Vance, Anthony; Molyneux, Braden; Lowry, Paul Benjamin - 2013
A long-time tenet of information security is the principle of least privilege, which requires that systems users be given the minimum amount of access privilege required to complete a task. However, many financial, medical, and customer records systems grant employees broad access for reasons of...