Defending Against AI-Driven Insider Threats: Best Practices and Strategies

Insider threat incidents are on the rise, recently a North Korean hacker targeted cybersecurity firm KnowBe4 by posing as a fake IT worker. In this case, an AI ‘enhanced’ image was used on the application in order to fool the hiring managers and despite video conference calls being conducted the worker was hired. This is just one example of a growing trend in threat actors using AI and other sophisticated methods to infiltrate organizations. However, we know that defenders can use AI tools to support their efforts in tackling insider threats, including for behavioral analysis. It is critical that organizations recognize and act on internal threats, as well as the risks posed by external actors. This session will focus on: • The latest trends in insider threat incidents, and how AI is being leveraged to make these intruders more sophisticated • The challenges organizations face in an environment where there is a lack of any formalized framework for discussing insider threat • What tools and processes can help identify potential insider threat actors early • How to appropriately address suspicious behavior and create an environment that is less conducive to insider threat incidents occurring