{"id":"https://openalex.org/W4393946410","doi":"https://doi.org/10.1007/s12243-024-01023-7","title":"E-Watcher: insider threat monitoring and detection for enhanced security","display_name":"E-Watcher: insider threat monitoring and detection for enhanced security","publication_year":2024,"publication_date":"2024-04-04","ids":{"openalex":"https://openalex.org/W4393946410","doi":"https://doi.org/10.1007/s12243-024-01023-7"},"language":"en","primary_location":{"id":"doi:10.1007/s12243-024-01023-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s12243-024-01023-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s12243-024-01023-7.pdf","source":{"id":"https://openalex.org/S164884734","display_name":"Annals of Telecommunications","issn_l":"0003-4347","issn":["0003-4347","1958-9395"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annals of Telecommunications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s12243-024-01023-7.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101905967","display_name":"Zhiyuan Wei","orcid":"https://orcid.org/0009-0007-1479-6408"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhiyuan Wei","raw_affiliation_strings":["Rocky Mountain Robotech, Broomfield, CO, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rocky Mountain Robotech, Broomfield, CO, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008763262","display_name":"Usman Rauf","orcid":"https://orcid.org/0000-0003-3667-4974"},"institutions":[{"id":"https://openalex.org/I125924841","display_name":"Mercy University","ror":"https://ror.org/02s99ck98","country_code":"US","type":"education","lineage":["https://openalex.org/I125924841"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Usman Rauf","raw_affiliation_strings":["Department of Mathematics & Computer Science, Mercy University, Dobbs Ferry, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics & Computer Science, Mercy University, Dobbs Ferry, NY, USA","institution_ids":["https://openalex.org/I125924841"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018845377","display_name":"Fadi Mohsen","orcid":"https://orcid.org/0000-0003-3876-5781"},"institutions":[{"id":"https://openalex.org/I169381384","display_name":"University of Groningen","ror":"https://ror.org/012p63287","country_code":"NL","type":"education","lineage":["https://openalex.org/I169381384"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Fadi Mohsen","raw_affiliation_strings":["Bernoulli Institute for Mathematics, Computer Science & Artificial Intelligence, University of Groningen, Groningen, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bernoulli Institute for Mathematics, Computer Science & Artificial Intelligence, University of Groningen, Groningen, Netherlands","institution_ids":["https://openalex.org/I169381384"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5008763262"],"corresponding_institution_ids":["https://openalex.org/I125924841"],"apc_list":null,"apc_paid":null,"fwci":3.3905,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.92977629,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"79","issue":"11-12","first_page":"819","last_page":"831"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.7118629813194275},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6328985691070557},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.5769935846328735},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.40378057956695557},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3966815173625946},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3920426666736603},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.17680853605270386},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.058365076780319214}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.7118629813194275},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6328985691070557},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.5769935846328735},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.40378057956695557},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3966815173625946},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3920426666736603},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.17680853605270386},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.058365076780319214}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s12243-024-01023-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s12243-024-01023-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s12243-024-01023-7.pdf","source":{"id":"https://openalex.org/S164884734","display_name":"Annals of Telecommunications","issn_l":"0003-4347","issn":["0003-4347","1958-9395"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annals of Telecommunications","raw_type":"journal-article"},{"id":"pmh:oai:pure.rug.nl:publications/38c29195-87d0-4458-a039-9f6f91d64ec8","is_oa":true,"landing_page_url":"https://research.rug.nl/en/publications/38c29195-87d0-4458-a039-9f6f91d64ec8","pdf_url":"https://research.rug.nl/files/1188576864/s12243-024-01023-7.pdf","source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Wei, Z, Rauf, U & Mohsen, F 2024, 'E-Watcher : insider threat monitoring and detection for enhanced security', Annales des Telecommunications/Annals of Telecommunications, vol. 79, pp. 819-831. https://doi.org/10.1007/s12243-024-01023-7","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:pure.rug.nl:openaire/38c29195-87d0-4458-a039-9f6f91d64ec8","is_oa":true,"landing_page_url":"https://hdl.handle.net/11370/38c29195-87d0-4458-a039-9f6f91d64ec8","pdf_url":null,"source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Wei, Z, Rauf, U & Mohsen, F 2024, 'E-Watcher : insider threat monitoring and detection for enhanced security', Annales des Telecommunications/Annals of Telecommunications, vol. 79, pp. 819-831. https://doi.org/10.1007/s12243-024-01023-7","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s12243-024-01023-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s12243-024-01023-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s12243-024-01023-7.pdf","source":{"id":"https://openalex.org/S164884734","display_name":"Annals of Telecommunications","issn_l":"0003-4347","issn":["0003-4347","1958-9395"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annals of Telecommunications","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4393946410.pdf"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W1796110375","https://openalex.org/W1991210879","https://openalex.org/W2013946142","https://openalex.org/W2808709910","https://openalex.org/W2892659003","https://openalex.org/W2963808612","https://openalex.org/W2974856932","https://openalex.org/W2976051608","https://openalex.org/W2985983260","https://openalex.org/W2997655715","https://openalex.org/W3004207920","https://openalex.org/W3014071235","https://openalex.org/W3043530913","https://openalex.org/W3044818515","https://openalex.org/W3044936352","https://openalex.org/W3049376871","https://openalex.org/W3109130759","https://openalex.org/W3124852128","https://openalex.org/W3130498974","https://openalex.org/W3135028703","https://openalex.org/W3197481002","https://openalex.org/W3197991612","https://openalex.org/W3202156390","https://openalex.org/W4212960548","https://openalex.org/W4254182148","https://openalex.org/W4367856745","https://openalex.org/W4389543397","https://openalex.org/W6959882703"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":{"Abstract":[0],"Insider":[1],"threats":[2,25],"refer":[3],"to":[4,45,71,114,137],"harmful":[5],"actions":[6],"carried":[7],"out":[8],"by":[9,96],"authorized":[10],"users":[11],"within":[12],"an":[13,157],"organization,":[14],"posing":[15],"the":[16,28,43,76,121,141,166,171],"most":[17,169],"damaging":[18],"risks.":[19],"The":[20],"increasing":[21],"number":[22],"of":[23,30,55,75,100,105,117,123,159,168,170],"these":[24],"has":[26],"revealed":[27],"inadequacy":[29],"traditional":[31],"methods":[32,60,139],"for":[33],"detecting":[34,162],"and":[35,134,145,181],"mitigating":[36],"insider":[37,86,163],"threats.":[38],"These":[39],"existing":[40,138,172],"approaches":[41],"lack":[42,61],"ability":[44],"analyze":[46],"activity-related":[47],"information":[48],"in":[49,52,63,161,188],"detail,":[50],"resulting":[51],"delayed":[53],"detection":[54,88],"malicious":[56],"intent.":[57],"Additionally,":[58,174],"current":[59],"advancements":[62],"addressing":[64],"noisy":[65],"datasets":[66],"or":[67,73],"unknown":[68],"scenarios,":[69],"leading":[70],"under-fitting":[72],"over-fitting":[74],"models.":[77,118],"To":[78],"address":[79,115],"these,":[80],"our":[81,124,153,175],"paper":[82],"presents":[83],"a":[84,98,127],"hybrid":[85],"threat":[87,129],"framework.":[89],"We":[90,119],"not":[91],"only":[92],"enhance":[93],"prediction":[94],"accuracy":[95,158],"incorporating":[97],"layer":[99],"statistical":[101],"criteria":[102],"on":[103,140],"top":[104],"machine":[106],"learning-based":[107],"classification":[108],"but":[109],"also":[110],"present":[111],"optimal":[112],"parameters":[113],"over/under-fitting":[116],"evaluate":[120],"performance":[122,167],"framework":[125,155,176],"using":[126],"real-life":[128,189],"test":[130],"dataset":[131,143],"(CERT":[132],"r4.2)":[133],"compare":[135],"it":[136],"same":[142],"(Glasser":[144],"Lindauer":[146],"2013).":[147],"Our":[148],"initial":[149],"evaluation":[150],"demonstrates":[151],"that":[152,185],"proposed":[154],"achieves":[156],"98.48%":[160],"threats,":[164],"surpassing":[165],"methods.":[173],"effectively":[177],"handles":[178],"potential":[179],"bias":[180],"data":[182],"imbalance":[183],"issues":[184],"can":[186],"arise":[187],"scenarios.":[190]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":3}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}