Insider Threats and New Economy Industries
summary
Insider risk breaks down into three concrete attack types — theft sabotage fraud — with theft dominating recent cases: stolen source code leads to criminal charges (reported outcome: about $10k fine and two years’ jail in a cited case), social engineering often arrives via fake profiles (Facebook removed 4.5 billion Q1 profiles, LinkedIn 7.3M; Twitter estimates 5–15% fake), and romance lures carry malware via innocuous files. Defenses that actually work are practical: training support reporting monitoring, proportionate monitoring only for high‑risk roles, and employee assistance to reduce vulnerability.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 3:14Insider threats overview
- 8:11Intentional insiders motivations
- 13:30Social engineering tactics
- 21:21Insider attack kill chain
- 25:53Case study engineer theft
- 29:04Sabotage by employees
- 34:00Insider threats in R&D
- 34:21Building threat program
- 44:18Q&A
related talks
25mAn Insider Threat What is Social Engineering
20mIntriguing Insider Threat Cases - Make Sure This Doesn't Happen to You!
41mCollaboration Without Data Loss: Keep IP From Leaking to Competitors
48mData-Driven Cyber Indicators of Malicious Insider Threat
31mThe Return of Hacktivism – The Insider
55mDeveloping a Conceptual Model for Insider Threat
41mHacking Humans : Social Engineering Techniques and How to Protect Against Them
43mWhy Source Code Exfiltration Is the Biggest Blind Spot in Insider Threat