Can we really stop malicious insiders?

Detection of insiders committing fraud requires broad event collection, robust analytics, and mechanisms that remove false positives.

In terms of malicious insiders committing fraud, can anything "really" be done?

There is a popular quote from the 2003 version of the film The Italian Job that comes to mind when I read this question. "I trust everyone. It's the devil inside them I don't trust." The threat from insiders, being fraudsters or otherwise, has always been there - certainly before security companies started talking about them. What has changed, and this is in direct response to the question, is that - yes, there are things that can be done, many in fact.

First, let's look at the advantages insiders have: Trust and access. Consider a college intern, Sam, working for a large financial organization. Sam's job requires him to enter payees into the corporate database, and to do this job he his granted access to the database. Sam eventually realizes that his access doesn't just allow him to create payees, but also pay those payees because of flawed access controls, lack of segregation of duties, poor policies, etc. Sam begins generating false payees associated with a PO Box he set up, and then has checks sent to that PO Box.

This is pretty low tech - not likely to make its way into the newest James Bond film. But Sam's activities are also representative of how many fraudulent, insider incidents are perpetrated using activity that stays below the radar of most security controls. What is needed to address this are solutions designed to do just that - detect suspicious activity carefully concealed as legitimate, normal, and otherwise boring.

Detecting fraudulent, insider activity requires a combination of network and data security. While firewalls, routers, VPNs, and IPS solutions provide tremendous value they are just the peanut butter. Similarly, while applications, database activity monitoring (DAM) solutions, and identity solutions provide valuable insight, they are only the chocolate. However, by putting network and data security solutions together under one monitoring umbrella with SIEM (Security Information and Event Management) you have a delicious treat, and a comprehensive approach to mitigating fraudulent, insider activity.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags fraudinsider threats

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Brian Contos

Network World
Show Comments

Cool Tech

Toys for Boys

Family Friendly

Stocking Stuffer

SmartLens - Clip on Phone Camera Lens Set of 3

Learn more >

Christmas Gift Guide

Click for more ›

Brand Post

Bitdefender 2019

This Holiday Season, protect yourself and your loved ones with the best. Buy now for Holiday Savings!

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Michael Hargreaves

Microsoft Office 365/Dell XPS 15 2-in-1

I’d recommend a Dell XPS 15 2-in-1 and the new Windows 10 to anyone who needs to get serious work done (before you kick back on your couch with your favourite Netflix show.)

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?