Share these talks and lectures with your colleagues
Invite colleaguesPractice paper
Access control, identity management and the insider threat
Journal of Airport Management,
10
(2),
180-199
(2016)
Abstract
The detection of insider threats before catastrophic events occur continues to plague many industries, and the aviation industry is under particular pressure to detect possible infiltration by terrorists and their sympathisers posing as credible workers. This paper outlines a method to incorporate system dynamics into identity and access management systems designs to detect the possibility of an insider threat. The research results show that when specific policy-based rules were applied to the access control system and forensics were applied to the resulting data, it was possible to detect unusual behaviours that would have otherwise gone undetected. The practical implication of this research can lead to the development of an operational framework whereby access control data could be analysed in real time to detect and suggest insider threat signatures.
Keywords: access control; insider threat; system dynamics; systems engineering
The full article is available to subscribers to the journal.
Author's Biography
Jonathan Branker received his BS degree in computer science from New Jersey Institute of Technology, Newark, NJ, his MS in systems engineering from the George Washington University, Washington, DC, and is a PhD candidate in the school of engineering and applied science, department of engineering management and systems engineering.
Tim Eveleigh is an adjunct professor of engineering management and systems engineering at the George Washington University and an INCOSE certified systems engineering professional. Dr Eveleigh has a 30-year parallel career as an Air Force Reserve intelligence officer and developmental engineer focused on command and control integration. E-mail: Eveleigh@gwu.edu.
Thomas H. Holzer is an adjunct professor of engineering management and systems engineering at the George Washington University. He was the director, engineering management office at the National Geospatial-Intelligence Agency, with over 35 years’ experience in systems engineering and leading large-scale information technology programmes. E-mail: Holzert@gwu.edu.
Shahryar Sarkani is an adjunct professor in the department of engineering management and systems engineering at George Washington University. He has over 20 years of experience in field of software engineering. E-mail: Emseor2003@yahoo.com.
