Attacker-centric thinking in security: perspectives from financial services practitioners

Caroline Moeckel

doi:10.1145/3407023.3407082

Attacker-centric thinking in security: perspectives from financial services practitioners

Caroline Moeckel

Information Security

Research output: Contribution to conference › Paper › peer-review

271 Downloads (Pure)

Abstract

In response to diverging perspectives on the usefulness of attacker-centric approaches in security, this paper examines the current role of such thinking in security, incorporating 12 in-depth interviews with senior financial services practitioners working in the areas of security, fraud and risk. The presentation of results is supported by a condensed systematic literature review on the topic and followed by the provision of a list of suggested guidelines on practical implementation strategies, enabling further theoretical reframing and extension.

Original language	English
Pages	1-10
Number of pages	10
DOIs	https://doi.org/10.1145/3407023.3407082
Publication status	Published - Aug 2020
Event	15th International ARES Conference on Availability, Reliability and Security - Virtual Event Duration: 25 Aug 2020 → 28 Aug 2020 https://www.ares-conference.eu/conference-2020/

Conference

Conference	15th International ARES Conference on Availability, Reliability and Security
Period	25/08/20 → 28/08/20
Internet address	https://www.ares-conference.eu/conference-2020/

Access to Document

10.1145/3407023.3407082

Accepted ManuscriptAccepted author manuscript, 863 KB

Cite this

@conference{22dcbac010c44e088875a646e6a62a82,

title = "Attacker-centric thinking in security: perspectives from financial services practitioners",

abstract = "In response to diverging perspectives on the usefulness of attacker-centric approaches in security, this paper examines the current role of such thinking in security, incorporating 12 in-depth interviews with senior financial services practitioners working in the areas of security, fraud and risk. The presentation of results is supported by a condensed systematic literature review on the topic and followed by the provision of a list of suggested guidelines on practical implementation strategies, enabling further theoretical reframing and extension.",

author = "Caroline Moeckel",

year = "2020",

month = aug,

doi = "10.1145/3407023.3407082",

language = "English",

pages = "1--10",

note = "15th International ARES Conference on Availability, Reliability and Security ; Conference date: 25-08-2020 Through 28-08-2020",

url = "https://www.ares-conference.eu/conference-2020/",

}

TY - CONF

T1 - Attacker-centric thinking in security

T2 - 15th International ARES Conference on Availability, Reliability and Security

AU - Moeckel, Caroline

PY - 2020/8

Y1 - 2020/8

N2 - In response to diverging perspectives on the usefulness of attacker-centric approaches in security, this paper examines the current role of such thinking in security, incorporating 12 in-depth interviews with senior financial services practitioners working in the areas of security, fraud and risk. The presentation of results is supported by a condensed systematic literature review on the topic and followed by the provision of a list of suggested guidelines on practical implementation strategies, enabling further theoretical reframing and extension.

AB - In response to diverging perspectives on the usefulness of attacker-centric approaches in security, this paper examines the current role of such thinking in security, incorporating 12 in-depth interviews with senior financial services practitioners working in the areas of security, fraud and risk. The presentation of results is supported by a condensed systematic literature review on the topic and followed by the provision of a list of suggested guidelines on practical implementation strategies, enabling further theoretical reframing and extension.

U2 - 10.1145/3407023.3407082

DO - 10.1145/3407023.3407082

M3 - Paper

SP - 1

EP - 10

Y2 - 25 August 2020 through 28 August 2020

ER -