An Insider Threat Neutralization Mitigation Model Predicated On Cognitive Dissonance (ITNMCD)

Q3 Social Sciences South African Computer Journal Pub Date : 2015-07-11 DOI:10.18489/SACJ.V56I1.263
Keshnee Padayachee
{"title":"An Insider Threat Neutralization Mitigation Model Predicated On Cognitive Dissonance (ITNMCD)","authors":"Keshnee Padayachee","doi":"10.18489/SACJ.V56I1.263","DOIUrl":null,"url":null,"abstract":"The insider threat concern is a complex issue, as the problem domain intersects the social, technical and socio-technical dimensions. Consequently, counteracting the insider threat involves influencing the insider’s perceptions and behaviour in order to ensure compliance. When an individual’s actions and beliefs are incongruent, this induces a phenomenon known as cognitive dissonance. In order to reduce this dissonance, individuals are self-motivated either to change their behaviours or beliefs, or to rationalize their behaviour. Neutralization is a technique used by criminals to rationalize maleficence. In terms of the insider threat, it has been proposed that if the justifications for committing an offence are eliminated, then the insider is less likely to commit the offence. This process is known as neutralization mitigation. The research reported on here proposes that inducing cognitive dissonance may be a means of mitigating the neutralizations that the insider may use to justify maleficence. To integrate these concepts into a pragmatic implementable solution the Insider Threat Neutralization Mitigation model predicated on Cognitive Dissonance (ITNMCD) is proposed. A proof-of-concept was developed and the model concept was evaluated using the design science method.","PeriodicalId":55859,"journal":{"name":"South African Computer Journal","volume":"56 1","pages":"50-79"},"PeriodicalIF":0.0000,"publicationDate":"2015-07-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"9","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"South African Computer Journal","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.18489/SACJ.V56I1.263","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"Social Sciences","Score":null,"Total":0}
引用次数: 9

Abstract

The insider threat concern is a complex issue, as the problem domain intersects the social, technical and socio-technical dimensions. Consequently, counteracting the insider threat involves influencing the insider’s perceptions and behaviour in order to ensure compliance. When an individual’s actions and beliefs are incongruent, this induces a phenomenon known as cognitive dissonance. In order to reduce this dissonance, individuals are self-motivated either to change their behaviours or beliefs, or to rationalize their behaviour. Neutralization is a technique used by criminals to rationalize maleficence. In terms of the insider threat, it has been proposed that if the justifications for committing an offence are eliminated, then the insider is less likely to commit the offence. This process is known as neutralization mitigation. The research reported on here proposes that inducing cognitive dissonance may be a means of mitigating the neutralizations that the insider may use to justify maleficence. To integrate these concepts into a pragmatic implementable solution the Insider Threat Neutralization Mitigation model predicated on Cognitive Dissonance (ITNMCD) is proposed. A proof-of-concept was developed and the model concept was evaluated using the design science method.
查看原文
分享 分享
微信好友 朋友圈 QQ好友 复制链接
本刊更多论文
基于认知失调的内部威胁中和缓解模型
内部威胁是一个复杂的问题,因为问题领域涉及社会、技术和社会技术维度。因此,应对内部人威胁涉及影响内部人的看法和行为,以确保合规。当一个人的行为和信念不一致时,就会产生一种被称为认知失调的现象。为了减少这种不和谐,个体会自我激励,要么改变他们的行为或信仰,要么使他们的行为合理化。“中和”是罪犯用来使犯罪行为合理化的一种手段。就内部人威胁而言,有人提出,如果犯罪的理由被消除,那么内部人就不太可能犯罪。这个过程被称为中和缓解。这里报道的研究提出,诱导认知失调可能是一种减轻内部人可能用来证明恶意行为的中和行为的手段。为了将这些概念整合到一个实用的可实现的解决方案中,提出了基于认知失调的内部威胁中和缓解模型(ITNMCD)。利用设计科学方法进行了概念验证,并对模型概念进行了评估。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 去求助
来源期刊
South African Computer Journal
South African Computer Journal Social Sciences-Education
CiteScore
1.30
自引率
0.00%
发文量
10
审稿时长
24 weeks
期刊介绍: The South African Computer Journal is specialist ICT academic journal, accredited by the South African Department of Higher Education and Training SACJ publishes research articles, viewpoints and communications in English in Computer Science and Information Systems.
期刊最新文献
Virtual learner experience (VLX) Editorial: A new era for SACJ Obituary – Conrad Mueller The Influence of Change Management Process on Cloud Transitioning Online Platform Privacy Policies
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
已复制链接
已复制链接
快去分享给好友吧!
我知道了
×
扫码分享
扫码分享
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1