Difference between revisions of "AFSecurity Seminar"

Revision as of 13:55, 11 March 2014

The Insider Threat

Date: 26 March 2014.

Location: Meeting room Awk (room 3118), Ole-Johan Dahls hus (IfI).

Agenda

14:00h Welcome at IfI

14:15h Invited talk

SPEAKER: Ronald Barø, PST

TITLE: The Insider Threat: Can we trust our colleagues?

ABSTRACT: The insider threat leads to significant risk for most organizations. An insider has a huge advantage over external people with respect to carrying out malicious acts. The insider is authorized for access and can therefore bypass many security controls designed to prevent unauthorized access. Mechanisms such as firewalls, intrusion detection systems, and electronic access control to buildings are implemented primarily to defend against external threats.

Insiders are not only aware of the critical assets, policies, procedures, and technology used in their organizations, but also of the vulnerabilities. Furthermore, an insider has the opportunity to choose the best time to commit a malevolent act. Furthermore, the severity of insider malicious activity may be significantly amplified, if assisted by a team of highly sophisticated and well-resourced outsiders. Regardless of motivation, in a worst case scenario, the malicious insider can potentially jeopardize the lives of innocent people.

This talk discusses the potential risk of insider threats, and possible approaches for controlling and reducing insider threats.

SPEAKER BIO: Ronald Barø works as a security advisor at the Norwegian Police Security Service (PST) in Oslo. He holds a Master's degree in Security and Risk Management from the University of Leicester, and a Bachelor's degree in Organisation and Management from Lillehammer University College.

15:00h Discussion