@MASTERSTHESIS\{IMM2015-06864, author = "I. Nemli", title = "Generating {LTS} for insider attack", year = "2015", school = "Technical University of Denmark, Department of Applied Mathematics and Computer Science", address = "Richard Petersens Plads, Building 324, {DK-}2800 Kgs. Lyngby, Denmark, compute@compute.dtu.dk", type = "", note = "{DTU} supervisor: Christian Probst, cwpr@dtu.dk, {DTU} Compute", url = "http://www.compute.dtu.dk/English.aspx", abstract = "Every organization or company relies on some data assets be it in one from or another, both digital assets and physical assets are present. One of the main challenges companies and organizations face is protecting these valuable assets. Many organizations and generally information security have focused on protecting assets from attacks perpetrated by people outside the boundaries of the targeted organization. This has been rather successfully by implementing firewalls, authorization mechanism, policies, encryption and etc. However, on the other side little research focus has been on protecting {IT-}infrastructures from insiders and dealing with insider attacks. The objectives of the thesis is to present and extend a model used for detecting threats for insider attacks. The new extensions will incorporate new techniques for measuring probabilities for attacks that can occur in the system under consideration, by using methods from the discipline of static program analysis and model checking." }