Secure Team Composition to Thwart Insider Threats and Cyber-Espionage
Abstract
We develop a formal nondeterministic game model for secure team composition to counter cyber-espionage and to protect organizational secrets against an attacker who tries to sidestep technical security mechanisms by offering a bribe to a project team member. The game captures the adversarial interaction between the attacker and the project manager who has a secret she wants to protect but must share with a team of individuals selected from within her organization. Our interdisciplinary work is important in the face of the multipronged approaches utilized by well-motivated attackers to circumvent the fortifications of otherwise well-defended targets.
Document Details
- Document Type
- Pub Defense Publication
- Publication Date
- Oct 28, 2014
- Source ID
- 10.1145/2663499
Entities
People
- Aron Laszka
- Benjamin N. Johnson
- Jens Grossklags
- Pascal Schöttle
- Rainer Böhme
Organizations
- Carnegie Mellon University
- Division of Computing and Communication Foundations
- Office of Naval Research
- Pennsylvania State University
- University of Münster