Smart Insiders: Exploring the Threat from Insiders Using the Internet-of-Things
Abstract
The Internet-of-Things (IoT) is set to be one of the most disruptive technology paradigms since the advent of the Internet itself. Market research company Gartner estimates that around 4.9 billion connected things will be in use in 2015, and around 25 billion by 2020. While there are substantial opportunities accompanying IoT, spanning from Healthcare to Energy, there are an equal number of concerns regarding the security and privacy of this plethora of ubiquitous devices. In this position paper we approach security and privacy in IoT from a different perspective to existing research, by considering the impact that IoT may have on the growing problem of insider threat within enterprises. Our specific aim is to explore the extent to which IoT may exacerbate the insider-threat challenge for organisations and overview the range of new and adapted attack vectors. Here, we focus especially on (personal) devices which insiders bring and use within their employer's enterprise. As a start to addressing these issues, we outline a broad research agenda to encourage further research in this area.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
There are insider threats that cause unique challenges in the IoT risk assessment process.
“There are insider threats that cause unique challenges in the case of the IoT risk assessment process [16].”
From IoT cyber risk: A holistic analysis of cyber risk assessment frameworks, risk vectors, and risk ranking process (2020) · cites this paper as [16]
Cites
The Internet of Things: A survey
Atzori, L., Iera, A., & Morabito, G. (2010) · Computer Networks · doi:10.1016/j.comnet.2010.05.010 · Cited by 15,613 · see citing works
Internet of Things (IoT): A vision, architectural elements, and future directions
Gubbi, J., Buyya, R., Marusic, S., & Palaniswami, M. (2013) · Future Generation Computer Systems · doi:10.1016/j.future.2013.01.010 · Cited by 12,293 · see citing works
Security, privacy and trust in Internet of Things: The road ahead
Sicari, S., Rizzardi, A., Grieco, L. A., & Coen‐Porisini, A. (2014) · Computer Networks · doi:10.1016/j.comnet.2014.11.008 · Cited by 2,341 · see citing works
On the features and challenges of security and privacy in distributed internet of things
Román, R., Zhou, J., & López, J. (2013) · Computer Networks · doi:10.1016/j.comnet.2012.12.018 · Cited by 1,471 · see citing works
Smart health: A context-aware health paradigm within smart cities
Solanas, A., Patsakis, C., Conti, M., Vlachos, I. S., Ramos, V., Falcone, F., Postolache, O. A., Pérez‐Martínez, P., Pietro, R. D., Perrea, D. N., et al. (2014) · IEEE Communications Magazine · doi:10.1109/mcom.2014.6871673 · Cited by 596 · see citing works
Security and privacy in the Internet of Things: Current status and open issues
Abomhara, M., & Køien, G. M. (2014) · doi:10.1109/prisms.2014.6970594 · Cited by 418 · see citing works
A common language for computer security incidents
Howard, J. D., & Longstaff, T. A. (1998) · doi:10.2172/751004 · Cited by 334 · see citing works
The pursuit of citizens' privacy: a privacy-aware smart city is possible
Martinez-Balleste, A., Perez-martinez, P., & Solanas, A. (2013) · IEEE Communications Magazine · doi:10.1109/mcom.2013.6525606 · Cited by 307 · see citing works
Evolution, Detection and Analysis of Malware for Smart Devices
Suárez‐Tangil, G., Tapiador, J., Lopez, P. P., et al. (2013) · IEEE Communications Surveys & Tutorials · doi:10.1109/surv.2013.101613.00077 · Cited by 250 · see citing works
Understanding Insider Threat: A Framework for Characterising Attacks
Nurse, J. R. C., Buckley, O., Legg, P. A., Goldsmith, M., Creese, S., Wright, G. R. T., & Whitty, M. (2014) · 2014 IEEE Security and Privacy Workshops · doi:10.1109/spw.2014.38 · Cited by 212 · see citing works
Self-citationSmart Grid Security: Threats, Vulnerabilities and Solutions
Aloul, F., Al-Ali, A. R., Al-Dalky, R., Al-Mardini, M., & El-Hajj, W. (2012) · International Journal of Smart Grid and Clean Energy · doi:10.12720/sgce.1.1.1-6 · Cited by 197 · see citing works
Cappelli, D. M., Moore, A. P., & Trzeciak, R. F. (2012) · Addison-Wesley Professional eBooks · Cited by 175 · see citing works
Threat-Based Security Analysis for the Internet of Things
Atamli, A. W., & Martin, A. (2014) · 2014 International Workshop on Secure Internet of Things · doi:10.1109/siot.2014.10 · Cited by 169 · see citing works
Sarkar, K. R. (2010) · Information Security Technical Report · doi:10.1016/j.istr.2010.11.002 · Cited by 154 · see citing works
Insider Threat Prediction Tool: Evaluating the probability of IT misuse
Magklaras, G., & Furnell, S. (2001) · Computers & Security · doi:10.1016/s0167-4048(02)00109-8 · Cited by 150 · see citing works
Automated Insider Threat Detection System Using User and Role-Based Profile Assessment
Legg, P., Buckley, O. E., Goldsmith, M. H., & Creese, S. (2015) · IEEE Systems Journal · doi:10.1109/jsyst.2015.2438442 · Cited by 145 · see citing works
Self-citationDetecting insider threats in a real corporate database of computer usage activity
Senator, T. E., Goldberg, H. G., Memory, A., Young, W. T., Rees, B., Pierce, R., Huang, D., Reardon, M., Bader, D. A., Chow, E., et al. (2013) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/2487575.2488213 · Cited by 132 · see citing works
Thomson, G. (2012) · Network Security · doi:10.1016/s1353-4858(12)70013-2 · Cited by 112 · see citing works
Multi-Domain Information Fusion for Insider Threat Detection
Eldardiry, H., Bart, E., Liu, J., Hanley, J., Price, B., & Brdiczka, O. (2013) · 2013 IEEE Security and Privacy Workshops · doi:10.1109/spw.2013.14 · Cited by 100 · see citing works
Insiders Behaving Badly: Addressing Bad Actors and Their Actions
Pfleeger, S. L., Predd, J. B., Hunker, J., & Bulford, C. (2010) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2009.2039591 · Cited by 91 · see citing works
Guidelines for usable cybersecurity: Past and present
Nurse, J. R. C., Creese, S., Goldsmith, M. H., et al. (2011) · doi:10.1109/css.2011.6058566 · Cited by 79 · see citing works
Self-citationDetection of anomalous insiders in collaborative environments via relational analysis of access logs
Chen, Y., & Malin, B. (2011) · ACM Conference on Data and Application Security and Privacy (CODASPY) · doi:10.1145/1943513.1943524 · Cited by 78 · see citing works
Towards a Conceptual Model and Reasoning Structure for Insider Threat Detection
Legg, P., Moffat, N., Nurse, J. R. C., Happa, J., Agrafiotis, I., Goldsmith, M. H., & Creese, S. (2013) · Kent Academic Repository (University of Kent) · doi:10.22667/jowua.2013.12.31.020 · Cited by 67 · see citing works
Self-citationFit and Vulnerable: Attacks and Defenses for a Health Monitoring Device
Rahman, M., Cărbunar, B., & Banik, M. (2013) · doi:10.48550/arxiv.1304.5672 · Cited by 67 · see citing works
A Review of Bring Your Own Device on Security Issues
Olalere, M., Abdullah, M. T., Mahmod, R., et al. (2015) · SAGE Open · doi:10.1177/2158244015580372 · Cited by 64 · see citing works
Watch and be watched: Compromising all Smart TV generations
Michele, B., & Karpow, A. (2014) · IEEE Consumer Communications and Networking Conference · doi:10.1109/ccnc.2014.6866594 · Cited by 53 · see citing works
Interoperable Privacy-Aware E-Participation within Smart Cities
Patsakis, C., Laird, P., Clear, M., et al. (2015) · Computer · doi:10.1109/mc.2015.16 · Cited by 35 · see citing works
A Security Framework for the Internet of Things Based on Public Key Infrastructure
Hong, N. (2013) · Advanced materials research · doi:10.4028/www.scientific.net/amr.671-674.3223 · Cited by 28 · see citing works
Unsupervised Ensemble Based Learning for Insider Threat Detection
Parveen, P., McDaniel, N., Hariharan, V., Thuraisingham, B. M., & Khan, L. R. (2012) · International Conference on Social Computing · doi:10.1109/socialcom-passat.2012.106 · Cited by 22 · see citing works
Eavesdropping near‐field contactless payments: a quantitative analysis
Diakos, T. P., Briffa, J. A., Brown, T., et al. (2013) · The Journal of Engineering · doi:10.1049/joe.2013.0087 · Cited by 20 · see citing works
A physical overlay framework for insider threat mitigation of power system devices
Formby, D., Jung, S. S., Walters, S., et al. (2014) · IEEE International Conference on Smart Grid Communications (SmartGridComm) · doi:10.1109/smartgridcomm.2014.7007774 · Cited by 11 · see citing works
Choi, J., Chun, S. A., & Cho, J.-W. (2014) · Conference on Digital Government Research · doi:10.1145/2612733.2612756 · Cited by 10 · see citing works
Reflecting on the Ability of Enterprise Security Policy to Address Accidental Insider Threat
Buckley, O. E., Nurse, J. R. C., Legg, P., et al. (2014) · Workshop on Socio-Technical Aspects in Security and Trust (STAST) · doi:10.1109/stast.2014.10 · Cited by 10 · see citing works
Self-citationRange Extension Attacks on Contactless Smart Cards
Oren, Y., Schirman, D., & Wool, A. (2013) · Lecture notes in computer science · doi:10.1007/978-3-642-40203-6_36 · Cited by 7 · see citing works
Exploring the Risks to Identity Security and Privacy in Cyberspace
Nurse, J. R. C. (2015) · XRDS Crossroads The ACM Magazine for Students · doi:10.1145/2730912 · Cited by 7 · see citing works
Self-citation
Flagged first, then by citations
Cited by
Sorted by citations
Securing internet of medical things systems: limitations, issues and recommendations
Yaacoub, J.-P. A., Noura, M., Noura, H. N., Salman, O., Yaacoub, E., Couturier, R., & Chehab, A. (2020) · Future Generation Computer Systems · doi:10.1016/j.future.2019.12.028 · Cited by 308 · see citing works
Kandasamy, K., Srinivas, S., Achuthan, K., & Rangan, V. P. (2020) · EURASIP Journal on Information Security · doi:10.1186/s13635-020-00111-0 · Cited by 160 · see citing works
Malicious Insider Attack Detection in IoTs Using Data Analytics
Khan, A. Y., Latif, R., Latif, S., Tahir, S., Batool, G., & Saba, T. (2020) · IEEE Access · doi:10.1109/access.2019.2959047 · Cited by 116 · see citing works
- Authors
- Nurse, J. R. C., Erola, A., Agrafiotis, I., Goldsmith, M., & Creese, S.
- Affiliations
- University of Oxford (GB)
- Venue
- 2015 International Workshop on Secure Internet of Things (SIoT)
- Publisher
- IEEE
- Published
- 2015-09
- Pages
- 5-14
- OpenAlex
- W2291432160
- Cited by
- 47
- References
- 35
- Citations by year
- 2026: 1 · 2025: 2 · 2024: 1 · 2023: 6 · 2022: 5 · 2021: 6 · 2020: 6 · 2019: 7 · 2018: 8 · 2017: 2 · 2016: 3
- FWCI
- 3.77
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- International Workshop Secure Internet Things (publishedVersion)
- Kent Academic Repository (University of Kent) (acceptedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- insider threats, Internet of Things, Internet of Things security, IoT privacy, attack vectors, enterprise security, ubiquitous devices
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
