Insider threat is a well-known phenomenon that is considered by most to be the greatest threat to any information security environment. Access control measures attempt to mitigate much of this through physical and software-based means. In the case of environments where industrial control systems (ICS) are prevalent, this threat is enhanced by the unique capability in such situations to cause physical harm to employees, the processes they manage and the plant itself, as well as potentially damaging events to the environment and the population. This research considers insider threat modeling, user behaviors, and mitigation. Much of the literature is focused on IT environments, we will focus on the unique role insider threat actors play in ICS environments.

Join for free to read