Abstract-Providing an uninterruptable self-protection mechanism that is totally integrated into and inseparable from the computing system that is being protected ensures a complete, affordable, and assured compliance with system security audits. This paper presents the Insider Threat Security Architecture (ITSA) and describes its various components. It presents a security scenario where privileged users can compromise the system that they protect and how that same scenario can be mitigated under the ITSA framework. It also describes the foundational premise that this framework is built upon. It draws the distinction between the proposed approach and the traditional most common approach to providing system protection. It emphasizes the unquestionable importance of making the self-protection mechanism as an integral part of the core components of the system that is being protected.
The ITSA framework, shown as figure 9, is built on the foundational notion that any protection mechanism must be totally integrated into, and inseparable from the system that is being protected in such a way that the protection process cannot be interrupted REF .
The Insider Threat Security Architecture: A Framework for an Integrated, Inseparable, and Uninterrupted Self-Protection Mechanism
2009 International Conference on Computational Science and Engineering
2009 International Conference on Computational Science and Engineering
Computer Science