论文标题
有关内幕威胁的系统文献综述
A systematic literature review on insider threats
论文作者
论文摘要
内幕威胁是最关注的网络安全问题，它被广泛使用的安全解决方案解决。尽管该领域有几个科学出版物，但是根据我们的创新研究分类和结构分类法提案，我们主张提供有关内幕威胁和辩护措施的更多信息。在采用当前的基础理论方法进行彻底的文献评估时，我们的分类目标是组织内幕威胁研究中的知识。除了对检测内幕威胁的主要研究分析外，该研究的主要目标是开发当前类型的内部人员，访问水平，背后的动机，内部人士分析，安全性，安全性和他们用来攻击的方法的分类。这包括使用机器学习算法，行为分析，检测和评估方法。此外，还分析了与内部攻击有关的实际事件。
Insider threats is the most concerned cybersecurity problem which is poorly addressed by widely used security solutions. Despite the fact that there have been several scientific publications in this area, but from our innovative study classification and structural taxonomy proposals, we argue to provide the more information about insider threats and defense measures used to counter them. While adopting the current grounded theory method for a thorough literature evaluation, our categorization's goal is to organize knowledge in insider threat research. Along with an analysis of major recent studies on detecting insider threats, the major goal of the study is to develop a classification of current types of insiders, levels of access, motivations behind it, insider profiling, security properties, and methods they use to attack. This includes use of machine learning algorithm, behavior analysis, methods of detection and evaluation. Moreover, actual incidents related to insider attacks have also been analyzed.
