整合心理、技术与教育三维度，构建内鬼威胁教育平台理论框架
Toward an Insider Threat Education Platform: A Theoretical Literature Review
- 从行为视角出发，融合心理学与技术手段设计培训方法
- 首次系统梳理三类研究，为平台建设提供完整理论支撑
- 适合安全教育者与组织管理者参考，提升员工风险识别能力
组织内部威胁（InTs）数量虽少，却具有破坏系统、信息和基础设施的显著能力。现有研究从心理、技术和教育三个角度探讨该问题，涵盖心理指标、机器学习、用户行为日志分析以及员工培训方法。由于内鬼威胁本质是人为因素，从行为角度出发的培训方法尤为关键。尽管已有大量技术与心理理论用于检测、预防和缓解，但较少关注心理指标在培训中的应用。本文献综述对同行评审的内鬼威胁研究按主题分类，提取了心理、技术与教育领域的核心理论。这是首个全面整合三大研究路径的综述，旨在为内鬼威胁教育平台的开发提供充分理论依据。
原文摘要 · Abstract (English)
Insider threats (InTs) within organizations are small in number but have a disproportionate ability to damage systems, information, and infrastructure. Existing InT research studies the problem from psychological, technical, and educational perspectives. Proposed theories include research on psychological indicators, machine learning, user behavioral log analysis, and educational methods to teach employees recognition and mitigation techniques. Because InTs are a human problem, training methods that address InT detection from a behavioral perspective are critical. While numerous technological and psychological theories exist on detection, prevention, and mitigation, few training methods prioritize psychological indicators. This literature review studied peer-reviewed, InT research organized by subtopic and extracted critical theories from psychological, technical, and educational disciplines. In doing so, this is the first study to comprehensively organize research across all three approaches in a manner which properly informs the development of an InT education platform.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。