Monday, November 4, 2019

Threat Agents: Insider Threats: Motivations


Insider threat actors can be motivated by different factors. I try to summarize possible motivations in the following table, and it is not a complete list.

Also the attackers can gain access to a workstation of an employee through mechanism like phishing, and if there are controls to prevent insider threats, the damage that could be done by this attacker can be minimized.

Threat Agent
motivated by
Possible Motivations
InsiderGovernment
Patriotism, Blackmail, Financial gain, Legal gain, Psychological manipulation
InsiderCriminal Organization
Blackmail, Financial gain, Psychological manipulation
InsiderCriminal Organization - Criminal Community
Blackmail, Financial gain, reputation on sharing with community
InsiderCriminal Organization - Hacktivist groups
supporting a ideological cause, reputation on sharing with community, guilt/remorse
InsiderCriminal Organization - Terrorists
supporting a ideological cause, reputation in a like-minded community,
InsiderCompetitor
Financial gain
InsiderHacker
Financial gain, Blackmail
Insiderfamily/friend
Financial gain, helping family/friend from difficult situation
Insiderown-self
revenge, remorse/guilt, financial reward, patriotism, ideological cause, fame
Criminal OrganizationGovernment
Financial gain, blackmail, patriotism
Criminal OrganizationCompetitor
Financial gain
HacktivistGovernment
Manipulation of facts

No comments: