{"id":"https://openalex.org/W4387520474","doi":"https://doi.org/10.1007/s11071-023-08954-1","title":"User-level malicious behavior analysis model based on the NMF-GMM algorithm and ensemble strategy","display_name":"User-level malicious behavior analysis model based on the NMF-GMM algorithm and ensemble strategy","publication_year":2023,"publication_date":"2023-10-11","ids":{"openalex":"https://openalex.org/W4387520474","doi":"https://doi.org/10.1007/s11071-023-08954-1"},"language":"en","primary_location":{"id":"doi:10.1007/s11071-023-08954-1","doi":"https://doi.org/10.1007/s11071-023-08954-1","is_oa":false,"landing_page_url":"https://doi.org/10.1007/s11071-023-08954-1","pdf_url":null,"source":{"id":"https://openalex.org/S138681734","display_name":"Nonlinear Dynamics","issn_l":"0924-090X","issn":["0924-090X","1573-269X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","dongbi-b","jufo-2","norway-1","poland-140","russia-white-list-1"],"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Nonlinear Dynamics","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022337301","display_name":"Xiu Kan","orcid":"https://orcid.org/0000-0003-1586-8702","observed_orcids":["https://orcid.org/0000-0003-1586-8702"]},"institutions":[{"id":"https://openalex.org/I141962983","display_name":"Shanghai University of Engineering Science","ror":"https://ror.org/0557b9y08","country_code":"CN","type":"education","lineage":["https://openalex.org/I141962983"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xiu Kan","raw_affiliation_strings":["School of Electronic and Electrical Engineering, Shanghai University of Engineering Science, Shanghai, 201620, China"],"raw_orcid":"https://orcid.org/0000-0003-1586-8702","affiliations":[{"raw_affiliation_string":"School of Electronic and Electrical Engineering, Shanghai University of Engineering Science, Shanghai, 201620, China","institution_ids":["https://openalex.org/I141962983"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113616202","display_name":"Yixuan Fan","orcid":"https://orcid.org/0000-0002-9827-0177","observed_orcids":["https://orcid.org/0000-0002-9827-0177"]},"institutions":[{"id":"https://openalex.org/I141962983","display_name":"Shanghai University of Engineering Science","ror":"https://ror.org/0557b9y08","country_code":"CN","type":"education","lineage":["https://openalex.org/I141962983"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yixuan Fan","raw_affiliation_strings":["School of Electronic and Electrical Engineering, Shanghai University of Engineering Science, Shanghai, 201620, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electronic and Electrical Engineering, Shanghai University of Engineering Science, Shanghai, 201620, China","institution_ids":["https://openalex.org/I141962983"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102553046","display_name":"Jinjie Zheng","orcid":"https://orcid.org/0009-0001-2690-5129","observed_orcids":["https://orcid.org/0009-0001-2690-5129"]},"institutions":[{"id":"https://openalex.org/I141962983","display_name":"Shanghai University of Engineering Science","ror":"https://ror.org/0557b9y08","country_code":"CN","type":"education","lineage":["https://openalex.org/I141962983"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinjie Zheng","raw_affiliation_strings":["School of Electronic and Electrical Engineering, Shanghai University of Engineering Science, Shanghai, 201620, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electronic and Electrical Engineering, Shanghai University of Engineering Science, Shanghai, 201620, China","institution_ids":["https://openalex.org/I141962983"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045349556","display_name":"Aleksey Kudreyko","orcid":"https://orcid.org/0000-0001-7211-0741","observed_orcids":["https://orcid.org/0000-0001-7211-0741"]},"institutions":[{"id":"https://openalex.org/I4210120901","display_name":"Bashkir State Medical University","ror":"https://ror.org/02w1g0f30","country_code":"RU","type":"education","lineage":["https://openalex.org/I4210120901"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Aleksey Kudreyko","raw_affiliation_strings":["Department of Medical Physics and Informatics, Bashkir State Medical University, Lenina st. 3, Ufa, Russia, 450008"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Medical Physics and Informatics, Bashkir State Medical University, Lenina st. 3, Ufa, Russia, 450008","institution_ids":["https://openalex.org/I4210120901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058644115","display_name":"Chi\u2010Hung Chi","orcid":"https://orcid.org/0009-0004-4336-3407","observed_orcids":["https://orcid.org/0009-0004-4336-3407","https://orcid.org/0000-0001-7271-1926"]},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I4405277020","display_name":"Strategic Centre for Research in Privacy-Preserving Technologies & Systems","ror":"https://ror.org/015j4q458","country_code":"SG","type":"facility","lineage":["https://openalex.org/I4405277020"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Chi-hung Chi","raw_affiliation_strings":["Strategic Centre for Research in Privacy-Preserving Technologies and Systems, Nanyang Technological University, Level 4, BorderX Block, Research Techno Plaza, 50 Nanyang Drive, Singapore, 637553, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Strategic Centre for Research in Privacy-Preserving Technologies and Systems, Nanyang Technological University, Level 4, BorderX Block, Research Techno Plaza, 50 Nanyang Drive, Singapore, 637553, Singapore","institution_ids":["https://openalex.org/I172675005","https://openalex.org/I4405277020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048184635","display_name":"Wanqing Song","orcid":"https://orcid.org/0000-0002-0561-3258","observed_orcids":["https://orcid.org/0000-0002-0561-3258"]},"institutions":[{"id":"https://openalex.org/I141962983","display_name":"Shanghai University of Engineering Science","ror":"https://ror.org/0557b9y08","country_code":"CN","type":"education","lineage":["https://openalex.org/I141962983"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wanqing Song","raw_affiliation_strings":["School of Electronic and Electrical Engineering, Shanghai University of Engineering Science, Shanghai, 201620, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electronic and Electrical Engineering, Shanghai University of Engineering Science, Shanghai, 201620, China","institution_ids":["https://openalex.org/I141962983"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022502584","display_name":"Albina Tregubova","orcid":"https://orcid.org/0000-0003-4951-5876","observed_orcids":["https://orcid.org/0000-0003-4951-5876"]},"institutions":[{"id":"https://openalex.org/I4210120901","display_name":"Bashkir State Medical University","ror":"https://ror.org/02w1g0f30","country_code":"RU","type":"education","lineage":["https://openalex.org/I4210120901"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Albina Tregubova","raw_affiliation_strings":["Department of Medical Physics and Informatics, Bashkir State Medical University, Lenina st. 3, Ufa, Russia, 450008"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Medical Physics and Informatics, Bashkir State Medical University, Lenina st. 3, Ufa, Russia, 450008","institution_ids":["https://openalex.org/I4210120901"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5022337301"],"corresponding_institution_ids":["https://openalex.org/I141962983"],"apc_list":{"value":4390,"currency":"USD","value_usd":4390},"apc_paid":null,"fwci":0.9972,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.73744818,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"111","issue":"22","first_page":"21391","last_page":"21408"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6830999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6830999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.11969999969005585,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.03799999877810478,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat-detection","display_name":"insider threat detection","score":0.8650000095367432},{"id":"https://openalex.org/keywords/non-negative-matrix-factorization","display_name":"non-negative matrix factorization","score":0.953000009059906},{"id":"https://openalex.org/keywords/gaussian-mixture-model","display_name":"Gaussian mixture model","score":0.9990000128746033},{"id":"https://openalex.org/keywords/ensemble-methods","display_name":"ensemble methods","score":0.8090000152587891},{"id":"https://openalex.org/keywords/user-clustering","display_name":"user clustering","score":0.656000018119812},{"id":"https://openalex.org/keywords/pettitt-test","display_name":"Pettitt test","score":0.9380000233650208},{"id":"https://openalex.org/keywords/z-score-threshold","display_name":"z-score threshold","score":0.6230000257492065}],"concepts":[{"id":"https://openalex.org/C152671427","wikidata":"https://www.wikidata.org/wiki/Q10843505","display_name":"Non-negative matrix factorization","level":4,"score":0.8476288914680481},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.7749752998352051},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7317025065422058},{"id":"https://openalex.org/C61224824","wikidata":"https://www.wikidata.org/wiki/Q2260434","display_name":"Mixture model","level":2,"score":0.6798412203788757},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.611440896987915},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5173937082290649},{"id":"https://openalex.org/C83804111","wikidata":"https://www.wikidata.org/wiki/Q1063558","display_name":"Behavioral pattern","level":2,"score":0.5021600723266602},{"id":"https://openalex.org/C42355184","wikidata":"https://www.wikidata.org/wiki/Q1361088","display_name":"Matrix decomposition","level":3,"score":0.4679891765117645},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35273486375808716},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3465821444988251},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3448716998100281},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.33809036016464233},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.0},{"id":"https://openalex.org/C158693339","wikidata":"https://www.wikidata.org/wiki/Q190524","display_name":"Eigenvalues and eigenvectors","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s11071-023-08954-1","doi":"https://doi.org/10.1007/s11071-023-08954-1","is_oa":false,"landing_page_url":"https://doi.org/10.1007/s11071-023-08954-1","pdf_url":null,"source":{"id":"https://openalex.org/S138681734","display_name":"Nonlinear Dynamics","issn_l":"0924-090X","issn":["0924-090X","1573-269X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","dongbi-b","jufo-2","norway-1","poland-140","russia-white-list-1"],"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Nonlinear Dynamics","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/229148","doi":null,"is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/229148","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1902027874","https://openalex.org/W1991210879","https://openalex.org/W2085487226","https://openalex.org/W2538737552","https://openalex.org/W2754117742","https://openalex.org/W2754838232","https://openalex.org/W2787099510","https://openalex.org/W2790227466","https://openalex.org/W2796347652","https://openalex.org/W2970172234","https://openalex.org/W2974856932","https://openalex.org/W2976051608","https://openalex.org/W2985983260","https://openalex.org/W3005730493","https://openalex.org/W3008131571","https://openalex.org/W3014071235","https://openalex.org/W3014101291","https://openalex.org/W3040628207","https://openalex.org/W3045880080","https://openalex.org/W3130625521","https://openalex.org/W3152790299","https://openalex.org/W3155962425","https://openalex.org/W3157368849","https://openalex.org/W3159463990","https://openalex.org/W3162804962","https://openalex.org/W4200080077","https://openalex.org/W4322754167","https://openalex.org/W4323840567"],"related_works":["https://openalex.org/W2034200492","https://openalex.org/W2899903732","https://openalex.org/W2892659003","https://openalex.org/W2976051608","https://openalex.org/W2766544789","https://openalex.org/W2964493783","https://openalex.org/W2538737552","https://openalex.org/W4401906044","https://openalex.org/W2770865111","https://openalex.org/W4408358522"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":5}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2023-10-12T00:00:00"}