Buy new:
-23% $52.44
FREE delivery Wednesday, May 15
Ships from: Amazon
Sold by: Mapple Shops
$52.44 with 23 percent savings
List Price: $67.99

The List Price is the suggested retail price of a new product as provided by a manufacturer, supplier, or seller. Except for books, Amazon will display a List Price if the product was purchased by customers on Amazon or offered by other retailers at or above the List Price in at least the past 90 days. List prices may not necessarily reflect the product's prevailing market price.
Learn more
FREE Returns
FREE delivery Wednesday, May 15. Order within 20 hrs 14 mins
Only 1 left in stock - order soon.
$$52.44 () Includes selected options. Includes initial monthly payment and selected options. Details
Price
Subtotal
$$52.44
Subtotal
Initial payment breakdown
Shipping cost, delivery date, and order total (including tax) shown at checkout.
Ships from
Amazon
Ships from
Amazon
Sold by
Mapple Shops
Sold by
Mapple Shops
Returns
Eligible for Return, Refund or Replacement within 30 days of receipt
Eligible for Return, Refund or Replacement within 30 days of receipt
This item can be returned in its original condition for a full refund or replacement within 30 days of receipt.
Read full return policy
Returns
Eligible for Return, Refund or Replacement within 30 days of receipt
This item can be returned in its original condition for a full refund or replacement within 30 days of receipt.
Read full return policy
Payment
Secure transaction
Your transaction is secure
We work hard to protect your security and privacy. Our payment security system encrypts your information during transmission. We don’t share your credit card details with third-party sellers, and we don’t sell your information to others. Learn more
Payment
Secure transaction
We work hard to protect your security and privacy. Our payment security system encrypts your information during transmission. We don’t share your credit card details with third-party sellers, and we don’t sell your information to others. Learn more
$40.89
FREE Returns
A used book in Very Good Condition with minimal signs of wear. Crisp, clean pages with little to no highlighting or notes. Ships fast! 100% Satisfaction Guaranteed. A used book in Very Good Condition with minimal signs of wear. Crisp, clean pages with little to no highlighting or notes. Ships fast! 100% Satisfaction Guaranteed. See less
FREE delivery Tuesday, May 14. Order within 11 hrs 29 mins
Only 1 left in stock - order soon.
$$52.44 () Includes selected options. Includes initial monthly payment and selected options. Details
Price
Subtotal
$$52.44
Subtotal
Initial payment breakdown
Shipping cost, delivery date, and order total (including tax) shown at checkout.
Access codes and supplements are not guaranteed with used items.
Amazon book clubs early access
Loading your book clubs
There was a problem loading your book clubs. Please try again.
Not in a club? Learn more
Amazon book clubs early access

Join or create book clubs

Choose books together

Track your books
Bring your club to Amazon Book Clubs, start a new book club and invite your friends to join, or find a club that’s right for you for free.
Explore Amazon Book Clubs
Kindle app logo image

Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet, or computer - no Kindle device required.

Read instantly on your browser with Kindle for Web.

Using your mobile phone camera - scan the code below and download the Kindle app.

QR code to download the Kindle App

Follow the author

Dawn Cappelli
+ Follow
More books from this author
Something went wrong. Please try your request again later.

The CERT Guide to Insider Threats: How to Prevent, Detect, and Respond to Information Technology Crimes (Theft, Sabotage, Fraud) (SEI Series in Software Engineering) 1st Edition

by Dawn Cappelli (Author), Andrew Moore (Author), Randall Trzeciak (Author)
4.5 4.5 out of 5 stars 28 ratings
See all formats and editions
{"desktop_buybox_group_1":[{"displayPrice":"$52.44","priceAmount":52.44,"currencySymbol":"$","integerValue":"52","decimalSeparator":".","fractionalValue":"44","symbolPosition":"left","hasSpace":false,"showFractionalPartIfEmpty":true,"offerListingId":"7AzbHLSRJ3VtJ%2B%2BYmkZt3jhrNb%2F5aNsMnZ0UuF7fvC71FCeMINc6ZP1cxmU7nNgM4WuIso22nBXsrG7OLDfTm4NZvg161uyrXBCwp%2BsMftFAC5JS5SbEb7EdIU9PGAt6YF4uIDqnCUI34fGjSHGyHy4ny%2FBwuHmT%2FlW90BOe%2Fx%2BH9R2QiVvGfbj4hva913Jc","locale":"en-US","buyingOptionType":"NEW","aapiBuyingOptionIndex":0}, {"displayPrice":"$40.89","priceAmount":40.89,"currencySymbol":"$","integerValue":"40","decimalSeparator":".","fractionalValue":"89","symbolPosition":"left","hasSpace":false,"showFractionalPartIfEmpty":true,"offerListingId":"7AzbHLSRJ3VtJ%2B%2BYmkZt3jhrNb%2F5aNsMCtT%2BD4Pv8cTYllkGTfl9srQeBVQWyv06MJs8LJ1hTbpA8gvUBsz1Ahjn%2F5QhHuLXYAHkeO3WBRurT4nJ98C31rB7Aro42R1TlI4lwWFE5kfFBhZcXNhUBDVvD5qNQrix6uMIwaOOGym%2BzK3W8kIfj7pj5xOCJbeR","locale":"en-US","buyingOptionType":"USED","aapiBuyingOptionIndex":1}]}

Purchase options and add-ons

Since 2001, the CERT® Insider Threat Center at Carnegie Mellon University’s Software Engineering Institute (SEI) has collected and analyzed information about more than seven hundred insider cyber crimes, ranging from national security espionage to theft of trade secrets. The CERT® Guide to Insider Threats describes CERT’s findings in practical terms, offering specific guidance and countermeasures that can be immediately applied by executives, managers, security officers, and operational staff within any private, government, or military organization.

The authors systematically address attacks by all types of malicious insiders, including current and former employees, contractors, business partners, outsourcers, and even cloud-computing vendors. They cover all major types of insider cyber crime: IT sabotage, intellectual property theft, and fraud. For each, they present a crime profile describing how the crime tends to evolve over time, as well as motivations, attack methods, organizational issues, and precursor warnings that could have helped the organization prevent the incident or detect it earlier. Beyond identifying crucial patterns of suspicious behavior, the authors present concrete defensive measures for protecting both systems and data.

This book also conveys the big picture of the insider threat problem over time: the complex interactions and unintended consequences of existing policies, practices, technology, insider mindsets, and organizational culture. Most important, it offers actionable recommendations for the entire organization, from executive management and board members to IT, data owners, HR, and legal departments.

With this book, you will find out how to

  • Identify hidden signs of insider IT sabotage, theft of sensitive information, and fraud
  • Recognize insider threats throughout the software development life cycle
  • Use advanced threat controls to resist attacks by both technical and nontechnical insiders
  • Increase the effectiveness of existing technical security tools by enhancing rules, configurations, and associated business processes
  • Prepare for unusual insider attacks, including attacks linked to organized crime or the Internet underground

By implementing this book’s security practices, you will be incorporating protection mechanisms designed to resist the vast majority of malicious insider attacks.

Read more Read less
Previous page
  1. ISBN-10
    0321812573
  2. ISBN-13
    978-0321812575
  3. Edition
    1st
  4. Publisher
    Addison-Wesley Professional
  5. Publication date
    January 24, 2012
  6. Part of series
    SEI Series in Software Engineering
  7. Language
    English
  8. Dimensions
    7 x 1.1 x 9.3 inches
  9. Print length
    432 pages
  10. See all details
Next page
Amazon First Reads | Editors' picks at exclusive prices

Frequently bought together

The CERT Guide to Insider Threats: How to Prevent, Detect, and Respond to Information Technology Crimes (Theft, Sabotage, Fra
$52.44
Get it as soon as Wednesday, May 15
Only 1 left in stock - order soon.
Sold by Mapple Shops and ships from Amazon Fulfillment.
+
Insider Threats (Cornell Studies in Security Affairs)
$24.95
Get it as soon as Tuesday, May 14
Only 9 left in stock (more on the way).
Ships from and sold by Amazon.com.
Total price:
To see our price, add these items to your cart.
Details
Added to Cart
One of these items ships sooner than the other.
Show details Hide details
Choose items to buy together.

Editorial Reviews

Review

“For years, researchers at the CERT Insider Threat Center at Carnegie Mellon’s Software Engineering Institute have been collecting and studying data on real-world insider incidents. This year, they published a book cataloging the results of their research, called The CERT Guide to Insider Threats. This book is an invaluable guide to establishing effective processes for managing the risk of insider attacks, and it should be on every security professional’s wish list this year. In general, the insider threat drives home the point that perimeter defenses are no longer enough. IT organizations also need to be able to see into their internal networks to identify suspicious activity.”

-- Tom Cross, Director of Security Research at Lancope, guest writing for Forbes CIO Central

About the Author

Dawn Cappelli, CISSP, is Technical Manager of the CERT Insider Threat Center and the Enterprise Threat and Vulnerability Management Team at Carnegie Mellon University’s Software Engineering Institute (SEI). She has spent the past decade working with organizations such as the U.S. Secret Service and Department of Homeland Security in protecting the United States against insider threats. Andrew Moore is Lead Researcher in the CERT Insider Threat Center and Senior Member of Technical Staff at SEI. Randall Trzeciak is a Senior Member of Technical Staff at SEI, and Technical Team Lead for the Insider Threat Research Group at the CERT Insider Threat Center.

Product details

  • Publisher ‏ : ‎ Addison-Wesley Professional; 1st edition (January 24, 2012)
  • Language ‏ : ‎ English
  • Hardcover ‏ : ‎ 432 pages
  • ISBN-10 ‏ : ‎ 0321812573
  • ISBN-13 ‏ : ‎ 978-0321812575
  • Item Weight ‏ : ‎ 1.77 pounds
  • Dimensions ‏ : ‎ 7 x 1.1 x 9.3 inches
  • Customer Reviews:
    4.5 4.5 out of 5 stars 28 ratings

About the author

Follow authors to get new release updates, plus improved recommendations.
Dawn Cappelli

Dawn Cappelli

Brief content visible, double tap to read full content.
Full content visible, double tap to read brief content.

Discover more of the author’s books, see similar authors, read author blogs and more

Customer reviews

4.5 out of 5 stars
4.5 out of 5
28 global ratings

Top reviews from the United States

Amazon Customer
5.0 out of 5 stars A must read for security professionals...
Reviewed in the United States on December 31, 2012
Verified Purchase
I've worked in security management for many years, and I currently teach related university classes. I find this book to be an invaluable addition to any business or security manager's professional book shelf.

Although its focus on academic rigor causes it to start a little slow, the rest of the book is well worth the wait. I plan to recommend this book to my students and to my readers.

Don't just think about buying this book... DO IT NOW!!!
Helpful
 Report
Ian Mulqueen - SDSUG member
5.0 out of 5 stars Book Review for SDSUG
Reviewed in the United States on February 17, 2015
I found Cappelli, Moore, and Trzeciak's CERT Guide to Insider Threats to be a fascinating read, even considering my limited knowledge level. I knew I was in for some serious mind-stimulation based solely on the length of the preface and acknowledgments. My favorite part of the book is that it is designed so that every chapter can be self-sustaining, and reading the whole book in order isn’t actually necessary – just read chapter 1 and then you are free to read whatever chapter sounds the neatest…or is the most relevant to your situation.

For example, take chapters 1-4. Chapter 1 provides an overview and briefs you on the three types of insider IT threats (as defined by CERT). It also introduces you to the CERT Insider Threat Center and the CERT database. Chapters 2-4 then elaborate on each of the three insider threats introduced in chapter 1, with a chapter dedicated to each threat respectively. One thing to note: this book intentionally chooses to exclude national security espionage.

Chapter 5 covers vulnerabilities in software engineering, exposing a company to malicious insiders. 6 and 7 focus on mitigation, while chapter 8 is chocked full of actual examples from the CERT database. Even Chapter 9, which is advertised as a “conclusion” still has loads of information to present – mostly stuff that didn’t really fit in the other chapters. To top it all off, there are several appendices that are as much must-read material as any of the chapters in this book.

Now, it’s probably relevant to my review that I disclose that I am not in the IT industry…yet. Though I am no spring chicken, I have returned to school the last couple years to study this subject and I do hope to find employment in this field very soon. With that being said, having a book like this to help develop my understanding is invaluable. The layout and design of the book does mean that there are some subjects (even entire chapters) that may not have relevance to everyone, but considering how much of a threat insiders pose (as this book helped me to fully grasp), in my opinion this is a tool more so than a book to read. Granted, I may be quite a ways off from being in a position to implement strategies provided in this book or to even be remotely influential in any kind of threat prevention, but this book does help build a foundation of knowledge that every employee anywhere should have and understand. We’ve all heard the stories of people who try to “stick it to the man”, but what this book really excels at is developing such an awareness of the true threat that insiders pose, that you can’t help but walk away from this book trying to put yourself in the minds of any disgruntled friends/coworkers you may have.

Overall I found the book to be well written and easy to follow. The writers of this book clearly want you to take away some very important information, so they even go so far as to include highlighted Tips and Notes sections throughout the book – and not just a few! Pretty much every few pages there’s at least either a note and/or tip to digest. As a current student, I especially appreciated that this book is written similar to a textbook. Clearly, the people at the CERT threat center want their readers to actually LEARN something (many somethings in fact), versus just being entertained.

Ultimately, though this book is geared for those already embedded in the industry, it is written as an educational tool, giving it value even to those of us who don’t have a wealth of IT experience. I would absolutely recommend this book! For those just curious about how damaging insider threats can truly be, read chapter 1 and then jump to chapter 8. I guarantee after that, you’ll want to delve further into CERT!
One person found this helpful
Helpful
 Report
Rick Howard
3.0 out of 5 stars Must read for Cyber Security Professionals
Reviewed in the United States on October 23, 2013
Verified Purchase
The authors have reviewed more than 700 cases of insider threat attacks and developed a comprehensive list of mitigation controls that might have prevented them. The book is not very well organized, but the content represents the authoritative source on precursor behavior that may illuminate potential insider attacks. In that regard, it is a must-read for cyber security professionals. What is clear from reading the book is that there is no technical solution that will prevent insider attacks. Technology can aid in discovery, but it is not a panacea; it will not prevent a determined inside attacker. A good program will accomplish four tasks:

1: Train employees and their managers to watch for the signs of potential insider threat behavior.
2: Provide the mechanisms across the organization to report and review the activity.
3: Establish and maintain the apparatus to report potential abuse and respond to incidents when necessary.
4: Mitigate the risk before any damage is done.

The key to the entire program is the human element, and that is why defending against the insider threat is hard.

Full review on my blog site: Terebrate
2 people found this helpful
Helpful
 Report
DrT
4.0 out of 5 stars Great reality check for business executives
Reviewed in the United States on December 30, 2012
Verified Purchase
If you think you don't have to think about security with your workers then you need to read this book. It has a realistic approach to common security issues from workers of your company as well as good approaches to minimizing the risk without costing a mint. Highly recommend it for security and non-security executives.
Helpful
 Report
MsCougarGirl
5.0 out of 5 stars Timely and Pertinent
Reviewed in the United States on July 18, 2012
The CERT Insider Threat Research center [...] has done a fantastic job of presenting relevant material with this book.

When I started reading the case studies, I had a hard time putting the book down. This is far from dry reading. I think it is great foundational reading for anyone who works in IT - new or seasoned. The threat landscape is an ever-changing landscape. I enjoyed reading the case studies and examples. Putting the reader in the shoes of the person committing the crime provides unique perspective that will help the reader identify and head off attacks.

The CERT Insider Threat Center has a very informative on its website (above). You can learn a lot by persuing the site. I like having the book as it puts everyting in a format I can take with me and the chapter layout makes sense.

Regardless of data classification, every company is at risk of sabotage or other threats, and I feel this book addressed the topics well.
One person found this helpful
Helpful
 Report