Malicious Human Behaviour in Information System Security: Contribution to a Threat Model for Event Detection Algorithms

Abstract

Among the issues our community has to fix, information system security is a global concern both for the security of data and algorithms. The security of algorithms is dependent of the reliability of the input data. This reliability is questioned, especially when the data is generated by humans (or bots operated by humans), like in online social networks. Event detection algorithms are an example of technology using this type of data, but the question of the security is not systematically considered in this literature. We propose in this paper a first contribution to a threat model to overcome this problem. This threat model is composed of a description of the subject we are modelling, assumptions made, potential threats and defense strategies.