Project Ben-ware and Insider Threats

Identifying anomalous human behaviour in heterogeneous systems using beneficial intelligent software


The insider threat problem is a significant and ever present issue faced by any organisation. While security mechanisms can be put in place to reduce the chances of external agents gaining access to a system, either to steal assets or alter records, the issue is more complex in tackling insider threat. If an employee already has legitimate access rights to a system, it is much more difficult to prevent them from carrying out inappropriate acts, as it is hard to determine whether the acts are part of their official work or indeed malicious. This project has developed the concept of “Ben-ware”: a beneficial software system that uses low-level data collection from employees’ computers, along with Artificial Intelligence, to identify anomalous behaviour of insiders.

The Ben-Ware project was funded by the Centre for Defence Enterprise, Defence Science and Technology Laboratory , UK Ministry of Defence (Project: CDE34938). The project was led by iARC with   Insighlytics LTD and University of Newcastle as collaborators.


  • McGough, S., Wall, D., Brennan, J., Theodoropoulos, G., Arief, B., Gamble, C., Fitzger-ald, J.,van Moorsel, A., Alwis, S., “Detecting Insider Threats Using Ben-ware: Benefi-cial Intelligent Software for Identifying Anomalous Human Behaviour”,Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications (JoWUA), Vol. 6, No. 4, pp. 3-46, December 2015. DOI Bookmark :10.22667/JOWUA.2015.12.31.003
  • Andrew Stephen McGough, David Wall, John Brennan, Georgios Theodoropoulos, Budi Arief, Carl Gamble, John Fitzgerald, Aad van Moorsel, Sujeewa Alwis, “Insider Threats: Identifying Anomalous Human Behaviour in Heterogeneous Systems Using Beneficial Intelligent Software (Ben-ware)”, 7th ACM CCS International Workshop on  Managing Insider Security Threats, In Conjunction with  the 22nd  ACM Conference on Computer and Communications Security, Denver, Colorado, USA, October 12-16, 2015. DOI Bookmark: 10.1145/2808783.2808785


  No photo description available.