{"id":"https://openalex.org/W4406349318","doi":"https://doi.org/10.1016/j.hcc.2024.100283","title":"An insider threat detection method based on improved Test-Time Training model","display_name":"An insider threat detection method based on improved Test-Time Training model","publication_year":2025,"publication_date":"2025-01-14","ids":{"openalex":"https://openalex.org/W4406349318","doi":"https://doi.org/10.1016/j.hcc.2024.100283"},"language":"en","primary_location":{"id":"doi:10.1016/j.hcc.2024.100283","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.hcc.2024.100283","pdf_url":null,"source":{"id":"https://openalex.org/S4210186527","display_name":"High-Confidence Computing","issn_l":"2667-2952","issn":["2667-2952"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"High-Confidence Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1016/j.hcc.2024.100283","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084780155","display_name":"Xiaoling Tao","orcid":"https://orcid.org/0000-0002-6573-2291"},"institutions":[{"id":"https://openalex.org/I5343935","display_name":"Guilin University of Electronic Technology","ror":"https://ror.org/05arjae42","country_code":"CN","type":"education","lineage":["https://openalex.org/I5343935"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xiaoling Tao","raw_affiliation_strings":["School of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin 541004, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin 541004, China","institution_ids":["https://openalex.org/I5343935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101896256","display_name":"Jianxiang Liu","orcid":"https://orcid.org/0000-0002-4379-3288"},"institutions":[{"id":"https://openalex.org/I5343935","display_name":"Guilin University of Electronic Technology","ror":"https://ror.org/05arjae42","country_code":"CN","type":"education","lineage":["https://openalex.org/I5343935"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianxiang Liu","raw_affiliation_strings":["School of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin 541004, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin 541004, China","institution_ids":["https://openalex.org/I5343935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103174505","display_name":"Yuelin Yu","orcid":"https://orcid.org/0009-0002-7188-7094"},"institutions":[{"id":"https://openalex.org/I5343935","display_name":"Guilin University of Electronic Technology","ror":"https://ror.org/05arjae42","country_code":"CN","type":"education","lineage":["https://openalex.org/I5343935"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuelin Yu","raw_affiliation_strings":["School of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin 541004, China"],"raw_orcid":"https://orcid.org/0009-0002-7188-7094","affiliations":[{"raw_affiliation_string":"School of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin 541004, China","institution_ids":["https://openalex.org/I5343935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101543319","display_name":"Haijing Zhang","orcid":"https://orcid.org/0000-0003-2177-6062"},"institutions":[{"id":"https://openalex.org/I181565077","display_name":"Georgia State University","ror":"https://ror.org/03qt6ba18","country_code":"US","type":"education","lineage":["https://openalex.org/I181565077"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haijing Zhang","raw_affiliation_strings":["Department of Computer Science, Georgia State University, Atlanta 30302, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Georgia State University, Atlanta 30302, USA","institution_ids":["https://openalex.org/I181565077"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101859490","display_name":"Ying Huang","orcid":"https://orcid.org/0000-0003-2127-5751"},"institutions":[{"id":"https://openalex.org/I5343935","display_name":"Guilin University of Electronic Technology","ror":"https://ror.org/05arjae42","country_code":"CN","type":"education","lineage":["https://openalex.org/I5343935"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ying Huang","raw_affiliation_strings":["School of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin 541004, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin 541004, China","institution_ids":["https://openalex.org/I5343935"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5084780155"],"corresponding_institution_ids":["https://openalex.org/I5343935"],"apc_list":{"value":1500,"currency":"USD","value_usd":1500},"apc_paid":{"value":1500,"currency":"USD","value_usd":1500},"fwci":7.2339,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.97607209,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"5","issue":"1","first_page":"100283","last_page":"100283"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12597","display_name":"Fire Detection and Safety Systems","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12597","display_name":"Fire Detection and Safety Systems","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.986299991607666,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6434625387191772},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.632744550704956},{"id":"https://openalex.org/keywords/test","display_name":"Test (biology)","score":0.6252607107162476},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5742520689964294},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.5097202658653259},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.35592442750930786},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.32211437821388245},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.10363048315048218},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.06433576345443726}],"concepts":[{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6434625387191772},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.632744550704956},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.6252607107162476},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5742520689964294},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.5097202658653259},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35592442750930786},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32211437821388245},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.10363048315048218},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.06433576345443726},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C153294291","wikidata":"https://www.wikidata.org/wiki/Q25261","display_name":"Meteorology","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1016/j.hcc.2024.100283","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.hcc.2024.100283","pdf_url":null,"source":{"id":"https://openalex.org/S4210186527","display_name":"High-Confidence Computing","issn_l":"2667-2952","issn":["2667-2952"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"High-Confidence Computing","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:b98cc632466f4c80bb03d2950cbebef9","is_oa":true,"landing_page_url":"https://doaj.org/article/b98cc632466f4c80bb03d2950cbebef9","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"High-Confidence Computing, Vol 5, Iss 1, Pp 100283- (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1016/j.hcc.2024.100283","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.hcc.2024.100283","pdf_url":null,"source":{"id":"https://openalex.org/S4210186527","display_name":"High-Confidence Computing","issn_l":"2667-2952","issn":["2667-2952"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"High-Confidence Computing","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Climate action","id":"https://metadata.un.org/sdg/13","score":0.4399999976158142}],"awards":[{"id":"https://openalex.org/G5061013912","display_name":null,"funder_award_id":"62472118","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2194775991","https://openalex.org/W2397065307","https://openalex.org/W2803592732","https://openalex.org/W2909135150","https://openalex.org/W2910314742","https://openalex.org/W3000429356","https://openalex.org/W3034552520","https://openalex.org/W3124014468","https://openalex.org/W3128317221","https://openalex.org/W3153493802","https://openalex.org/W3161590955","https://openalex.org/W3198075970","https://openalex.org/W3200821063","https://openalex.org/W3202733154","https://openalex.org/W4233361561","https://openalex.org/W4250791217","https://openalex.org/W4302180033","https://openalex.org/W4323262326","https://openalex.org/W4387609283","https://openalex.org/W4388640067","https://openalex.org/W4400435102","https://openalex.org/W6648165549","https://openalex.org/W6712631520","https://openalex.org/W6728825950","https://openalex.org/W6753237822","https://openalex.org/W6759108953","https://openalex.org/W6766014833","https://openalex.org/W6787091289","https://openalex.org/W6790215113","https://openalex.org/W6796782937","https://openalex.org/W6800724668","https://openalex.org/W6804880667"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2792608345","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W4387194049","https://openalex.org/W2018332730"],"abstract_inverted_index":{"As":[0],"network":[1],"and":[2,25,39,55,65,81,117,200],"information":[3],"systems":[4],"become":[5],"widely":[6],"adopted":[7],"across":[8],"industries,":[9],"cybersecurity":[10],"concerns":[11],"have":[12],"grown":[13],"more":[14,177],"prominent.":[15],"Among":[16],"these":[17,47,96],"concerns,":[18],"insider":[19,69,114,181],"threats":[20,28,48],"are":[21,88],"considered":[22],"particularly":[23],"covert":[24,66],"destructive.":[26],"Insider":[27,192],"refer":[29],"to":[30,36,41,52,76,135,157],"malicious":[31],"insiders":[32],"exploiting":[33],"privileged":[34],"access":[35],"networks,":[37],"systems,":[38],"data":[40],"intentionally":[42],"compromise":[43],"organizational":[44],"security.":[45],"Detecting":[46],"is":[49,130,133,155,174],"challenging":[50],"due":[51],"the":[53,63,101,107,111,124,128,150,189,209,212],"complexity":[54],"variability":[56],"of":[57,68,113,180,198,203,211],"user":[58],"behavior":[59],"data,":[60,86],"combined":[61],"with":[62],"subtle":[64],"nature":[67],"actions.":[70],"Traditional":[71],"detection":[72,120,179],"methods":[73],"often":[74],"fail":[75],"capture":[77],"both":[78],"long-term":[79,137],"dependencies":[80,138],"short-term":[82],"fluctuations":[83],"in":[84,110,139,167],"time-series":[85,168],"which":[87],"crucial":[89],"for":[90,106,176],"identifying":[91],"anomalous":[92],"behaviors.":[93],"To":[94],"address":[95],"issues,":[97],"this":[98],"paper":[99],"introduces":[100],"Test-Time":[102],"Training":[103],"(TTT)":[104],"model":[105],"first":[108],"time":[109],"field":[112],"threat":[115],"detection,":[116],"proposes":[118],"a":[119,171],"method":[121],"based":[122],"on":[123],"TTT-ECA-ResNet":[125],"model.":[126],"First,":[127],"dataset":[129],"preprocessed.":[131],"TTT":[132],"applied":[134],"extract":[136,158],"features,":[140],"effectively":[141],"capturing":[142,162],"dynamic":[143],"sequence":[144],"changes.":[145],"The":[146,183,205],"Residual":[147],"Network,":[148],"incorporating":[149],"Efficient":[151],"Channel":[152],"Attention":[153],"mechanism,":[154],"used":[156],"local":[159],"feature":[160],"patterns,":[161],"relationships":[163],"between":[164],"different":[165],"positions":[166],"data.":[169],"Finally,":[170],"Linear":[172],"layer":[173],"employed":[175],"precise":[178],"threats.":[182],"proposed":[184,213],"approaches":[185],"were":[186],"evaluated":[187],"using":[188],"CMU":[190],"CERT":[191],"Threat":[193],"Dataset,":[194],"achieving":[195],"an":[196,201],"AUC":[197],"98.75%":[199],"F1-score":[202],"96.81%.":[204],"experimental":[206],"results":[207],"demonstrate":[208],"effectiveness":[210],"methods,":[214],"outperforming":[215],"other":[216],"state-of-the-art":[217],"approaches.":[218]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}