Get 20M+ Full-Text Papers For Less Than $1.50/day. Start a 14-Day Trial for You or Your Team.

Learn More →

Detecting Insider Threats Through Language Change

Detecting Insider Threats Through Language Change The act of conducting an insider attack carries with it cognitive and social challenges that may affect an offender’s day-to-day work behavior. We test this hypothesis by examining the language used in e-mails that were sent as part of a 6-hr workplace simulation. The simulation involved participants (N = 54) examining databases and exchanging information as part of a four-stage organized crime investigation. After the first stage, 25% of the participants were covertly incentivized to act as an “insider” by providing information to a provocateur. Analysis of the language used in participants’ e-mails found that insiders became more self-focused, showed greater negative affect, and showed more cognitive processing compared to their coworkers. At the interpersonal level, insiders showed significantly more deterioration in the degree to which their language mimicked other team members over time. Our findings demonstrate how language may provide an indirect way of identifying employees who are undertaking an insider attack. http://www.deepdyve.com/assets/images/DeepDyve-Logo-lg.png Law and Human Behavior American Psychological Association

Loading next page...
 
/lp/american-psychological-association/detecting-insider-threats-through-language-change-5xcnty1E0p

References

References for this paper are not available at this time. We will be adding them shortly, thank you for your patience.

Publisher
American Psychological Association
Copyright
© 2013 American Psychological Association
ISSN
0147-7307
eISSN
1573-661X
DOI
10.1037/lhb0000032
pmid
23750598
Publisher site
See Article on Publisher Site

Abstract

The act of conducting an insider attack carries with it cognitive and social challenges that may affect an offender’s day-to-day work behavior. We test this hypothesis by examining the language used in e-mails that were sent as part of a 6-hr workplace simulation. The simulation involved participants (N = 54) examining databases and exchanging information as part of a four-stage organized crime investigation. After the first stage, 25% of the participants were covertly incentivized to act as an “insider” by providing information to a provocateur. Analysis of the language used in participants’ e-mails found that insiders became more self-focused, showed greater negative affect, and showed more cognitive processing compared to their coworkers. At the interpersonal level, insiders showed significantly more deterioration in the degree to which their language mimicked other team members over time. Our findings demonstrate how language may provide an indirect way of identifying employees who are undertaking an insider attack.

Journal

Law and Human BehaviorAmerican Psychological Association

Published: Aug 10, 2013

There are no references for this article.