Abstract
We develop a formal nondeterministic game model for secure team composition to counter cyber-espionage and to protect organizational secrets against an attacker who tries to sidestep technical securitymechanisms by offering a bribe to a project team member. The game captures the adversarial interaction between the attacker and the project manager who has a secret she wants to protect but must share with a team of individuals selected from within her organization. Our interdisciplinary work is important in the face of the multipronged approaches utilized by well-motivated attackers to circumvent the fortifications of otherwise well-defended targets.
Original language | English |
---|---|
Article number | 2663499 |
Journal | ACM Transactions on Internet Technology |
Volume | 14 |
Issue number | 2-3 |
DOIs | |
State | Published - 1 Oct 2014 |
Externally published | Yes |
Keywords
- Access control
- Cyber-espionage
- Game theory
- Human factor
- Insider threat
- Management of information security