{"id":"https://openalex.org/W4404606174","doi":"https://doi.org/10.1007/s41019-024-00260-z","title":"Optimising Insider Threat Prediction: Exploring BiLSTM Networks and Sequential Features","display_name":"Optimising Insider Threat Prediction: Exploring BiLSTM Networks and Sequential Features","publication_year":2024,"publication_date":"2024-11-21","ids":{"openalex":"https://openalex.org/W4404606174","doi":"https://doi.org/10.1007/s41019-024-00260-z"},"language":"en","primary_location":{"id":"doi:10.1007/s41019-024-00260-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s41019-024-00260-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s41019-024-00260-z.pdf","source":{"id":"https://openalex.org/S2486411021","display_name":"Data Science and Engineering","issn_l":"2364-1185","issn":["2364-1185","2364-1541"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Data Science and Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://link.springer.com/content/pdf/10.1007/s41019-024-00260-z.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104221232","display_name":"Phavithra Manoharan","orcid":null},"institutions":[{"id":"https://openalex.org/I71270174","display_name":"Victoria University","ror":"https://ror.org/04j757h98","country_code":"AU","type":"education","lineage":["https://openalex.org/I71270174"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Phavithra Manoharan","raw_affiliation_strings":["Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia"],"affiliations":[{"raw_affiliation_string":"Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia","institution_ids":["https://openalex.org/I71270174"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030581166","display_name":"Wei Hong","orcid":"https://orcid.org/0000-0003-2833-9228"},"institutions":[{"id":"https://openalex.org/I71270174","display_name":"Victoria University","ror":"https://ror.org/04j757h98","country_code":"AU","type":"education","lineage":["https://openalex.org/I71270174"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wei Hong","raw_affiliation_strings":["Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia"],"affiliations":[{"raw_affiliation_string":"Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia","institution_ids":["https://openalex.org/I71270174"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080300563","display_name":"Jiao Yin","orcid":"https://orcid.org/0000-0002-0269-2624"},"institutions":[{"id":"https://openalex.org/I196829312","display_name":"La Trobe University","ror":"https://ror.org/01rxfrp27","country_code":"AU","type":"education","lineage":["https://openalex.org/I196829312"]},{"id":"https://openalex.org/I71270174","display_name":"Victoria University","ror":"https://ror.org/04j757h98","country_code":"AU","type":"education","lineage":["https://openalex.org/I71270174"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jiao Yin","raw_affiliation_strings":["Department of Computer Science and Information Technology, La Trobe University, Melbourne, VIC, 3086, Australia","Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Technology, La Trobe University, Melbourne, VIC, 3086, Australia","institution_ids":["https://openalex.org/I196829312"]},{"raw_affiliation_string":"Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia","institution_ids":["https://openalex.org/I71270174"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100403969","display_name":"Hua Wang","orcid":"https://orcid.org/0000-0002-8465-0996"},"institutions":[{"id":"https://openalex.org/I71270174","display_name":"Victoria University","ror":"https://ror.org/04j757h98","country_code":"AU","type":"education","lineage":["https://openalex.org/I71270174"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hua Wang","raw_affiliation_strings":["Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia"],"affiliations":[{"raw_affiliation_string":"Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia","institution_ids":["https://openalex.org/I71270174"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049750015","display_name":"Yanchun Zhang","orcid":"https://orcid.org/0000-0002-5094-5980"},"institutions":[{"id":"https://openalex.org/I135237710","display_name":"Zhejiang Normal University","ror":"https://ror.org/01vevwk45","country_code":"CN","type":"education","lineage":["https://openalex.org/I135237710"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I71270174","display_name":"Victoria University","ror":"https://ror.org/04j757h98","country_code":"AU","type":"education","lineage":["https://openalex.org/I71270174"]}],"countries":["AU","CN"],"is_corresponding":false,"raw_author_name":"Yanchun Zhang","raw_affiliation_strings":["Department of New Networks, Peng Cheng Laboratory, Shenzhen, 518055, China","Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia","School of Computer Science and Technology, Zhejiang Normal University, Jinhua, 321004, Zhejiang, China"],"affiliations":[{"raw_affiliation_string":"Department of New Networks, Peng Cheng Laboratory, Shenzhen, 518055, China","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia","institution_ids":["https://openalex.org/I71270174"]},{"raw_affiliation_string":"School of Computer Science and Technology, Zhejiang Normal University, Jinhua, 321004, Zhejiang, China","institution_ids":["https://openalex.org/I135237710"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024965526","display_name":"Wenjie Ye","orcid":"https://orcid.org/0000-0002-9676-1335"},"institutions":[{"id":"https://openalex.org/I71270174","display_name":"Victoria University","ror":"https://ror.org/04j757h98","country_code":"AU","type":"education","lineage":["https://openalex.org/I71270174"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wenjie Ye","raw_affiliation_strings":["Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia"],"affiliations":[{"raw_affiliation_string":"Institute for Sustainable Industries and Liveable Cities, Victoria University, Melbourne, VIC, 3011, Australia","institution_ids":["https://openalex.org/I71270174"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5104221232"],"corresponding_institution_ids":["https://openalex.org/I71270174"],"apc_list":null,"apc_paid":null,"fwci":2.1596,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.88803612,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"9","issue":"4","first_page":"393","last_page":"408"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.8996396064758301},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8541500568389893},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.7906272411346436},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6092700958251953},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5506630539894104},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4329800307750702},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35367387533187866},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3489653170108795}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.8996396064758301},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8541500568389893},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.7906272411346436},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6092700958251953},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5506630539894104},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4329800307750702},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35367387533187866},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3489653170108795},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s41019-024-00260-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s41019-024-00260-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s41019-024-00260-z.pdf","source":{"id":"https://openalex.org/S2486411021","display_name":"Data Science and Engineering","issn_l":"2364-1185","issn":["2364-1185","2364-1541"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Data Science and Engineering","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:aaa8b519e6654eaea2ee505dcad05017","is_oa":true,"landing_page_url":"https://doaj.org/article/aaa8b519e6654eaea2ee505dcad05017","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Data Science and Engineering, Vol 9, Iss 4, Pp 393-408 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1007/s41019-024-00260-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s41019-024-00260-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s41019-024-00260-z.pdf","source":{"id":"https://openalex.org/S2486411021","display_name":"Data Science and Engineering","issn_l":"2364-1185","issn":["2364-1185","2364-1541"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Data Science and Engineering","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5299999713897705,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4404606174.pdf","grobid_xml":"https://content.openalex.org/works/W4404606174.grobid-xml"},"referenced_works_count":57,"referenced_works":["https://openalex.org/W1723129825","https://openalex.org/W1968969471","https://openalex.org/W2004147962","https://openalex.org/W2079735306","https://openalex.org/W2088252378","https://openalex.org/W2131774270","https://openalex.org/W2136848157","https://openalex.org/W2137957971","https://openalex.org/W2141951313","https://openalex.org/W2160319865","https://openalex.org/W2160373678","https://openalex.org/W2301977247","https://openalex.org/W2512063315","https://openalex.org/W2538737552","https://openalex.org/W2580290980","https://openalex.org/W2618583153","https://openalex.org/W2750651073","https://openalex.org/W2754117742","https://openalex.org/W2783225074","https://openalex.org/W2790664081","https://openalex.org/W2798001063","https://openalex.org/W2808709910","https://openalex.org/W2888160480","https://openalex.org/W2905097561","https://openalex.org/W2950161378","https://openalex.org/W2964199361","https://openalex.org/W2966342255","https://openalex.org/W3033777149","https://openalex.org/W3048036752","https://openalex.org/W3128317221","https://openalex.org/W3130498974","https://openalex.org/W3134075430","https://openalex.org/W3184063548","https://openalex.org/W3195463078","https://openalex.org/W3200780444","https://openalex.org/W4206258573","https://openalex.org/W4220782488","https://openalex.org/W4226133142","https://openalex.org/W4244895750","https://openalex.org/W4283328089","https://openalex.org/W4285137529","https://openalex.org/W4285818247","https://openalex.org/W4288083473","https://openalex.org/W4294811443","https://openalex.org/W4312451223","https://openalex.org/W4313291217","https://openalex.org/W4315783782","https://openalex.org/W4319988528","https://openalex.org/W4328053447","https://openalex.org/W4385616961","https://openalex.org/W4385627526","https://openalex.org/W4387850563","https://openalex.org/W4387850712","https://openalex.org/W4389937376","https://openalex.org/W4390486486","https://openalex.org/W4391248689","https://openalex.org/W4395688937"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2792608345","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W4387194049","https://openalex.org/W2018332730"],"abstract_inverted_index":{"Abstract":[0],"Insider":[1],"threats":[2,36],"pose":[3],"a":[4,70,105,109],"critical":[5],"risk":[6],"to":[7,37],"organisations,":[8],"impacting":[9],"their":[10,92,114],"data,":[11],"processes,":[12],"resources,":[13],"and":[14,26,84,91,138,162,184],"overall":[15],"security.":[16],"Such":[17],"significant":[18],"risks":[19],"arise":[20],"from":[21],"individuals":[22],"with":[23,28,145],"authorised":[24],"access":[25],"familiarity":[27],"internal":[29],"systems,":[30],"emphasising":[31],"the":[32,39,47,86,119,125,128,139,143,152,171,178,182,189,193,198,208],"potential":[33],"for":[34,188],"insider":[35,107],"compromise":[38],"integrity":[40],"of":[41,88,127,142,154,173,181],"organisations.":[42],"Previous":[43],"research":[44],"has":[45,207],"addressed":[46],"challenge":[48],"by":[49],"pinpointing":[50],"malicious":[51,106],"actions":[52,90],"that":[53,81,205],"have":[54],"already":[55],"occurred":[56],"but":[57],"provided":[58],"limited":[59],"assistance":[60],"in":[61,108,164,211],"preventing":[62],"those":[63],"risks.":[64],"In":[65,148],"this":[66],"research,":[67],"we":[68,150,169],"introduce":[69],"novel":[71],"approach":[72],"based":[73,112],"on":[74,98,113,133,177,197],"bidirectional":[75],"long":[76],"short-term":[77],"memory":[78],"(BiLSTM)":[79],"networks":[80],"effectively":[82],"captures":[83],"analyses":[85],"patterns":[87],"individual":[89,102],"sequential":[93,136,190],"dependencies.":[94],"The":[95],"focus":[96],"is":[97],"predicting":[99],"whether":[100],"an":[101],"would":[103],"be":[104],"future":[110],"day":[111,144,183],"daily":[115],"behavioural":[116],"records":[117],"over":[118],"previous":[120],"several":[121],"days.":[122],"We":[123],"analyse":[124],"performance":[126,153,172,210],"four":[129],"supervised":[130],"learning":[131],"algorithms":[132],"manual":[134],"features,":[135,137],"ground":[140,179],"truth":[141,180],"different":[146,155,174,185],"combinations.":[147],"addition,":[149],"investigate":[151],"RNN":[156],"models,":[157],"such":[158],"as":[159],"RNN,":[160],"LSTM,":[161],"BiLSTM,":[163],"incorporating":[165],"these":[166,213],"features.":[167,191,214],"Moreover,":[168],"explore":[170],"predictive":[175],"lengths":[176,187],"embedded":[186],"All":[192],"experiments":[194],"are":[195],"conducted":[196],"CERT":[199],"r4.2":[200],"dataset.":[201],"Experiment":[202],"results":[203],"show":[204],"BiLSTM":[206],"highest":[209],"combining":[212]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5}],"updated_date":"2026-03-18T14:38:29.013473","created_date":"2025-10-10T00:00:00"}
