Insider Computer Fraud: An In-depth Framework for Detecting and Defending against Insider IT Attacks-优快云博客

本文链接：https://blog.youkuaiyun.com/topmvp/article/details/3907711

本书提供了一种实用框架，用于识别、衡量、监控及控制与内部威胁相关的风险。它不仅分析了应用程序或系统相关的风险，还展示了应用与IT基础设施组件之间的相互关系。作者探讨了风险、控制、威胁及行动计划之间的共生关系，以增强整体信息安全治理流程。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

An organizations employees are often more intimate with its computer system than anyone else. Many also have access to sensitive information regarding the company and its customers. This makes employees prime candidates for sabotaging a system if they become disgruntled or for selling privileged information if they become greedy. Insider Computer Fraud: An In-depth Framework for Detecting and Defending against Insider IT Attacks presents the methods, safeguards, and techniques that help protect an organization from insider computer fraud.

Drawing from the authors vast experience assessing the adequacy of IT security for the banking and securities industries, the book presents a practical framework for identifying, measuring, monitoring, and controlling the risks associated with insider threats. It not only provides an analysis of application or system-related risks, it demonstrates the interrelationships that exist between an application and the IT infrastructure components it uses to transmit, process, and store sensitive data. The author also examines the symbiotic relationship between the risks, controls, threats, and action plans that should be deployed to enhance the overall information security governance processes.

Increasing the awareness and understanding necessary to effectively manage the risks and controls associated with an insider threat, this book is an invaluable resource for those interested in attaining sound and best practices over the risk management process.

http://rapidshare.com/files/119213217/1420046594.rar