Abstract:

It is widely recognised that the threat to enterprises from insider activities is increasing, and that significant costs are being incurred. Since insider threat and compromising actions can take a multitude of forms, there is a diverse experience and understanding of what insider threats are, and how to detect or prevent them. We investigate the potential for detection of insider threat activities within a large enterprise environment using monitoring tools centred around the information infrastructure. In this seminar we will review our experiences and lessons learnt from the implementation and trial of the Corporate Insider Threat Detection (CITD) tool in real organizations, not only from a technical perspective, but also from the legal and ethical aspects.

Speaker Bio:

Dr Arnau Erola is a cyber security expert with strong background in data analytics, machine learning, data mining and information privacy. He is currently a Research Fellow at the Cyber Analytics group of Oxford University, working on enterprise security, defence systems and better understanding the cyber-threat landscape. Dr Erola holds a Ph. D., M. Sc. and B.Sc. in Computer Science from the Rovira i Virgili University of Tarragona (URV). He is author of several international journal articles on online privacy, anonymity protocols and intrusion detection mechanisms.