OSINT-DRIVEN EARLY-WARNING FRAMEWORK FOR INSIDER-THREAT MITIGATION IN CIVIL-ENGINEERING PROJECTS: SAFEGUARDING DESIGN FILES, GEOTECHNICAL DATA, AND CRITICAL-INFRASTRUCTURE ACCESS

This paper presents a framework for using OSINT to proactively detect insider threats in civil-engineering projects. By systematically analyzing public information, we can identify warning signs before damage occurs [7]. Integrating tools like Maltego and SpiderFoot allows organizations to transform raw data into actionable intelligence [5, 14]. The design is modular, allowing adaptation to specific operational contexts, and focuses on protecting critical assets like design files and geotechnical data [1, 15]. Future work will involve integrating advanced machine learning and validating the framework through controlled deployment [2, 3].

[1] Lalropuia, K.C., Bhowmik, A., Rahaman, M.A.: Mitigating malicious insider threats to Common Data Environments in the Architecture, Engineering, and Construction industry: An incomplete information game approach. Appl. Syst. Innov. 5(1), 5 (2024). https://doi.org/10.3390/asi5010005 [2] Alzaabi, M., Mehmood, R.: A review of recent advances, challenges, and open issues in insider threat detection. IEEE Access 12, 45678–45712 (2024). https://doi.org/10.1109/ACCESS.2024.3385212 [3] Sen, S., Saha, S., Chakrabarti, A., et al.: Real-time detection of insider threats using behavioral analytics and deep evidential clustering. In: Proc. IEEE Int. Conf. on Cyber Security, pp. 1–8 (2025). https://arxiv.org/abs/2505.15383 [4] Dragos, Inc.: Operational Technology Cybersecurity: The Role of OSINT in ICS/OT Security. Technical Report (2022). https://www.dragos.com/resource/ot-cybersecurity-osint-report [5] Maltego Technologies: Maltego Handbook for Cyber Threat Intelligence. Technical Documentation (2024). https://www.maltego.com/blog/maltego-handbook-for-cyber-threat-intelligence [6] NATO CCDCOE: Insider Threat Detection Study. Cooperative Cyber Defence Centre of Excellence (2018). https://ccdcoe.org/library/publications/insider-threat-study [7] CERT: Common Sense Guide to Mitigating Insider Threats, 7th edn. SEI, Carnegie Mellon University (2024). https://www.sei.cmu.edu/publications/insider-threat-guide [8] CISA: Insider Threat Mitigation Guide. Cybersecurity and Infrastructure Security Agency (2023). https://www.cisa.gov/topics/physical-security/insider-threat-mitigation [9] Villarreal-Vasquez, R., et al.: LSTM-based anomaly detection for hunting insider threats. In: Proc. IEEE CNS, pp. 1–9 (2023). https://doi.org/10.1109/CNS56825.2023.10237521 [10] Xiao, L., et al.: Robust anomaly-based insider threat detection using graph neural networks. IEEE TDSC 20(4), 3456–3470 (2023). https://doi.org/10.1109/TDSC.2023.3245678