The ability to detect insider threats is important for many organizations.However, the field of insider threat detection is not well understood.
Detecting inconsistent biometrics is one of thefour approaches of identifying insider threats, andin particular, of identifying masquerading activities. Organizations first build a profile of each employeerepresenting their legitimate behavior, then identify subsequent behaviors inconsistent with the profiles asmasquerading attempts.
Psychosocial behaviors are analyzed to detect saboteurs,who are known to often display concerning psychosocial behaviors prior to carrying out their attacks .
We surveyed different insider threat detectionapproaches and found that insider threat detectionis not a single research field, but a conglomeration of independent research fields in computer scienceand even psychology or sociology.