MIST 2014 - 6th International Workshop on Managing Insider Security Threats

During the past two decades, information security technology developments have been mainly concerned with intrusion detection to prevent unauthorized attacks from outside the network.
This includes hacking, virus propagation, spyware and more. However, according to a recent Gartner Research Report, information leaks have drastically increased from insiders who are legally authorized to access corporate information.
The unauthorized leak of critical or proprietary information can cause significant damage to corporate image and reputation, perhaps even weakening its competitiveness in the marketplace. On a larger scale, government and public sectors may suffer competitive loss to other nations due to an internal intelligence breach. While the leaking of critical information by insiders has a lower public profile than that of viruses and hacker attacks, the financial impact and loss can be just as devastating.
The objective of this workshop is to showcase the most recent challenges and advances
in security and cryptography technologies and management systems for preventing information breaches by insiders. The workshop promotes state-of-the-art research, surveys and case analyses of practical significance. Physical, managerial, and technical countermeasures will be covered in the context of an integrated security management system that protects critical cyber-infrastructure against unauthorized internal attack.
We expect that this workshop will be a trigger for further research and technology improvements related to this important subject.
TOPICS
-Theoretical foundations and algorithms for addressing insider threats
-Insider threat assessment and modeling
-Security and cryptography technologies to prevent, detect and predict insider threats
-Cryptographic protocols against insider threats
-Validating the trustworthiness of staff
-Post-insider threat incident analysis
-Data breach modeling and mitigation techniques
-Registration, authentication and identification
-Certification and authorization
-Database security
-Device control system
-Digital forensic system
-Fraud detection
-Network access control system
-Intrusion detection
-Keyboard information security
-Information security governance
-Information security management systems
-Risk assessment and management
-Log collection and analysis
-Trust management
-IT compliance (audit)
-Continuous auditing
-Corporate ethics, accountability and integrity
-Decision-making modeling and process
Workshop Organization
## Workshop Organizers
Ilsun You (Korean Bible University, Korea)
Young-guk Ha (Konkuk University, Korea)
## Advisory Committee
Pankoo Kim (Chosun University, Korea)
Kyung Hyun Rhee (Pukyung National University, Korea)
Kouichi Sakurai (Kyushu University, Japan)
Kangbin Yim (Soonchunhyang University, Korea)
## Program Committee Members
Benjamin Aziz (University of Portsmouth, UK)
Pandu Rangan Chandrasekaran (IIT Madras, India)
Xiaofeng Chen (Xidian University, China)
William R. Claycomb (Carnegie Mellon University, USA)
Ugo Fiore (Seconda Universita' di Napoli, Italy)
Steven Furnell (Plymouth University, UK)
Shuyuan Mary Ho (Florida State University, USA)
Xinyi Huang (Fujian Normal University, China)
Alex D. Kent (Los Alamos National Laboratory, USA)
Igor Kotenko (SPIRAS, Russia)
Philip Legg (Oxford University, UK)
Fang-Yie Leu (Tunghai University, Taiwan)
Kazuhiro Minami (Institute of Statistical Mathematics, Japan)
Marek Ogiela (AGH University, Poland)
Francesco Palmieri (Seconda Universita' di Napoli, Italy)
Günther Pernul (University of Regensburg, Germany)
Christian W. Probst (Technical University of Denmark, Denmark)
Malek Ben Salem (Accenture Technology Labs, USA)
Dongwan Shin (New Mexico Tech., USA)
Sean W. Smith (Dartmouth College, USA)
Shambhu Upadhyaya (SUNY Buffalo, USA)
Danfeng (Daphne) Yao (Virginia Tech, USA)
(More members are being invited)