Mathematical Concept of a Model for Processing Metadata of Employee’s Psycho-States for Identifying Him as an Internal Violator (Insider)

Abstract

The identification of an internal violator is becoming more and more relevant with the development of information processing technologies, the security of technical and software complexes in information systems is increasing, and the person remains the most vulnerable place. An employee who processes information and has full access to it becomes the target of an attacker, as well as he himself may be an intruder and become a source of leakage of confidential information. The analysis of data about the employee allows us to make assumptions about his emotional state, willingness to honestly do the job. The collected data requires analysis according to their type, and this is what the work is dedicated to. Data from video surveillance cameras is analyzed to identify the time of the employee's appearance and his location during working hours. The metadata obtained is intended to create a model of an internal violator, followed by an assessment of the threat level emanating from the employee.