The Community for Technology Leaders
2012 IEEE Symposium on Security and Privacy Workshops (2013)
San Francisco, CA, USA USA
May 23, 2013 to May 24, 2013
ISBN: 978-1-4799-0458-7
pp: 90-97
ABSTRACT
The insider threat is a prime security concern for government and industry organizations. As insider threat programs come into operational practice, there is a continuing need to assess the effectiveness of tools, methods, and data sources, which enables continual process improvement. This is particularly challenging in operational environments, where the actual number of malicious insiders in a study sample is not known. The present paper addresses the design of evaluation strategies and associated measures of effectiveness; several quantitative/statistical significance test approaches are described with examples, and a new measure, the Enrichment Ratio, is proposed and described as a means of assessing the impact of proposed tools on the organization's operations.
INDEX TERMS
assessment, insider threat, evaluation, validation, metrics
CITATION
Frank L. Greitzer, Thomas A. Ferryman, "Methods and Metrics for Evaluating Analytic Insider Threat Tools", 2012 IEEE Symposium on Security and Privacy Workshops, vol. 00, no. , pp. 90-97, 2013, doi:10.1109/SPW.2013.34
102 ms
(Ver )