{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:21:18Z","timestamp":1750306878682,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":30,"publisher":"ACM","license":[{"start":{"date-parts":[[2013,6,12]],"date-time":"2013-06-12T00:00:00Z","timestamp":1370995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2013,6,12]]},"DOI":"10.1145\/2462410.2462411","type":"proceedings-article","created":{"date-parts":[[2013,6,5]],"date-time":"2013-06-05T12:10:07Z","timestamp":1370434207000},"page":"213-224","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["Beyond accountability"],"prefix":"10.1145","author":[{"given":"Nathalie","family":"Baracaldo","sequence":"first","affiliation":[{"name":"University of Pittsburgh, Pittsburgh, PA, USA"}]},{"given":"James","family":"Joshi","sequence":"additional","affiliation":[{"name":"University of Pittsburgh, Pittsburgh, PA, USA"}]}],"member":"320","published-online":{"date-parts":[[2013,6,12]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Operationally critical threat, asset, and vulnerability evaluation (octave)","author":"Alberts C.","year":"1999","unstructured":"C. Alberts , S. Behrens , R. Pethia , and W. Wilson . Operationally critical threat, asset, and vulnerability evaluation (octave) , 1999 . C. Alberts, S. Behrens, R. Pethia, and W. Wilson. Operationally critical threat, asset, and vulnerability evaluation (octave), 1999."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295168"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/863632.883492"},{"key":"e_1_3_2_1_4_1","first-page":"1","volume-title":"Information Fusion, 2008 11th International Conf. on","author":"Buford J.","year":"2008","unstructured":"J. Buford , L. Lewis , and G. Jakobson . Insider threat detection using situation-aware mas . In Information Fusion, 2008 11th International Conf. on , pp. 1 -- 8 , 2008 . J. Buford, L. Lewis, and G. Jakobson. Insider threat detection using situation-aware mas. In Information Fusion, 2008 11th International Conf. on, pp. 1--8, 2008."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29963-6_11"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2011.092110.00088"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295144"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/501978.501980"},{"key":"e_1_3_2_1_9_1","unstructured":"F. Greitzer D. Frincke and Z. M. Social\/ethical issues in predictive insider threat monitoring 2011.  F. Greitzer D. Frincke and Z. M. Social\/ethical issues in predictive insider threat monitoring 2011."},{"key":"e_1_3_2_1_10_1","volume-title":"Modeling human behavior to anticipate insider attacks","author":"Greitzer F.","year":"2011","unstructured":"F. Greitzer and R. Hohimer . Modeling human behavior to anticipate insider attacks , 2011 . F. Greitzer and R. Hohimer. Modeling human behavior to anticipate insider attacks, 2011."},{"key":"e_1_3_2_1_11_1","volume-title":"Predictive modeling for insider threat mitigation","author":"Greitzer F.","year":"2009","unstructured":"F. Greitzer , P. Paulson , K. L., L. Franklin , T. Edgar , and F. D. Predictive modeling for insider threat mitigation , 2009 . F. Greitzer, P. Paulson, K. L., L. Franklin, T. Edgar, and F. D. Predictive modeling for insider threat mitigation, 2009."},{"key":"e_1_3_2_1_12_1","unstructured":"C. S. Institute. 2010\/2011csi computer crime and security survey 2010.  C. S. Institute. 2010\/2011csi computer crime and security survey 2010."},{"key":"e_1_3_2_1_13_1","first-page":"327","article-title":"Assigning responsibility for failed obligations","author":"Irwin K.","year":"2008","unstructured":"K. Irwin , T. Yu , and W. Winsborough . Assigning responsibility for failed obligations . In Trust Management II , pp. 327 -- 342 , 2008 . K. Irwin, T. Yu, and W. Winsborough. Assigning responsibility for failed obligations. In Trust Management II, pp. 327--342, 2008.","journal-title":"Trust Management II"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180423"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/331499.331504"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2011.41"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2133601.2133611"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","DOI":"10.21236\/ADA482452","volume-title":"The \"big picture\" of insider it sabotage across u.s. critical infrastructures","author":"Moore A.","year":"2008","unstructured":"A. Moore , D. Cappelli , and T. R. The \"big picture\" of insider it sabotage across u.s. critical infrastructures , 2008 . CERT , http:\/\/www.cert.org\/insider_threat. A. Moore, D. Cappelli, and T. R. The \"big picture\" of insider it sabotage across u.s. critical infrastructures, 2008. CERT, http:\/\/www.cert.org\/insider_threat."},{"key":"e_1_3_2_1_19_1","volume-title":"of Health and H. Services. The health insurance portability and accountability act (hipaa)","author":"U.","year":"1996","unstructured":"U. D. of Health and H. Services. The health insurance portability and accountability act (hipaa) , 1996 . U. D. of Health and H. Services. The health insurance portability and accountability act (hipaa), 1996."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/984334.984339"},{"key":"e_1_3_2_1_21_1","volume-title":"Package for hierarchical clustering with p-values (pvclust)","author":"Project R.","year":"2012","unstructured":"R. Project . Package for hierarchical clustering with p-values (pvclust) , 2012 . R. Project. Package for hierarchical clustering with p-values (pvclust), 2012."},{"key":"e_1_3_2_1_22_1","volume-title":"Configuring role-based access control to enforce mandatory and discretionary access control policies","author":"Osborn Q. M. S.","year":"2000","unstructured":"Q. M. S. Osborn , R. Sandhu . Configuring role-based access control to enforce mandatory and discretionary access control policies . 2000 . Q. M. S. Osborn, R. Sandhu. Configuring role-based access control to enforce mandatory and discretionary access control policies. 2000."},{"key":"e_1_3_2_1_23_1","volume-title":"Computers and Security","author":"Salim F.","year":"2012","unstructured":"F. Salim , J. Reid , U. Dulleck , and E. Dawson . Budget-aware role based access control . Computers and Security , 2012 . F. Salim, J. Reid, U. Dulleck, and E. Dawson. Budget-aware role based access control. Computers and Security, 2012."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2012.02.006"},{"key":"e_1_3_2_1_25_1","volume-title":"Approximately unbiased tests of regions using multistep-multiscale bootstrap resampling","author":"Shimodaira H.","year":"2004","unstructured":"H. Shimodaira . Approximately unbiased tests of regions using multistep-multiscale bootstrap resampling , 2004 . H. Shimodaira. Approximately unbiased tests of regions using multistep-multiscale bootstrap resampling, 2004."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1060745.1060808"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.SP.800-30","volume-title":"Risk management guide for information technology systems, recommendations of the national institute of standards and technology","author":"Stoneburner G.","year":"2002","unstructured":"G. Stoneburner , A. Goguen , and A. Feringa . Risk management guide for information technology systems, recommendations of the national institute of standards and technology , 2002 . G. Stoneburner, A. Goguen, and A. Feringa. Risk management guide for information technology systems, recommendations of the national institute of standards and technology, 2002."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1377836.1377850"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/AINAW.2007.267"},{"key":"e_1_3_2_1_30_1","volume-title":"Criterion functions for document clustering experiments and analysis. Mach. Learn., 55(3)","author":"Zhao Y.","year":"2002","unstructured":"Y. Zhao and G. Karypis . Criterion functions for document clustering experiments and analysis. Mach. Learn., 55(3) , 2002 . Y. Zhao and G. Karypis. Criterion functions for document clustering experiments and analysis. Mach. Learn., 55(3), 2002."}],"event":{"name":"SACMAT '13: 18th ACM Symposium on Access Control Models and Technologies","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Amsterdam The Netherlands","acronym":"SACMAT '13"},"container-title":["Proceedings of the 18th ACM symposium on Access control models and technologies"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2462410.2462411","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2462410.2462411","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T08:18:29Z","timestamp":1750234709000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2462410.2462411"}},"subtitle":["using obligations to reduce risk exposure and deter insider attacks"],"short-title":[],"issued":{"date-parts":[[2013,6,12]]},"references-count":30,"alternative-id":["10.1145\/2462410.2462411","10.1145\/2462410"],"URL":"https:\/\/doi.org\/10.1145\/2462410.2462411","relation":{},"subject":[],"published":{"date-parts":[[2013,6,12]]},"assertion":[{"value":"2013-06-12","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}