Study On Behavior Tendency Of Insider Threat In Information Security

With the rapid development of information technology, more and more enterprises introduced into management information systems based on computer network. Though the introduction of information system raised work efficiency of enterprises, it also brought inevitable security problems. At first, security requests to information system mainly concentrated on defending outside invasion, and already made some achievements, but the insider security threat to enterprises seldom be attached enough importance. Nowadays, international study on insider threat is only at threshold. After The Sarbanes—Oxley(SOX) Act 404 went into effect on July 15, 2006, study on insider threat problems in information systems will enter into a new field. This paper studies on information security management inside the enterprises which is seldom studied internationally or domestically nowadays. Firstly, this paper studies on theories of information security and criminal psychology. Secondly, this paper sets up the behavior model of potential insider threat and the model of enterprise insider threat with analyzing large numbers of real cases, puts up investigation of insider information security of domestic enterprises, and educes a series of reliable results from full and accurate data. Lastly, this paper puts forward corresponding suggestions and countermeasure to the current situation of information security of domestic enterprises. I hope this paper can be necessary prophase foundation of extensive study which is about to put up.