    @inproceedings {moyano2013ares,
	title = {Detecting Insider Threats: a Trust-Aware Framework},
	booktitle = {8th International Conference on Availability, Reliability and Security},
	year = {2013},
	month = {Nov 2013},
	pages = {121-130},
	publisher = {IEEE},
	organization = {IEEE},
	address = {Regensburg, Germany},
	abstract = {<p>The number of insider threats hitting organizations and big enterprises is rapidly growing. Insider threats occur when trusted employees misuse their permissions on organizational assets. Since insider threats know the organization and its processes, very often they end up undetected. Therefore, there is a pressing need for organizations to adopt preventive mechanisms to defend against insider threats. In this paper, we propose a framework for insiders identification during the early requirement analysis of organizational settings and of its IT systems. The framework supports security engineers in the detection of insider threats and in the prioritization of them based on the risk they represent to the organization. To enable the automatic detection of insider threats, we extend the SI* requirement modeling language with an asset model and a trust model. The asset model allows associating security properties and sensitivity levels to assets. The trust model allows specifying the trust level that a user places in another user with respect to a given permission on an asset. The insider threats identification leverages the trust levels associated with the permissions assigned to users, as well as the sensitivity of the assets to which access is granted. We illustrate the approach based on a patient monitoring scenario.</p>},
	isbn = {978-0-7695-5008-4},
	doi = {10.1109/ARES.2013.22},
	author = {Federica Paci and Carmen Fernandez-Gago and Francisco Moyano}
}
@inproceedings {Agudo2008,
	title = {Delegating Privileges over Finite Resources: A Quota Based Delegation Approach},
	booktitle = {5th International Workshop on Formal Aspects in Security and Trust (FAST{\textquoteright}08)},
	series = {LNCS},
	volume = {5491},
	year = {2008},
	pages = {302-315},
	publisher = {Springer},
	organization = {Springer},
	address = {Malaga (Spain)},
	abstract = {<p>When delegation in real world scenarios is considered, the delegator (the entity that posses the privileges) usually passes the privileges on to the delegatee (the entity that receives the privileges) in such a way that the former looses these privileges while the delegation is effective. If we think of a physical key that opens a door, the privilege being delegated by the owner of the key is opening the door. Once the owner of the key delegates this privilege to another entity, by handing over the key, he is not able to open the door any longer. This is due to the fact that the key is not copied and handed over but handed over to the delegatee. When delegation takes place in the electronic world, the delegator usually retains also the privileges. Thus, both users have them simultaneously. This situation, which in most cases is not a problem, may be undesirable when dealing with certain kind of resources. In particular, if we think of finite resources, those in which the number of users accessing simultaneously is finite, we can not allow that a user delegating his access privilege is also granted access when the delegation if effective. In this paper we propose an approach where each user is delegated an access quota for a resource. If further delegating of the delegated quota occurs, this is subtracted from his quota. That is, when delegating, part of the quota remains with the delegator and another part goes to the delegatee. This allows a more fairly access to the resource. Moreover, we show that this approach can also be applied to any kind of resources by defining appropriate authorization policies.</p>
},
	isbn = {978-3-642-01464-2},
	issn = {0302-9743 (Print) 1611-3349 (Online)},
	doi = {10.1007/978-3-642-01465-9},
	author = {Isaac Agudo and Carmen Fernandez-Gago and Javier Lopez}
}
