Security Lessons Learned from Société Générale

Authors:
Jeremy Epstein
Affiliations:
Cyber Defense Agency
Venue:
IEEE Security and Privacy
Year:
2008

Citing 0
Cited 1

On the exploitation of process mining for security audits: the process discovery case

Proceedings of the 28th Annual ACM Symposium on Applied Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

The huge trading losses in 2007 and 2008 at Société Générale were caused by insider Jerome Kerviel's unauthorized actions. We can learn many lessons about the technological aspects of security from this insider attack, as well as some that we might hope to learn, but can't.