Insider theft and damage is a big problem facing manufacturers today and one of the biggest challenges of forensics investigations is the markers investigators use to detect most attacks are typically not present in insider cases where an employee or other authorized user has legitimate access to sensitive data. A new methodology can now compare normal file access patterns against patterns present when files end up copied, which can detect when insiders have inappropriately copied data. The methodology will be front and center at Black Hat USA in Las Vegas later on this month.  Link: Industrial Safety and Security Source