Deakin University
Browse

File(s) under permanent embargo

Segregation-of-duties conflicts in the insider threat landscape: an overview and case study

Version 3 2024-06-17, 15:27
Version 2 2024-06-04, 02:38
Version 1 2015-09-30, 15:55
conference contribution
posted on 2024-06-17, 15:27 authored by S Ballesteros, Lei PanLei Pan, Lynn BattenLynn Batten, Gang LiGang Li
Many insider attacks originate from misuse of privileges granted by organizations to their internal employees, contractors or third-party service providers. A fundamental means of ensuring that conflicts of privilege cannot occur is to segregate role allocations in order to ensure that no individual can perform a task from beginning to end. In this paper, we provide background on insider attacks in connection with conflicts in Segregation of Duties, and present the current strategies for preventing and detecting such conflicts. To illustrate how a conflict can occur and what can result, we present an in-depth case study demonstrating a conflict in Segregation of Dutiesin an organization, along with the consequent fraud, and we discuss how it might have been prevented.

History

Pagination

367-370

Location

Hong Kong

Start date

2015-04-19

End date

2015-04-20

ISSN

2352-5398

ISBN-13

9789462520660

Language

eng

Publication classification

E Conference publication, E1 Full written paper - refereed

Copyright notice

2015, The Authors

Editor/Contributor(s)

Shaw P

Title of proceedings

ERMM 2015: Proceedings of the 2015 International Conference on Education Reform and Modern Management

Event

Education Reform and Modern Management. Conference (2nd : 2015 : Hong Kong)

Publisher

Atlantis Press

Place of publication

Amsterdam, The Netherlands