Affected Devices and Communication Channels in Insider Incidents
Abstract
Affected Device Any system that was damaged, used, or otherwise modified during the course of the incident. Affected devices may be a target of the attack, incidentally affected by the attack, or modified after the attack for concealment. A single incident can affect 1 or more devices. All incidents in the CERT Insider Threat Corpus are technical insiders, so at least 1 device will be affected.
Document Details
- Document Type
- Technical Report
- Publication Date
- Apr 01, 2020
- Accession Number
- AD1110352
Entities
People
- Alex Pickering
Organizations
- Carnegie Mellon University