{"id":"https://openalex.org/W3165582618","doi":"https://doi.org/10.1007/978-3-030-78120-0_24","title":"Anomaly Detection for Insider Threats: An Objective Comparison of Machine Learning Models and Ensembles","display_name":"Anomaly Detection for Insider Threats: An Objective Comparison of Machine Learning Models and Ensembles","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3165582618","doi":"https://doi.org/10.1007/978-3-030-78120-0_24","mag":"3165582618"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-030-78120-0_24","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-030-78120-0_24","pdf_url":null,"source":{"id":"https://openalex.org/S4210185096","display_name":"IFIP advances in information and communication technology","issn_l":"1868-422X","issn":["1868-422X","1868-4238"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP Advances in Information and Communication Technology","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://inria.hal.science/hal-03746050","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073173743","display_name":"Filip Wieslaw Bartoszewski","orcid":null},"institutions":[{"id":"https://openalex.org/I32062511","display_name":"Heriot-Watt University","ror":"https://ror.org/04mghma93","country_code":"GB","type":"education","lineage":["https://openalex.org/I32062511"]},{"id":"https://openalex.org/I4210085930","display_name":"Heriot-Watt University Malaysia","ror":"https://ror.org/0059w0420","country_code":"MY","type":"education","lineage":["https://openalex.org/I4210085930"]}],"countries":["GB","MY"],"is_corresponding":false,"raw_author_name":"Filip Wieslaw Bartoszewski","raw_affiliation_strings":["MACS Department, Heriot-Watt University, Edinburgh, Scotland","HWU - Heriot-Watt University [Edinburgh] (Edinburgh, Scotland, UK EH14 4AS - United Kingdom)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MACS Department, Heriot-Watt University, Edinburgh, Scotland","institution_ids":["https://openalex.org/I4210085930"]},{"raw_affiliation_string":"HWU - Heriot-Watt University [Edinburgh] (Edinburgh, Scotland, UK EH14 4AS - United Kingdom)","institution_ids":["https://openalex.org/I32062511"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037048837","display_name":"Mike Just","orcid":"https://orcid.org/0000-0002-9669-5067"},"institutions":[{"id":"https://openalex.org/I32062511","display_name":"Heriot-Watt University","ror":"https://ror.org/04mghma93","country_code":"GB","type":"education","lineage":["https://openalex.org/I32062511"]},{"id":"https://openalex.org/I4210085930","display_name":"Heriot-Watt University Malaysia","ror":"https://ror.org/0059w0420","country_code":"MY","type":"education","lineage":["https://openalex.org/I4210085930"]}],"countries":["GB","MY"],"is_corresponding":false,"raw_author_name":"Mike Just","raw_affiliation_strings":["MACS Department, Heriot-Watt University, Edinburgh, Scotland","HWU - Heriot-Watt University [Edinburgh] (Edinburgh, Scotland, UK EH14 4AS - United Kingdom)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MACS Department, Heriot-Watt University, Edinburgh, Scotland","institution_ids":["https://openalex.org/I4210085930"]},{"raw_affiliation_string":"HWU - Heriot-Watt University [Edinburgh] (Edinburgh, Scotland, UK EH14 4AS - United Kingdom)","institution_ids":["https://openalex.org/I32062511"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049325379","display_name":"Michael A. Lones","orcid":"https://orcid.org/0000-0002-2745-9896"},"institutions":[{"id":"https://openalex.org/I32062511","display_name":"Heriot-Watt University","ror":"https://ror.org/04mghma93","country_code":"GB","type":"education","lineage":["https://openalex.org/I32062511"]},{"id":"https://openalex.org/I4210085930","display_name":"Heriot-Watt University Malaysia","ror":"https://ror.org/0059w0420","country_code":"MY","type":"education","lineage":["https://openalex.org/I4210085930"]}],"countries":["GB","MY"],"is_corresponding":false,"raw_author_name":"Michael A. Lones","raw_affiliation_strings":["MACS Department, Heriot-Watt University, Edinburgh, Scotland","HWU - Heriot-Watt University [Edinburgh] (Edinburgh, Scotland, UK EH14 4AS - United Kingdom)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MACS Department, Heriot-Watt University, Edinburgh, Scotland","institution_ids":["https://openalex.org/I4210085930"]},{"raw_affiliation_string":"HWU - Heriot-Watt University [Edinburgh] (Edinburgh, Scotland, UK EH14 4AS - United Kingdom)","institution_ids":["https://openalex.org/I32062511"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043750892","display_name":"Oleksii Mandrychenko","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Oleksii Mandrychenko","raw_affiliation_strings":["Fortinet UK Ltd., Edinburgh, Scotland","Fortinet UK Limited (40 Torphichen St, Edinburgh EH3 8JB, Royaume-Uni - United Kingdom)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fortinet UK Ltd., Edinburgh, Scotland","institution_ids":[]},{"raw_affiliation_string":"Fortinet UK Limited (40 Torphichen St, Edinburgh EH3 8JB, Royaume-Uni - United Kingdom)","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"367","last_page":"381"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.833086371421814},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7633325457572937},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6754780411720276},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6677031517028809},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6613370180130005},{"id":"https://openalex.org/keywords/hyperparameter","display_name":"Hyperparameter","score":0.621658205986023},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.546626091003418},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.5316506028175354},{"id":"https://openalex.org/keywords/voting","display_name":"Voting","score":0.49837470054626465},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.4575745761394501},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.44082656502723694},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.43110138177871704},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37691447138786316},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08980819582939148}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.833086371421814},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7633325457572937},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6754780411720276},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6677031517028809},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6613370180130005},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.621658205986023},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.546626091003418},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.5316506028175354},{"id":"https://openalex.org/C520049643","wikidata":"https://www.wikidata.org/wiki/Q189760","display_name":"Voting","level":3,"score":0.49837470054626465},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.4575745761394501},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.44082656502723694},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.43110138177871704},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37691447138786316},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08980819582939148},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C548081761","wikidata":"https://www.wikidata.org/wiki/Q180388","display_name":"Waste management","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/978-3-030-78120-0_24","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-030-78120-0_24","pdf_url":null,"source":{"id":"https://openalex.org/S4210185096","display_name":"IFIP advances in information and communication technology","issn_l":"1868-422X","issn":["1868-422X","1868-4238"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP Advances in Information and Communication Technology","raw_type":"book-chapter"},{"id":"pmh:oai:HAL:hal-03746050v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-03746050","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.367-381, ⟨10.1007/978-3-030-78120-0_24⟩","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-03746050v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-03746050","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.367-381, ⟨10.1007/978-3-030-78120-0_24⟩","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.699999988079071,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W1458873377","https://openalex.org/W1646742026","https://openalex.org/W1991210879","https://openalex.org/W1998711561","https://openalex.org/W2244501064","https://openalex.org/W2255638286","https://openalex.org/W2515550864","https://openalex.org/W2538737552","https://openalex.org/W2761599262","https://openalex.org/W2787099510","https://openalex.org/W2788077648","https://openalex.org/W2806042222","https://openalex.org/W2808709910","https://openalex.org/W2887799638","https://openalex.org/W2896308136","https://openalex.org/W2925359595","https://openalex.org/W2976051608","https://openalex.org/W2984000590","https://openalex.org/W3014071235","https://openalex.org/W4255640686"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}