Résumé: The authors describe a behavioral theory of the dynamics of insider-threat risks. Drawing on data related to information technology security violations and on a case study created to explain the dynamics observed in that data, the authors constructed a system dynamics model of a theory of the development of insider-threat risks and conducted numerical simulations to explore the parameter and response spaces of the model. By examining several scenarios in which attention to events, increased judging capabilities, better information, and training activities are simulated, the authors theorize about why information technology security effectiveness changes over time.

Langue: Anglais
Thème Informatique

Mots clés:
Signal detection theory
Risk
Insider Threat
System dynamics modeling
Behavioral theory
Judgment and decision making