Insiders Trapped in the Mirror Reveal Themselves in Social Media
Lecture notes in computer sciencePublished 1 January 2013
Miltiadis Kandias, Konstantina Galbogini, Lilian Mitrou, Dimitris Gritzalis
Citations39
SJR quartileQ2
SJR score0.35
SNIP0.55
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
This paper develops an insider threat prediction method by valuating a users’ personality trait of narcissism, which is deemed to be closely connected to the manifestation of malevolent insiders, and categorizes the users according to a proposed taxonomy.
Abstract
Social media have widened society's opportunities for communication, while they offer ways to perform employees' screening and profiling. Our goal in this paper is to develop an insider threat prediction method by (e)valuating a users' personality trait of narcissism, which is deemed to be closely connected to the manifestation of malevolent insiders. We utilize graph theory tools in order to detect influence of and usage deviation. Then, we categorize the users according to a proposed taxonomy. Thus we detect individuals with narcissistic characteristics and manage to test groups of people under the prism of group homogeneity. Furthermore, we compare and classify users to larger sub-communities consisting of people of the same profession. The analysis is based on an extensive crawling of Greek users of Twitter. As the application of this method may lead to infringement of privacy rights, its use should be reserved for exceptional cases, such as the selection of security officers or of critical infrastructures decision-making staff.
Keywords
Social SciencesPhysics and Astronomy
NatureCollective dynamics of ‘small-world’ networks
43,160 Citations1998Duncan J. Watts, Steven H. Strogatz
Simple models of networks that can be tuned through this middle ground: regular networks ‘rewired’ to introduce increasing amounts of disorder are explored, finding that these systems can be highly clustered, like regular lattices, yet have small characteristic path lengths, like random graphs.
Measurement and analysis of online social networks
3,050 Citations2007Alan Mislove, Massimiliano Marcon +3 more
This paper examines data gathered from four popular online social networks: Flickr, YouTube, LiveJournal, and Orkut, and reports that the indegree of user nodes tends to match the outdegree; the networks contain a densely connected core of high-degree nodes; and that this core links small groups of strongly clustered, low-degree node at the fringes of the network.
Proceedings of the International AAAI Conference on Web and Social MediaMeasuring User Influence in Twitter: The Million Follower Fallacy
3,009 Citations2010Meeyoung Cha, Hamed Haddadi +2 more
An in-depth comparison of three measures of influence, using a large amount of data collected from Twitter, is presented, suggesting that topological measures such as indegree alone reveals very little about the influence of a user.
Advances In PhysicsCharacterization of complex networks: A survey of measurements
2,456 Citations2007Luciano da Fontoura Costa, Francisco A. Rodrigues +2 more
This article presents a survey of measurements capable of expressing the most relevant topological features of complex networks and includes general considerations about complex network characterization, a brief review of the principal models, and the presentation of the main existing measurements.
NatureThe origin of bursts and heavy tails in human dynamics
2,285 Citations2005Albert-Ĺaszló Barabási
Communication Power
1,961 Citations2009Manuel Castells
SociometryAn Experimental Study of the Small World Problem
1,840 Citations1969Jeffrey R. Travers, Stanley Milgram
Computers in Human BehaviorPersonality and motivations associated with Facebook use
1,729 Citations2009Craig Ross, Emily Orr +4 more
Investigation of how the Five-Factor Model of personality relates to Facebook use indicated that personality factors were not as influential as previous literature would suggest, but a motivation to communicate was influential in terms of Facebook use.
Personality and Social Psychology BulletinNarcissism and Social Networking Web Sites
1,152 Citations2008Laura E. Buffardi, W. Keith Campbell
Cyberpsychology Behavior and Social NetworkingSelf-Presentation 2.0: Narcissism and Self-Esteem on Facebook
1,045 Citations2010Soraya Mehdizadeh
Correlation analyses revealed that individuals higher in narcissism and lower in self-esteem were related to greater online activity as well as some self-promotional content.
Computers in Human BehaviorSocial network use and personality
963 Citations2010Yair Amichai‐Hamburger, Gideon Vinitzky
In this study the self-reports of subjects, were replaced by more objective criteria, measurements of the user-information upload on Facebook, and a strong connection was found between personality and Facebook behavior.
Honeypots: catching the insider threat
359 Citations2004L. Spitzner
Honeypot technologies can be used to detect, identify, and gather information on these specific threats, including the advance insider, the trusted individual who knows internal organization.
Computers in Human BehaviorThe effects of personality traits, self-esteem, loneliness, and narcissism on Facebook use among university students
286 Citations2012Jason Skues, Ben Williams +1 more
It was concluded that students who are high in openness use Facebook to connect with others in order to discuss a wide range of interests, whereas students who is high in loneliness use the site to compensate for their lack of offline relationships.
Computers & SecurityThe insider threat to information systems and the effectiveness of ISO17799
242 Citations2005Marianthi Theoharidou, Spyros Kokolakis +2 more
This paper investigates the approach followed by ISO17799, the dominant standard in IS security management, and unfolds the criminology theory that has designated the measures against insider misuse suggested by the standard, i.e. the General Deterrence Theory.
Business HorizonsYou’ve been tagged! (Then again, maybe not): Employers and Facebook
196 Citations2010William P. Smith, Deborah L. Kidder
Lecture notes in computer scienceTrust, Privacy, and Security in Digital Business
162 Citations2014Simone Fischer‐Hübner, Costas Lambrinoudakis +1 more
Computers & SecurityInsider Threat Prediction Tool: Evaluating the probability of IT misuse
148 Citations2001George Magklaras, Steven Furnell
The proposed solution estimates the level of threat that is likely to originate from a particular insider by introducing a threat evaluation system based on certain profiles of user behaviour and suggests a new and innovative approach of dealing with insiders that abuse IT systems.
Lecture notes in computer scienceAn Insider Threat Prediction Model
132 Citations2010Miltiadis Kandias, Alexios Mylonas +3 more
A novel, interdisciplinary insider threat prediction model is presented, which combines approaches, techniques, and tools from computer science and psychology, and identifies those that require additional monitoring, as they can potentially be dangerous for the information system and the organization.
InfoShould human resource managers use social media to screen job applicants? Managerial and legal issues in the USA
125 Citations2012Ross Slovensky, William H. Ross
Journal of Strategic SecurityModeling Human Behavior to Anticipate Insider Attacks
121 Citations2011Frank L. Greitzer, Ryan E. Hohimer
A predictive modeling framework is described that integrates a diverse set of data sources from the cyber domain, as well as inferred psychological/motivational factors that may underlie malicious insider exploits to help focus the analyst's attention and inform the analysis.
Proactive Insider Threat Detection through Graph Learning and Psychological Context
116 Citations2012Oliver Brdiczka, Juan Liu +6 more
This paper proposes an approach that combines Structural Anomaly Detection from social and information networks and Psychological Profiling of individuals to detect structural anomalies in large-scale information network data, while PP constructs dynamic psychological profiles from behavioral patterns.
Employee Responsibilities and Rights JournalTo Screen or Not to Screen? Using the Internet for Selection Decisions
105 Citations2011H. Kristl Davison, Catherine C. Maraist +2 more
Questions regarding the legality and appropriateness of this practice, as well as issues regarding the standardization, reliability, and validity of the information obtained, need to be addressed.
In the Mood for Being Influential on Twitter
100 Citations2011Daniele Quercia, Jonathan Ellis +2 more
It is suggested that the popularity and influence of a Twitter account cannot be simply traced back to the graph properties of the network within which it is embedded, but also depends on the personality and emotions of the human being behind it.
A comparison of system call feature representations for insider threat detection
74 Citations2005Ai-Wu Liu, C. Derek Martin +2 more
This paper investigates anomaly detection techniques that have been successful for detecting external threats and applies them to the insider threat problem and finds that none of these representations consistently performs as well when dealing with the internal threat as previous results show for external threat detection.
Identifying At-Risk Employees: Modeling Psychosocial Precursors of Potential Insider Threats
73 Citations2012Frank L. Greitzer, Lars J. Kangas +3 more
A psychosocial model developed to assess an employee's behavior associated with an increased risk of insider abuse would be part of a set of management tools for employee assessment to identify employees who pose a greater insider threat.
IEEE Security & PrivacyDesigning Host and Network Sensors to Mitigate the Insider Threat
64 Citations2009Brian M. Bowen, Malek Ben Salem +3 more
The authors have designed an architecture for insider threat detection that combines an array of complementary monitoring and auditing techniques.
Digital InvestigationThe role of behavioral research and profiling in malicious cyber insider investigations
57 Citations2006Eric Shaw
The overall role of the behavioral consultant in insider cases is examined with emphasis on specific forms of support for the investigative team and aid to managers and security personnel with case management of insiders within corporate environments.
IEEE Security & PrivacyRandomness in cryptography
56 Citations2006Rosario Gennaro
Some basic uses of randomness in cryptography are looked at and the process of securely generating randomness is reviewed.
Journal of Strategic SecurityThe Financial Arm Of The FARC: A Threat Finance Perspective
46 Citations2011Thomas J. Cook
Ten Tales of Betrayal: The Threat to Corporate Infrastructure by Information Technology Insiders Analysis and Observations
45 Citations2005Eric Shaw, Lynn Fischer
An overview and analysis of 10 significant cases of trust betrayal in information technology insider events in which an insider or former insider abused or violated that trust for personal advantage or to exact revenge on a person or organization.
IEEE Security & PrivacyCommon Body of Knowledge for Information Security
43 Citations2007Marianthi Theoharidou, Dimitris Gritazalis
The aim is to identify and define an InfoSec CBK to serve as a tool for developing an information security curriculum.
Advances in information securityElectronic Voting: Constitutional and Legal Requirements, and Their Technical Implications
41 Citations2003Lilian Mitrou, Dimitris Gritzalis +2 more
All democracy-oriented legal and constitutional requirements of an Internet-based voting system are identified and such a voting system has to comply with these, in order to encourage and promote the participation of citizens, without violating any of their fundamental rights.
Advances in information securitySecure Electronic Voting: the Current Landscape
40 Citations2003Costas Lambrinoudakis, Dimitris Gritzalis +3 more
The extent to which current voting protocols comply with the identified requirements is investigated and discussed to examine the feasibility of organising and conducting an Internet based election in a secure, efficient and reliable way.
Telematics and InformaticsEmployees’ privacy vs. employers’ security: Can they be balanced?
39 Citations2005Lilian Mitrou, Maria Karyda
This paper addresses the controversy between employees' right to privacy and employers' need to safeguard organizational resources by employing monitoring tools by showing how organizations can formulate use policies, by applying basic principles for fair and lawful monitoring.
Knowledge Acquisition and Insider Threat Prediction in Relational Database Systems
35 Citations2009Qussai Yaseen, Brajendra Panda
The Neural Dependency and Inference Graph (NDIG) is introduced, which shows dependencies among objects and the amount of knowledge that can be inferred about them using dependency relationships.
Information Management & Computer SecurityA digital seal solution for deploying trust on commercial transactions
34 Citations2001Stefanos Gritzalis, Dimitris Gritzalis
This work introduces the notion of digital seals and provides a mechanism for transferring the trust placed by users in companies in the physical world, to the electronic one.
Information Management & Computer SecurityTowards an insider threat prediction specification language
32 Citations2006George Magklaras, Steven Furnell +1 more
The process of constructing a language tailored to describing insider threat incidents, for the purposes of mitigating threats originating from legitimate users in an IT infrastructure is presented.
SIP Vulnerabilities and Anti-SPIT Mechanisms Assessment
26 Citations2007Giannis F. Marias, Stelios Dritsas +3 more
An analytical survey of already proposed anti-SPIT techniques is conducted and their effectiveness is evaluated, in terms of how they deal with the threats and vulnerabilities of the SIP protocol.
Leveraging social networks to detect anomalous insider actions in collaborative environments
21 Citations2011You Chen, Steve Nyemba +2 more
This paper introduces a method called specialized network anomaly detection (SNAD) to detect such events, which assembles the community of users that access a particular subject and assesses if similarities of the community with and without a certain user are sufficiently different.
European Law JournalReconsidering the Premises of Labour Law: Prolegomena to an EU Regulation on the Protection of Employees’ Personal Data
17 Citations1999Spiros Simitis
IGI Global eBooksSocial and Human Elements of Information Security
17 Citations2009Manish Gupta, Raj Sharman
This text provides insightful, high-quality research into the social and human aspects of information security.
Computers & SecurityTrusted third party services for deploying secure telemedical applications over the WWW
16 Citations1999Diomidis Spinellis, Stefanos Gritzalis +3 more
It was found that, as the underlying technologies mature, a Web-based trusted third party architecture provides a viable solution for delivering secure telemedical applications.
Duke Law Scholarship Repository (Duke University)1984 Is Still Fiction: Electronic Monitoring in the Workplace and U.S. Privacy Law
16 Citations2004Christopher Pearson Fazekas
International Conference on Cyber ConflictSensing for suspicion at scale: A Bayesian approach for cyber conflict attribution and reasoning
16 Citations2012Harsha Kalutarage, Siraj Ahmed Shaikh +2 more
Bayesian methods together with statistical normality are explored to judge for effective activity attribution, particularly in high-volume high-scale environments, by combining both prior and posterior knowledge in the scenario.
Facebook and Risks of “De-contextualization” of Information
14 Citations2010Franck Dumortier
This chapter argues that the main privacy risk on Facebook is the one of “de-contextualization” of the information provided by the participants, due to three major characteristics of Facebook: the simplification of social relations, the large information dissemination and the network globalization and normalization effects of Facebook.
International Journal of Digital Crime and ForensicsLUARM
14 Citations2011George Magklaras, Steven Furnell +1 more
The results show that the prototype audit engine has a good potential to provide a valuable insight into the way insider IT misuse incidents manifest on IT systems and can be a valuable complement to forensic investigators ofIT misuse incidents.
IGI Global eBooksBridging the Gap between Employee Surveillance and Privacy Protection
6 Citations2011Lilian Mitrou
A framework of fair practices is suggested which can be used for bridging the gap between the need to provide adequate protection for information systems, while preserving employees’ rights to privacy.
SSRN Electronic JournalProceedings of the 8th International Conference Computer Ethics: Philosophical Enquiry
2 Citations2009Maria Canellopoulou‐Bottis
The book contains the proceedings of the 8th International Conference on Computer Ethics: Philosophical Enquiry 2009, which was held in Corfu Greece, and no less than fifty seven papers are published.