insider hacking: applying situational crime prevention to a new white-collar crime
DESCRIPTION
Insider hacking consists of cybercrimes against entities initiated by individuals who hold a legitimate trust relationship with that entity. The responsibility of preventing insider hacking falls to information technology (IT) or information security departments staffed by computing professionals. The same can be said about research into the prevention of insider hacking, computing centric academics/professionals do the work. While this seems logical, established behavioral methods for reducing crime have largely been ignored. In this paper, the author places insider hacking into the context of the white-collar criminology literature then pulls from crime science, applying a situational crime prevention model to inform future research on insider hacking.TRANSCRIPT
Insider Hacking: Applying Situational Crime Prevention to a New White-Collar Crime
Mark [email protected]
Stockman, Holt, Mackey, & Holiday, 2013 Cyberdeviance Study
Ability
Interest
Morality
Deterrence
0
5
10
15
20
25
30
35
40 “I’ve never had the need, skillset, or knowledge”
“Been too busy to learn”
“Number 1 it is wrong. Number 2 I would have no idea where to start”
Clarke, R. V., & Eck, J. E. (2005). Crime Analysis for Problem Solvers.
Prevention
White-Collar
1940
1970
2003
Sutherland
Edelhertz
Felson
Increase Effort
former employeesnot their own account
remote access
Increase Risk of Detection
not their own accounttechnical employees
conceal actions
Reduce Provocation
other conflictsdecline in performancetardiness/absenteeism
Next steps…..