{"id":"https://openalex.org/W1504455947","doi":null,"title":"Insider abuse comprehension through capability acquisition graphs","display_name":"Insider abuse comprehension through capability acquisition graphs","publication_year":2008,"publication_date":"2008-09-26","ids":{"openalex":"https://openalex.org/W1504455947","mag":"1504455947"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.140.9586","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.140.9586","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cse.buffalo.edu/~hungngo/papers/fusion2008.pdf","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073439530","display_name":"S. Mathew","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"S. Mathew","raw_affiliation_strings":["Department of Computer Science & Engineering, State University of New York at Buffalo, Buffalo, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science & Engineering, State University of New York at Buffalo, Buffalo, NY","institution_ids":["https://openalex.org/I63190737"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031947971","display_name":"Shambhu Upadhyaya","orcid":"https://orcid.org/0000-0002-0596-1703","observed_orcids":["https://orcid.org/0000-0002-0596-1703"]},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shambhu Upadhyaya","raw_affiliation_strings":["Department of Computer Science & Engineering, State University of New York at Buffalo, Buffalo, NY"],"raw_orcid":"https://orcid.org/0000-0002-0596-1703","affiliations":[{"raw_affiliation_string":"Department of Computer Science & Engineering, State University of New York at Buffalo, Buffalo, NY","institution_ids":["https://openalex.org/I63190737"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041525219","display_name":"Duc Tan Ha","orcid":"https://orcid.org/0000-0001-5083-938X","observed_orcids":["https://orcid.org/0000-0001-5083-938X"]},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Duc T. Ha","raw_affiliation_strings":["Department of Computer Science & Engineering, State University of New York at Buffalo, Buffalo, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science & Engineering, State University of New York at Buffalo, Buffalo, NY","institution_ids":["https://openalex.org/I63190737"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062573204","display_name":"Hung Q. Ngo","orcid":"https://orcid.org/0000-0001-8246-8392","observed_orcids":["https://orcid.org/0000-0001-8246-8392","https://orcid.org/0000-0002-3498-4744"]},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hung Q. Ngo","raw_affiliation_strings":["Department of Computer Science & Engineering, State University of New York at Buffalo, Buffalo, NY"],"raw_orcid":"https://orcid.org/0000-0001-8246-8392","affiliations":[{"raw_affiliation_string":"Department of Computer Science & Engineering, State University of New York at Buffalo, Buffalo, NY","institution_ids":["https://openalex.org/I63190737"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I63190737"],"apc_list":null,"apc_paid":null,"fwci":1.5453,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.86363315,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":87,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7964000105857849,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7964000105857849,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.11789999902248383,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.0478999987244606,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threats","display_name":"insider threats","score":0.9089999794960022},{"id":"https://openalex.org/keywords/insider-attack-detection","display_name":"insider attack detection","score":0.6499999761581421},{"id":"https://openalex.org/keywords/situational-awareness","display_name":"situational awareness","score":0.8859999775886536},{"id":"https://openalex.org/keywords/information-security","display_name":"information security","score":0.5080000162124634},{"id":"https://openalex.org/keywords/corporate-networks","display_name":"corporate networks","score":0.4880000054836273}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7376242876052856},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6961166858673096},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6808966398239136},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.6668460369110107},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6247586607933044},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5702347755432129},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5121498107910156},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4642188549041748},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4493730664253235},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.41576752066612244},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.140.9586","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.140.9586","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cse.buffalo.edu/~hungngo/papers/fusion2008.pdf","raw_type":"text"},{"id":"mag:1504455947","doi":null,"is_oa":false,"landing_page_url":"http://www.cse.buffalo.edu/~hungngo/papers/fusion2008.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Information Fusion","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W133500409","https://openalex.org/W240281376","https://openalex.org/W1487346596","https://openalex.org/W1545244165","https://openalex.org/W1586753295","https://openalex.org/W1928518511","https://openalex.org/W2024586985","https://openalex.org/W2027842665","https://openalex.org/W2121805588","https://openalex.org/W2156392926","https://openalex.org/W2157554212","https://openalex.org/W2157701875","https://openalex.org/W2161754059","https://openalex.org/W2612613894","https://openalex.org/W3143127511"],"related_works":["https://openalex.org/W1545244165","https://openalex.org/W1859925930","https://openalex.org/W2580290980","https://openalex.org/W2901023881","https://openalex.org/W4401212647","https://openalex.org/W4319079761","https://openalex.org/W4315630026","https://openalex.org/W2092284459","https://openalex.org/W2056812798","https://openalex.org/W2131998781"],"abstract_inverted_index":{"Abstract":[0],"\u2014":[1],"Insider":[2],"attacks":[3],"constitute":[4],"one":[5],"of":[6,58,103],"the":[7,19,104,149],"most":[8],"potent,":[9],"yet":[10],"difficult":[11],"to":[12,15,37,53,87,111,126,134],"detect":[13,38,93],"threats":[14,60],"information":[16,113,145],"security":[17],"in":[18,55,61],"cyberdomain.":[20],"Malicious":[21],"actions":[22,72],"perpetrated":[23],"by":[24,73,142],"privileged":[25],"insiders":[26],"usually":[27],"circumvent":[28],"intrusion":[29],"detection":[30],"systems":[31],"(IDS)":[32],"and":[33,39,51,92],"other":[34],"mechanisms":[35],"designed":[36],"prevent":[40],"unauthorized":[41],"activity.":[42],"In":[43],"this":[44],"paper,":[45],"we":[46],"present":[47],"an":[48,144],"architectural":[49],"framework":[50],"technique":[52],"aid":[54],"situation":[56],"awareness":[57],"insider":[59],"a":[62,68,78,82],"networked":[63],"computing":[64],"environment":[65],"such":[66],"as":[67],"corporate":[69],"network.":[70],"Individual":[71],"users":[74,107],"are":[75,131],"analyzed":[76,133],"using":[77],"theoretical":[79],"model":[80],"called":[81,122],"Capability":[83],"Acquisition":[84],"Graph":[85],"(CAG)":[86],"evaluate":[88],"their":[89,116],"cumulative":[90],"effect":[91],"possible":[94,136],"violations.":[95],"Our":[96],"approach":[97],"is":[98,124,140],"based":[99],"on":[100],"periodic":[101],"evaluation":[102],"privileges":[105],"that":[106],"accumulate":[108],"with":[109],"respect":[110],"critical":[112],"assets":[114],"during":[115],"work-flow.":[117],"A":[118],"static":[119],"analysis":[120],"tool":[121],"ICMAP":[123],"used":[125],"periodically":[127],"construct":[128],"CAGs":[129],"which":[130],"then":[132],"uncover":[135],"attacks.":[137],"The":[138],"process":[139,146],"demonstrated":[141],"considering":[143],"cycle":[147],"from":[148],"real-world.":[150]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":2},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":1},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":1}],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2016-06-24T00:00:00"}