The Difference with Insiders

The online security hacking group Anonymous has been making a lot of headlines recently. They committed denial of service attacks on companies like Mastercard, VISA and Paypal - companies who cut off Wikileaks from their services. This is a sore spot for the US government, since so many of their own secrets have been spilled on Wikileaks. Of course corporations are also Wikileaks next target especially those without a privilege identity management solution implemented for protection. What I thought was worth pointing out was the matter in which the five suspected members of anonymous were arrested. According to a quote in TG Daily, these cybercriminals were arrested in raids that involved broken doors and drawn guns. They're expected to participate in a long public trial that some experts believe will only contribute to their cause through martyrdom. Insider threats don't get met with nearly this level of glitz and glamor (or government support). You can bet that were these corporations' websites shut down by an insider, the FBI wouldn't be showing up at their cubicle with a swat team. The point is that for external threats, there's a certain amount of chasing down criminals the government will do to protect organizations from cybercriminals, but protecting the organization from insiders isn't a government subsidized exercise. The responsibility lies solely with us.