Insider Threat Control: Using Universal Serial Bus (USB) Device Auditing to Detect Possible Data Exfiltration by Malicious Insiders

This report presents methods to audit USB device use within a Microsoft Windows environment.

Analyzing Cases of Resilience Success and Failure—A Research Study

This report describes the SEI research study aimed at helping organizations to know the business value of implementing resilience processes and practices, and determine which ones to implement.

DoD Information Assurance and Agile: Challenges and Recommendations Gathered Through Interviews with Agile Program Managers and DoD Accreditation Reviewers

This paper discusses the natural tension between rapid fielding and response to change (characterized as agility) and DoD information assurance policy. Data for the paper was gathered through interviews with...

Model-Based Engineering with AADL: An Introduction to the SAE Architecture Analysis & Design Language

Model-Based Engineering with AADL introduces an architecture-centric approach to discovering software systems problems earlier, when they cost less to solve.

Spotlight On: Malicious Insiders and Organized Crime Activity

This report defines malicious insiders and organized crime and provides a snapshot of who malicious insiders are, what and how they strike, and why.