Cited by 47Information and Cyber SecurityUser Authentication and Security SystemsAI and HR Technologies

Psychosocial Modeling of Insider Threat Risk Based on Behavioral and Word Use Analysis

Greitzer, Kangas, Noonan, Brown, Ferryman·2013·e-Service Journal

Abstract

In many insider crimes, managers and other coworkers observed that the offenders had exhibited signs of stress, disgruntlement, or other issues, but no alarms were raised. Barriers to using such psychosocial indicators include the inability to recognize the signs and the failure to record the behaviors so that they can be assessed. A psychosocial model was developed to assess an employee’s behavior associated with an increased risk of insider abuse. The model is based on case studies and research literature on factors/correlates associated with precursor behavioral manifestations of individuals committing insider crimes. A complementary Personality Trait modeling approach was developed based on analysis to derive relevant personality characteristics from word use. Several implementations of the psychosocial model were evaluated by comparing their agreement with judgments of human resources and management professionals; the personality trait modeling approach was examined using email samples. The paper also briefly discusses privacy/ethical issues in behavioral monitoring for insider threat detection and a vision for operational deployment of an approach that incorporates these models into a set of management tools for identifying employees who pose a greater insider threat.

Integrity signals

Registry

Crossref · 10.2979/eservicej.9.1.106

Cites

54 of 54 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Greitzer and colleagues' behavioural modelling demonstrates that psychosocial indicators frequently precede insider incidents but require contextual human interpretation.

    “Greitzer and colleagues' behavioural modelling demonstrates that psychosocial indicators frequently precede insider incidents but require contextual human interpretation [24]”
  • The peer-reviewed literature documents a correlation between financial distress and susceptibility to insider behaviour, whether through direct motivation for financial gain or through increased vulnerability to recruitment.

    “The peer-reviewed literature documents a correlation between financial distress and susceptibility to insider behaviour, whether through direct motivation for financial gain or through increased vulnerability to recruitment [24, 46].”

Cites

Flagged first, then by citations

3 of the 57 references couldn’t be matched to a known paper.

Cited by

Sorted by citations

Authors
Greitzer, Kangas, Noonan, Brown, & Ferryman
Venue
e-Service Journal
Published
2013
Volume
9
Issue
1
Pages
106
ISSN
1528-8226 (ISSN-L)
OpenAlex
W2082478562
Cited by
47
References
57
Citations by year
2026: 5 · 2025: 4 · 2024: 1 · 2023: 5 · 2022: 2 · 2021: 2 · 2020: 3 · 2019: 8 · 2018: 4 · 2017: 3 · 2016: 7 · 2015: 1 · 2013: 2
FWCI
9.73
Type
journal article
Language
en
Open access
closed
Locations
e-Service Journal (publishedVersion)
Topics
  • Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
  • Physical Sciences › Computer Science › Information Systems › User Authentication and Security Systems
  • Social Sciences › Business, Management and Accounting › Organizational Behavior and Human Resource Management › AI and HR Technologies
Keywords
insider threats, psychosocial risk assessment, behavioral indicators, email analysis, behavioral monitoring, privacy and ethics

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review