Security - News

A new report on insider attacks against financial organizations, produced by the Secret Service’s National Threat Assessment Center and the Computer Emergency Response Team Coordination Center (CERT/CC) at Carnegie Mellon University’s Software Engineering Institute (SEI), shows that financial gain drives most insider attacks, but that attackers do not fit any common profile. The report, 'Illicit Cyber Activity in the Banking and Finance Sector', analyzes information from 23 insider incidents in the financial sector between 1996 and 2002 that were either investigated by the Secret Service or reported in the news media. Findings from the report further show that losses from insider attacks varied widely from $168 to more than $691 million. Little or no technical knowledge was required to commit most insider attacks, leading the authors to surmise that security policies and business processes are as important as technology for security.

Autor: VK