{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:15:54Z","timestamp":1750306554115,"version":"3.41.0"},"reference-count":26,"publisher":"Association for Computing Machinery (ACM)","issue":"2-3","license":[{"start":{"date-parts":[[2014,10,28]],"date-time":"2014-10-28T00:00:00Z","timestamp":1414454400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100008321","name":"Pennsylvania State University","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100008321","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Campus Hungary Program"},{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["N62909-13-1-V029"],"award-info":[{"award-number":["N62909-13-1-V029"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000143","name":"Division of Computing and Communication Foundations","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000143","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Internet Technol."],"published-print":{"date-parts":[[2014,10,28]]},"abstract":"<jats:p>We develop a formal nondeterministic game model for secure team composition to counter cyber-espionage and to protect organizational secrets against an attacker who tries to sidestep technical security mechanisms by offering a bribe to a project team member. The game captures the adversarial interaction between the attacker and the project manager who has a secret she wants to protect but must share with a team of individuals selected from within her organization. Our interdisciplinary work is important in the face of the multipronged approaches utilized by well-motivated attackers to circumvent the fortifications of otherwise well-defended targets.<\/jats:p>","DOI":"10.1145\/2663499","type":"journal-article","created":{"date-parts":[[2014,10,28]],"date-time":"2014-10-28T12:40:29Z","timestamp":1414500029000},"page":"1-22","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Secure Team Composition to Thwart Insider Threats and Cyber-Espionage"],"prefix":"10.1145","volume":"14","author":[{"given":"Aron","family":"Laszka","sequence":"first","affiliation":[{"name":"The Pennsylvania State University, Nashville, TN"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Benjamin","family":"Johnson","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pascal","family":"Sch\u00f6ttle","sequence":"additional","affiliation":[{"name":"University of M\u00fcnster, M\u00fcnster, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jens","family":"Grossklags","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, State College, PA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rainer","family":"B\u00f6hme","sequence":"additional","affiliation":[{"name":"University of M\u00fcnster"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2014,10,28]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ejpoleco.2003.10.008"},{"key":"e_1_2_1_2_1","volume-title":"Security Engineering - A Guide to Building Dependable Distributed Systems","author":"Anderson Ross","unstructured":"Ross Anderson . 2008. Security Engineering - A Guide to Building Dependable Distributed Systems , 2 nd ed. Wiley , New York . Ross Anderson. 2008. Security Engineering - A Guide to Building Dependable Distributed Systems, 2nd ed. Wiley, New York.","edition":"2"},{"volume-title":"The Economics of Information Security and Privacy, Rainer B\u00f6hme","author":"Anderson Ross","key":"e_1_2_1_3_1","unstructured":"Ross Anderson , Chris Barton , Rainer B\u00f6hme , Richard Clayton , Michel van Eeten , Michael Levi , Tyler Moore , and Stefan Savage . 2013. Measuring the cost of cybercrime . In The Economics of Information Security and Privacy, Rainer B\u00f6hme , Ed., Springer , 265--300. Ross Anderson, Chris Barton, Rainer B\u00f6hme, Richard Clayton, Michel van Eeten, Michael Levi, Tyler Moore, and Stefan Savage. 2013. Measuring the cost of cybercrime. In The Economics of Information Security and Privacy, Rainer B\u00f6hme, Ed., Springer, 265--300."},{"key":"e_1_2_1_4_1","unstructured":"Stephen Band Dawn Cappelli Lynn Fischer Andrew Moore Eric Shaw and Randall Trzeciak. 2006. Comparing insider it sabotage and espionage: A model-based analysis. http:\/\/www.sei.cmu.edu\/reports\/06tr026.pdf.  Stephen Band Dawn Cappelli Lynn Fischer Andrew Moore Eric Shaw and Randall Trzeciak. 2006. Comparing insider it sabotage and espionage: A model-based analysis. http:\/\/www.sei.cmu.edu\/reports\/06tr026.pdf."},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1111\/1468-2370.00053"},{"key":"e_1_2_1_6_1","unstructured":"Richard Brackney and Robert Anderson. 2004. Understanding the insider threat. http:\/\/www.rand.org\/content\/dam\/rand\/pubs\/conf_proceedings\/2005\/RAND_CF196.pdf.  Richard Brackney and Robert Anderson. 2004. Understanding the insider threat. http:\/\/www.rand.org\/content\/dam\/rand\/pubs\/conf_proceedings\/2005\/RAND_CF196.pdf."},{"key":"e_1_2_1_7_1","volume-title":"Common sense guide to prevention and detection of insider threats","author":"Cappelli Dawn","unstructured":"Dawn Cappelli , Andrew Moore , Randall Trzeciak , and Timothy Shimeall . 2009. Common sense guide to prevention and detection of insider threats , 3 rd Ed. Version 3.1. https:\/\/www.cylab.cmu.edu\/files\/pdfs\/CERT\/CSG-V3.pdf. Dawn Cappelli, Andrew Moore, Randall Trzeciak, and Timothy Shimeall. 2009. Common sense guide to prevention and detection of insider threats, 3rd Ed. Version 3.1. https:\/\/www.cylab.cmu.edu\/files\/pdfs\/CERT\/CSG-V3.pdf.","edition":"3"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2005.94"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-27576-0_2"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.istr.2010.04.004"},{"key":"e_1_2_1_11_1","volume-title":"Studie: Industriespionage 2012 - Aktuelle Risiken f\u00fcr die deutsche Wirtschaft durch Cyberwar. Business Risk and Crisis Management GmbH","author":"Corp","year":"2012","unstructured":"Corp orate Trust. 2012 . Studie: Industriespionage 2012 - Aktuelle Risiken f\u00fcr die deutsche Wirtschaft durch Cyberwar. Business Risk and Crisis Management GmbH , Munchen, Germany . Corporate Trust. 2012. Studie: Industriespionage 2012 - Aktuelle Risiken f\u00fcr die deutsche Wirtschaft durch Cyberwar. Business Risk and Crisis Management GmbH, Munchen, Germany."},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1070.0160"},{"key":"e_1_2_1_13_1","unstructured":"FBI. 2013. The insider threat. http:\/\/www.fbi.gov\/about-us\/investigate\/counterintelligence\/insiderthreat.  FBI. 2013. The insider threat. http:\/\/www.fbi.gov\/about-us\/investigate\/counterintelligence\/insiderthreat."},{"key":"e_1_2_1_14_1","unstructured":"Federal Bureau of Investigation. 2013. Economic espionage. http:\/\/www.fbi.gov\/about-us\/investigate\/counterintelligence\/economic-espionage.  Federal Bureau of Investigation. 2013. Economic espionage. http:\/\/www.fbi.gov\/about-us\/investigate\/counterintelligence\/economic-espionage."},{"key":"e_1_2_1_15_1","unstructured":"Peter Finn. 2013. Chinese citizen sentenced in military data-theft case. http:\/\/www.washingtonpost.com\/world\/national-security\/chinese-citizen-sentenced-in-military-data-theft-case\/2013\/03\/25\/dc4567fa-9593-11e2-ae32-9ef60436f5c1_story.html.  Peter Finn. 2013. Chinese citizen sentenced in military data-theft case. http:\/\/www.washingtonpost.com\/world\/national-security\/chinese-citizen-sentenced-in-military-data-theft-case\/2013\/03\/25\/dc4567fa-9593-11e2-ae32-9ef60436f5c1_story.html."},{"key":"e_1_2_1_16_1","volume-title":"Proceedings of the 6th Workshop on the Economics of Information Security (WEIS'07)","author":"Grossklags Jens","year":"2007","unstructured":"Jens Grossklags and Alessandro Acquisti . 2007 . When 25 cents is too much: An experiment on willingness-to-sell and willingness-to-protect personal information . In Proceedings of the 6th Workshop on the Economics of Information Security (WEIS'07) . Jens Grossklags and Alessandro Acquisti. 2007. When 25 cents is too much: An experiment on willingness-to-sell and willingness-to-protect personal information. In Proceedings of the 6th Workshop on the Economics of Information Security (WEIS'07)."},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40203-6_16"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2008.08.001"},{"key":"e_1_2_1_19_1","first-page":"28","article-title":"A preliminary model of insider theft of intellectual property","volume":"2","author":"Moore Andrew","year":"2011","unstructured":"Andrew Moore , Dawn Cappelli , Thomas Caron , Eric Shaw , Derrick Spooner , and Randall Trzeciak . 2011 . A preliminary model of insider theft of intellectual property . J. Wirel. Mobil. Netw. Ubiq. Comput. Depend. Appl. 2 , 1, 28 -- 49 . Andrew Moore, Dawn Cappelli, Thomas Caron, Eric Shaw, Derrick Spooner, and Randall Trzeciak. 2011. A preliminary model of insider theft of intellectual property. J. Wirel. Mobil. Netw. Ubiq. Comput. Depend. Appl. 2, 1, 28--49.","journal-title":"J. Wirel. Mobil. Netw. Ubiq. Comput. Depend. Appl."},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2012.326"},{"key":"e_1_2_1_21_1","unstructured":"Marisa Randazzo Michelle Keeney Eileen Kowalski Dawn Cappelli and Andrew Moore. 2005. Insider threat study: Illicit cyber activity in the banking and finance sector. http:\/\/www.sei.cmu.edu\/reports\/04tr021.pdf.  Marisa Randazzo Michelle Keeney Eileen Kowalski Dawn Cappelli and Andrew Moore. 2005. Insider threat study: Illicit cyber activity in the banking and finance sector. http:\/\/www.sei.cmu.edu\/reports\/04tr021.pdf."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1162\/105864001316907991"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1975.9939"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/35.312842"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-4048(02)01009-X"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.2307\/249551"}],"container-title":["ACM Transactions on Internet Technology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2663499","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2663499","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T06:12:48Z","timestamp":1750227168000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2663499"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,10,28]]},"references-count":26,"journal-issue":{"issue":"2-3","published-print":{"date-parts":[[2014,10,28]]}},"alternative-id":["10.1145\/2663499"],"URL":"https:\/\/doi.org\/10.1145\/2663499","relation":{},"ISSN":["1533-5399","1557-6051"],"issn-type":[{"type":"print","value":"1533-5399"},{"type":"electronic","value":"1557-6051"}],"subject":[],"published":{"date-parts":[[2014,10,28]]},"assertion":[{"value":"2013-10-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2014-06-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2014-10-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}