{"id":"https://openalex.org/W4416557438","doi":"https://doi.org/10.1007/978-3-032-20018-1_6","title":"Real-Time Insider Threat Hunting Based on\u00a0Dynamic Risk Indicators","display_name":"Real-Time Insider Threat Hunting Based on\u00a0Dynamic Risk Indicators","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W4416557438","doi":"https://doi.org/10.1007/978-3-032-20018-1_6"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-032-20018-1_6","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-032-20018-1_6","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115439411","display_name":"N\u2019Famoussa Kounon Nanamou","orcid":"https://orcid.org/0000-0002-3941-9920"},"institutions":[{"id":"https://openalex.org/I3018083178","display_name":"Institut de Recherche Technologique SystemX","ror":"https://ror.org/03crmsn52","country_code":"FR","type":"facility","lineage":["https://openalex.org/I3018083178"]},{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA","FR"],"is_corresponding":true,"raw_author_name":"N\u2019Famoussa Kounon Nanamou","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","Department of Cybersecurity and Networks, IRT SystemX, Palaiseau, France","EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)","IRT SystemX (Institut de recherche technologique SystemX - 8 Avenue de la Vauve, 91120 Palaiseau - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","institution_ids":["https://openalex.org/I45683168"]},{"raw_affiliation_string":"Department of Cybersecurity and Networks, IRT SystemX, Palaiseau, France","institution_ids":["https://openalex.org/I3018083178"]},{"raw_affiliation_string":"EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)","institution_ids":["https://openalex.org/I45683168"]},{"raw_affiliation_string":"IRT SystemX (Institut de recherche technologique SystemX - 8 Avenue de la Vauve, 91120 Palaiseau - France)","institution_ids":["https://openalex.org/I3018083178"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5116925572","display_name":"Neda Baghalizadeh-Moghadam","orcid":null},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Neda Baghalizadeh-Moghadam","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","institution_ids":["https://openalex.org/I45683168"]},{"raw_affiliation_string":"EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Thibault Leblanc","orcid":null},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Thibault Leblanc","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","institution_ids":["https://openalex.org/I45683168"]},{"raw_affiliation_string":"EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028214255","display_name":"K\u00e9ren Saint-Hilaire","orcid":"https://orcid.org/0009-0003-8139-3992"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"K\u00e9ren A. Saint-Hilaire","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","institution_ids":["https://openalex.org/I45683168"]},{"raw_affiliation_string":"EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110797100","display_name":"Nora Cuppens-Boulahia","orcid":null},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Nora Boulahia-Cuppens","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","institution_ids":["https://openalex.org/I45683168"]},{"raw_affiliation_string":"EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113930460","display_name":"Fr\u00e9d\u00e9ric Cuppens","orcid":null},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Fr\u00e9d\u00e9ric Cuppens","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","Polytechnique Montr\u00e9al, Montr\u00e9al, QC, Canada","EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, Canada","institution_ids":["https://openalex.org/I45683168"]},{"raw_affiliation_string":"Polytechnique Montr\u00e9al, Montr\u00e9al, QC, Canada","institution_ids":["https://openalex.org/I45683168"]},{"raw_affiliation_string":"EPM - \u00c9cole Polytechnique de Montr\u00e9al (Campus de l'Universit\u00e9 de Montr\u00e9al - 2500, chemin de Polytechnique - Montr\u00e9al (Qu\u00e9bec) H3T 1J4 - Canada)","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007284478","display_name":"Anis Bkakria","orcid":"https://orcid.org/0000-0002-9758-4617"},"institutions":[{"id":"https://openalex.org/I3018083178","display_name":"Institut de Recherche Technologique SystemX","ror":"https://ror.org/03crmsn52","country_code":"FR","type":"facility","lineage":["https://openalex.org/I3018083178"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Anis Bkakria","raw_affiliation_strings":["Department of Cybersecurity and Networks, IRT SystemX, Palaiseau, France","IRT SystemX (Institut de recherche technologique SystemX - 8 Avenue de la Vauve, 91120 Palaiseau - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Cybersecurity and Networks, IRT SystemX, Palaiseau, France","institution_ids":["https://openalex.org/I3018083178"]},{"raw_affiliation_string":"IRT SystemX (Institut de recherche technologique SystemX - 8 Avenue de la Vauve, 91120 Palaiseau - France)","institution_ids":["https://openalex.org/I3018083178"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5115439411"],"corresponding_institution_ids":["https://openalex.org/I3018083178","https://openalex.org/I45683168"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00841924,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"98","last_page":"115"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.15330000221729279,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.15330000221729279,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13371","display_name":"Military Defense Systems Analysis","score":0.06260000169277191,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11807","display_name":"Infrastructure Resilience and Vulnerability Analysis","score":0.05009999871253967,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.3077000081539154},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.2888000011444092},{"id":"https://openalex.org/keywords/government","display_name":"Government (linguistics)","score":0.28360000252723694},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.2784999907016754}],"concepts":[{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5033000111579895},{"id":"https://openalex.org/C162118730","wikidata":"https://www.wikidata.org/wiki/Q1128453","display_name":"Actuarial science","level":1,"score":0.4230000078678131},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3174999952316284},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.3149000108242035},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.3077000081539154},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.2888000011444092},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.28360000252723694},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.2784999907016754},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.27619999647140503},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.2694000005722046},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.26899999380111694},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.26019999384880066}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1007/978-3-032-20018-1_6","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-032-20018-1_6","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},{"id":"pmh:oai:publications.polymtl.ca:70299","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"PeerReviewed"},{"id":"pmh:oai:publications.polymtl.ca:76782","is_oa":false,"landing_page_url":"https://publications.polymtl.ca/76782/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"PeerReviewed"},{"id":"pmh:oai:HAL:hal-05378231v1","is_oa":false,"landing_page_url":"https://hal.science/hal-05378231","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"18th International Symposium on Foundations & Practice of Security (FPS), Nov 2025, Brest, France","raw_type":"Conference papers"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":null,"counts_by_year":[],"updated_date":"2026-05-23T08:51:43.019350","created_date":"2025-11-23T00:00:00"}