[FRIAM] Insider mapping

[Joost Rekveld]

quote from the article:

"The algorithm, dubbed the Potential Insider Threat Detection  
Algorithm, is a "promising tool" for aiding IT departments in  
narrowing down the list of subjects in a breach investigation, the  
researchers said. However, the experimental analysis of Enron's email  
did not correctly identify the top managers who were involved in the  
company's fraud."

so the method was developed, tested, and it failed.
right.

anyway it seems that according to these people anyone with  
'excentric' interests should be labeled as a threat: obscure hobbies,  
knowledge of foreign languages are all signs of a potential threat ?
great ! seems these people work in very boring companies indeed !

ciao,

Joost.




On  6 Mar, 2008, at 3:06 AM, James Steiner wrote:

> Sounds like their whole concept is flawed--that an employee who keeps
> secrets from the workplace is a potentially bad employee? Wouldn't the
> ability to compartmentalize work email topics and personal email
> topics be a sign of a *good* employee?
>
> ~~James
> _________________
> www.turtlezero.com
>
> On Wed, Mar 5, 2008 at 8:35 PM, Joseph Dalessandro <joe at nan0.com>  
> wrote:
>> Mining of email data could help companies spot dangerous employees
>>  before they do damage
>>
>>  http://www.darkreading.com/document.asp?doc_id=147627
>>
>>  Three researchers at the Air Force Institute of Technology -- James
>>  Okolica, Gilbert Peterson, and Robert Mills -- have published a  
>> paper
>>  that outlines an algorithm for mining email data and identifying
>>  patterns of transmission that might tell managers when employees are
>>  keeping a secret.
>>
>>  ============================================================
>>  FRIAM Applied Complexity Group listserv
>>  Meets Fridays 9a-11:30 at cafe at St. John's College
>>  lectures, archives, unsubscribe, maps at http://www.friam.org
>>
>
> ============================================================
> FRIAM Applied Complexity Group listserv
> Meets Fridays 9a-11:30 at cafe at St. John's College
> lectures, archives, unsubscribe, maps at http://www.friam.org