insider hacking: applying situational crime prevention to a new white-collar crime

12
Insider Hacking: Applying Situational Crime Prevention to a New White-Collar Crime Mark Stockman [email protected]

Upload: mark-stockman

Post on 28-Nov-2014

206 views

Category:

Internet


0 download

DESCRIPTION

Insider hacking consists of cybercrimes against entities initiated by individuals who hold a legitimate trust relationship with that entity. The responsibility of preventing insider hacking falls to information technology (IT) or information security departments staffed by computing professionals. The same can be said about research into the prevention of insider hacking, computing centric academics/professionals do the work. While this seems logical, established behavioral methods for reducing crime have largely been ignored. In this paper, the author places insider hacking into the context of the white-collar criminology literature then pulls from crime science, applying a situational crime prevention model to inform future research on insider hacking.

TRANSCRIPT

Page 1: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime

Insider Hacking: Applying Situational Crime Prevention to a New White-Collar Crime

Mark [email protected]

Page 2: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime
Page 3: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime

Stockman, Holt, Mackey, & Holiday, 2013 Cyberdeviance Study

Ability

Interest

Morality

Deterrence

0

5

10

15

20

25

30

35

40 “I’ve never had the need, skillset, or knowledge”

“Been too busy to learn”

“Number 1 it is wrong. Number 2 I would have no idea where to start”

Page 4: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime

Clarke, R. V., & Eck, J. E. (2005). Crime Analysis for Problem Solvers.

Page 5: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime

Prevention

Page 6: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime

White-Collar

1940

1970

2003

Sutherland

Edelhertz

Felson

Page 7: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime
Page 8: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime
Page 9: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime

Increase Effort

former employeesnot their own account

remote access

Page 10: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime

Increase Risk of Detection

not their own accounttechnical employees

conceal actions

Page 11: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime

Reduce Provocation

other conflictsdecline in performancetardiness/absenteeism

Page 12: Insider hacking: Applying Situational Crime Prevention to a New White-collar Crime

Next steps…..

[email protected]