who looked at the supply chain behind social media fraud.

VB2018 paper: Now you see it, now you don't: wipers in the wild

Today, we publish the VB2018 paper from Saher Naumaan (BAE Systems) who looks at malware variants that contain a wiper functionality. We also publish the recording of her presentation.

Emotet trojan starts stealing full emails from infected machines

The infamous Emotet trojan has added the capability to steal full email bodies from infected machines, opening the possibilities for more targeted spam and phishing campaigns.

VB2018 paper: Who wasn’t responsible for Olympic Destroyer?

Cisco Talos researchers Paul Rascagnères and Warren Mercer were among the first to write about the Olympic Destroyer, the malware that targeted the 2018 PyeongChang Winter Olympic Games. Today, we publish the paper they presented at VB2018 about the…

VB2018 paper: From drive-by download to drive-by mining: understanding the new paradigm

Today, we publish the VB2018 paper by Malwarebytes researcher Jérôme Segura, in which he details the shift from exploit kits to drive-by mining. We also publish the video of his VB2018 presentation.

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.