Insider Computer Fraud: An In-depth Framework for Detecting and Defending against Insider IT Attacks [Hardcover]

Kenneth Brancik (Author)

Book Description

ISBN-10: 1420046594 | ISBN-13: 978-1420046595 | Publication Date: December 6, 2007 | Edition: 1

An organization’s employees are often more intimate with its computer system than anyone else. Many also have access to sensitive information regarding the company and its customers. This makes employees prime candidates for sabotaging a system if they become disgruntled or for selling privileged information if they become greedy. Insider Computer Fraud: An In-depth Framework for Detecting and Defending against Insider IT Attacks presents the methods, safeguards, and techniques that help protect an organization from insider computer fraud.

Drawing from the author’s vast experience assessing the adequacy of IT security for the banking and securities industries, the book presents a practical framework for identifying, measuring, monitoring, and controlling the risks associated with insider threats. It not only provides an analysis of application or system-related risks, it demonstrates the interrelationships that exist between an application and the IT infrastructure components it uses to transmit, process, and store sensitive data. The author also examines the symbiotic relationship between the risks, controls, threats, and action plans that should be deployed to enhance the overall information security governance processes.

Increasing the awareness and understanding necessary to effectively manage the risks and controls associated with an insider threat, this book is an invaluable resource for those interested in attaining sound and best practices over the risk management process.

Editorial Reviews

About the Author

Information Security Consultant, New York

Product Details

• Hardcover: 504 pages
• Publisher: Auerbach Publications; 1 edition (December 6, 2007)
• Language: English
• ISBN-10: 1420046594
• ISBN-13: 978-1420046595
• Product Dimensions: 9.4 x 6.4 x 1.2 inches
• Shipping Weight: 2.2 pounds (View shipping rates and policies)
• Average Customer Review: 5.0 out of 5 stars  See all reviews (7 customer reviews)
• Amazon Best Sellers Rank: #1,617,184 in Books (See Top 100 in Books)

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

2 of 2 people found the following review helpful:

5.0 out of 5 stars Highly recommend - well written and must read, January 17, 2008

By 

A. Chaudhry (Ashburn, VA) - See all my reviews
(REAL NAME)   

This review is from: Insider Computer Fraud: An In-depth Framework for Detecting and Defending against Insider IT Attacks (Hardcover)

I really enjoyed reading this book. It provides a comprehensive framework for understanding insider threats and Risk management.

The author integrates a lot of components like Risk Assessment, Threat Modeling, Privacy assessment, Cyber security, Application security, Web services and Computer architecture as it relates to insider threat identification and prevention. If you deal with any of these components - you must read this book. You will learn so much - all in one place.

This book is logically arranged; the author does an excellent job building from one topic to another. It is an eye-opening and fascinating book as it presents the methods, safeguards, and techniques that help protect an organization from insider computer fraud.

I really liked Chapter 3 which covered Risk Assessment very well. It walks the reader with a step by step risk assessment methodology, which is very critical in any environment.

As a IT Security professional this book has become an invaluable resource for me.

Bottom line: Must read and well worth the price.

2 of 2 people found the following review helpful:

5.0 out of 5 stars Great textbook without the "textbook" feeling, January 11, 2008

By 

B. H. Edington "Dr. Babs" (New York, NY United States) - See all my reviews
(REAL NAME)   

This review is from: Insider Computer Fraud: An In-depth Framework for Detecting and Defending against Insider IT Attacks (Hardcover)

"Insider Computer Fraud" is a comprehensive overview that gives anyone, even computer novices, a solid framework of the topic. A topic of such breadth could overwhelm many individuals, but Brancik manages to divide the material into edible chunks that inform without drowning the reader in excess. If you scan the contents you can easily identify the area you want to focus on -- the well thought out design of the book is a real plus.
For professors looking for a textbook on this subject, "Insider Computer Fraud" is a good option. Each topic adds onto the prior chapter and gives a logic sequence to the material.
Interesting sub-topics such as the Novelty Neural Network and The Brain will capture the reader's attention. A good mix of theory and application makes this book a good choice for anyone interested in increasing their knowledge of a highly complex subject.

1 of 1 people found the following review helpful:

5.0 out of 5 stars A must read for the financial services as recent events show..., January 27, 2008

By 

Peter J. Morales "Peter" (NYC) - See all my reviews
(REAL NAME)   

This review is from: Insider Computer Fraud: An In-depth Framework for Detecting and Defending against Insider IT Attacks (Hardcover)

"Insider Computer Fraud" is a thorough and and extremely well done coverage of a complex topic which has important implications for people and the companies they work in. We often focus on external threats but as recent event show insider threat is as critical and can impact whole industries over night. Brancik's coverage of Novelty Neural Networks and their use to detecting insider fraud is an important contribution. Anyone in the financial services industry that has a role in protecting against computer fraud should read this book.