Insider Breaches

Fast Facts

Gramm-Leach-Bliley Act 15 USC, Subchapter II, Sec. 6821-6827 Fraudulent Access to Financial Information

Wireless worries?

Internet Wake-up Call:Are Financial Institutions Ready for Cyber Terrorists?

Security Statistics

Network security in 2002

Do you know that at least 50% of all respondents experienced insider security breaches related to the unauthorized installation of computing tools, misuse of company resources and abuse of access controls deliberate or accidental. See the statistics...

Impact of Insider Breaches. Click here to see...

Methodology for defining Security Strategy: A Roadmap

Gramm-Leach-Bliley Act 15 USC, Subchapter I, Sec. 6801-6809 Disclosure of Nonpublic Personal Inofrmation

Insider Breaches

If the name Timothy Lloyd doesn’t send shivers up your spine, it should. Timothy Lloyd is to insider security as Kevin Mitnick is to social engineering and David L. Smith is to viruses. In one of the costliest acts of insider sabotage in recent memory, Lloyd was convicted in May of causing an estimated $12 million in damages to Omega Engineering, his former employer. Back in 1996, Lloyd found out he was about to be fired, so he planted a logic bomb that systematically erased all of Omega’s contracts and the proprietary software used by the company’s manufacturing tools. Lloyd’s act of insider cyberterrorism cost Omega its competitive position in the electronics manufacturing market. At Lloyd’s trial, plant manager Jim Ferguson said, “We will never recover.” .The Information Security survey confirms what previous studies (including our own) have been saying for years: The Timothy Lloyds of the world represent at least as much risk to corporate assets as external crackers and virus writers. In many ways, insiders present a far greater risk than outsiders do. Insider cybercrime is harder to quantify and counteract. It’s not purely a “bits and bytes” problem, but one that involves human psychology and complicated workplace dynamics. And the problem is getting worse, not better. While the media tends to focus on “sexy” cyberattacks such as denial-of-service, buffer overflows and Web defacements, the frequency of these attacks pale by comparison to insider access control breaches, software/hardware misuse and abuse of Internet use privileges.