{"id":"https://openalex.org/W4387735664","doi":"https://doi.org/10.1080/08874417.2023.2267510","title":"Deep Temporal Graph Infomax for Imbalanced Insider Threat Detection","display_name":"Deep Temporal Graph Infomax for Imbalanced Insider Threat Detection","publication_year":2023,"publication_date":"2023-10-18","ids":{"openalex":"https://openalex.org/W4387735664","doi":"https://doi.org/10.1080/08874417.2023.2267510"},"language":"en","primary_location":{"id":"doi:10.1080/08874417.2023.2267510","is_oa":false,"landing_page_url":"https://doi.org/10.1080/08874417.2023.2267510","pdf_url":null,"source":{"id":"https://openalex.org/S83133229","display_name":"Journal of Computer Information Systems","issn_l":"0887-4417","issn":["0887-4417","2380-2057"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024596435","display_name":"Peng Gao","orcid":"https://orcid.org/0000-0001-6331-9383"},"institutions":[{"id":"https://openalex.org/I4210118629","display_name":"NARI Group (China)","ror":"https://ror.org/02egn3136","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210118629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Gao","raw_affiliation_strings":["NARI Group Corporation/State Grid Electric Power Research Institute, Nanjing, China","Nanjing NARI Information & Communication Technology co. ltd, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"NARI Group Corporation/State Grid Electric Power Research Institute, Nanjing, China","institution_ids":["https://openalex.org/I4210118629"]},{"raw_affiliation_string":"Nanjing NARI Information & Communication Technology co. ltd, Nanjing, China","institution_ids":["https://openalex.org/I4210118629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100392967","display_name":"Haotian Zhang","orcid":"https://orcid.org/0000-0003-0478-3869"},"institutions":[{"id":"https://openalex.org/I4210118629","display_name":"NARI Group (China)","ror":"https://ror.org/02egn3136","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210118629"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Haotian Zhang","raw_affiliation_strings":["NARI Group Corporation/State Grid Electric Power Research Institute, Nanjing, China","Nanjing NARI Information & Communication Technology co. ltd, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"NARI Group Corporation/State Grid Electric Power Research Institute, Nanjing, China","institution_ids":["https://openalex.org/I4210118629"]},{"raw_affiliation_string":"Nanjing NARI Information & Communication Technology co. ltd, Nanjing, China","institution_ids":["https://openalex.org/I4210118629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100432573","display_name":"Ming Wang","orcid":"https://orcid.org/0000-0002-6641-3700"},"institutions":[{"id":"https://openalex.org/I17442442","display_name":"State Grid Corporation of China (China)","ror":"https://ror.org/05twwhs70","country_code":"CN","type":"company","lineage":["https://openalex.org/I17442442"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ming Wang","raw_affiliation_strings":["State Grid Corporation of China, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Grid Corporation of China, Beijing, China","institution_ids":["https://openalex.org/I17442442"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058880963","display_name":"Weiyong Yang","orcid":"https://orcid.org/0000-0001-8430-9168"},"institutions":[{"id":"https://openalex.org/I4210118629","display_name":"NARI Group (China)","ror":"https://ror.org/02egn3136","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210118629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiyong Yang","raw_affiliation_strings":["NARI Group Corporation/State Grid Electric Power Research Institute, Nanjing, China","Nanjing NARI Information & Communication Technology co. ltd, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"NARI Group Corporation/State Grid Electric Power Research Institute, Nanjing, China","institution_ids":["https://openalex.org/I4210118629"]},{"raw_affiliation_string":"Nanjing NARI Information & Communication Technology co. ltd, Nanjing, China","institution_ids":["https://openalex.org/I4210118629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088437372","display_name":"Xinshen Wei","orcid":null},"institutions":[{"id":"https://openalex.org/I4210118629","display_name":"NARI Group (China)","ror":"https://ror.org/02egn3136","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210118629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinshen Wei","raw_affiliation_strings":["NARI Group Corporation/State Grid Electric Power Research Institute, Nanjing, China","Nanjing NARI Information & Communication Technology co. ltd, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"NARI Group Corporation/State Grid Electric Power Research Institute, Nanjing, China","institution_ids":["https://openalex.org/I4210118629"]},{"raw_affiliation_string":"Nanjing NARI Information & Communication Technology co. ltd, Nanjing, China","institution_ids":["https://openalex.org/I4210118629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100303380","display_name":"Zhuo Lv","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhuo Lv","raw_affiliation_strings":["State Grid Henan Electric Power Research Institute, Zhengzhou, China"],"affiliations":[{"raw_affiliation_string":"State Grid Henan Electric Power Research Institute, Zhengzhou, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062574065","display_name":"Zengzhou Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I4210118629","display_name":"NARI Group (China)","ror":"https://ror.org/02egn3136","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210118629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zengzhou Ma","raw_affiliation_strings":["NARI Group Corporation/State Grid Electric Power Research Institute, Nanjing, China","Nanjing NARI Information & Communication Technology co. ltd, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"NARI Group Corporation/State Grid Electric Power Research Institute, Nanjing, China","institution_ids":["https://openalex.org/I4210118629"]},{"raw_affiliation_string":"Nanjing NARI Information & Communication Technology co. ltd, Nanjing, China","institution_ids":["https://openalex.org/I4210118629"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5100392967"],"corresponding_institution_ids":["https://openalex.org/I4210118629"],"apc_list":null,"apc_paid":null,"fwci":3.2104,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.92509485,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"65","issue":"1","first_page":"108","last_page":"118"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/infomax","display_name":"Infomax","score":0.8414772748947144},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7915480136871338},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6030198931694031},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5652471780776978},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.5615748167037964},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5447789430618286},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.538101315498352},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4990668296813965},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.4558377265930176},{"id":"https://openalex.org/keywords/power-graph-analysis","display_name":"Power graph analysis","score":0.4261452853679657},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.3410347104072571},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.17135757207870483}],"concepts":[{"id":"https://openalex.org/C153402090","wikidata":"https://www.wikidata.org/wiki/Q6030480","display_name":"Infomax","level":4,"score":0.8414772748947144},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7915480136871338},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6030198931694031},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5652471780776978},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.5615748167037964},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5447789430618286},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.538101315498352},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4990668296813965},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4558377265930176},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.4261452853679657},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.3410347104072571},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.17135757207870483},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C120317606","wikidata":"https://www.wikidata.org/wiki/Q17105967","display_name":"Blind signal separation","level":3,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.0},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1080/08874417.2023.2267510","is_oa":false,"landing_page_url":"https://doi.org/10.1080/08874417.2023.2267510","pdf_url":null,"source":{"id":"https://openalex.org/S83133229","display_name":"Journal of Computer Information Systems","issn_l":"0887-4417","issn":["0887-4417","2380-2057"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Information Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6399999856948853,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G7148010412","display_name":null,"funder_award_id":"No.5108-202224046A-1-1-ZN","funder_id":"https://openalex.org/F4320335967","funder_display_name":"Science and Technology Project of State Grid"}],"funders":[{"id":"https://openalex.org/F4320335967","display_name":"Science and Technology Project of State Grid","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W2284900416","https://openalex.org/W2538737552","https://openalex.org/W2766503369","https://openalex.org/W2783037699","https://openalex.org/W2785446263","https://openalex.org/W2800788706","https://openalex.org/W2891432086","https://openalex.org/W2914874661","https://openalex.org/W2917361696","https://openalex.org/W2964110616","https://openalex.org/W2965857891","https://openalex.org/W2982853004","https://openalex.org/W2986944522","https://openalex.org/W3011040471","https://openalex.org/W3018495625","https://openalex.org/W3021740526","https://openalex.org/W3037378637","https://openalex.org/W3086452730","https://openalex.org/W3095602948","https://openalex.org/W3095746859","https://openalex.org/W3106059286","https://openalex.org/W3177472101","https://openalex.org/W3199583892","https://openalex.org/W3204162860","https://openalex.org/W3207580017","https://openalex.org/W4205653115","https://openalex.org/W4213069590","https://openalex.org/W4226385284","https://openalex.org/W4242715379","https://openalex.org/W4283157082","https://openalex.org/W4287730659","https://openalex.org/W4292876772","https://openalex.org/W4310050354","https://openalex.org/W4315629715","https://openalex.org/W4317569503","https://openalex.org/W4320151928","https://openalex.org/W4321993631","https://openalex.org/W6755573351","https://openalex.org/W6784694379"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":{"ABSTRACTInsider":[0],"threats":[1,62],"pose":[2],"a":[3,56,80],"significant":[4],"concern":[5],"for":[6,16,59],"critical":[7],"information":[8],"infrastructures.":[9],"Graph":[10],"neural":[11,134],"networks":[12],"are":[13,42],"widely":[14],"used":[15],"detection":[17,128],"due":[18],"to":[19,22,94],"their":[20],"ability":[21],"model":[23],"complex":[24],"relationships":[25],"among":[26],"network":[27,78],"entities.":[28],"However,":[29],"deep":[30,51],"learning":[31,35,137],"algorithms":[32],"struggle":[33],"with":[34,66],"from":[36],"business":[37],"system":[38],"data":[39],"as":[40],"anomalies":[41],"extremely":[43],"rare.":[44],"To":[45],"tackle":[46],"this":[47],"challenge,":[48],"we":[49],"propose":[50],"temporal":[52],"graph":[53,77],"infomax":[54],"(DTGI),":[55],"new":[57],"method":[58],"detecting":[60],"insider":[61],"in":[63,125],"real-world":[64],"scenarios":[65],"highly":[67],"imbalanced":[68],"data.":[69],"DTGI":[70,121],"utilizes":[71],"an":[72],"extended":[73],"continuous-time":[74],"dynamic":[75],"heterogeneous":[76],"and":[79,98,158],"behavior":[81,91],"context":[82,92],"constraint":[83],"anomaly":[84],"sample":[85],"generator.":[86],"This":[87],"generator":[88],"incorporates":[89],"attack":[90,96],"constraints":[93],"augment":[95],"samples":[97],"enhance":[99],"the":[100,103,110,147,154],"performance":[101],"of":[102,114,127,142],"supervised":[104],"model.":[105],"Extensive":[106],"experiments":[107],"conducted":[108],"on":[109],"CERT":[111],"dataset,":[112],"consisting":[113],"over":[115],"one":[116],"million":[117],"records,":[118],"demonstrate":[119],"that":[120],"surpasses":[122],"state-of-the-art":[123],"methods":[124],"terms":[126],"performance.KEYWORDS:":[129],"Insider":[130],"threatanomaly":[131],"detectiondynamic":[132],"graphgraph":[133],"networkgraph":[135],"contrastive":[136],"Disclosure":[138],"statementNo":[139],"potential":[140],"conflict":[141],"interest":[143],"was":[144],"reported":[145],"by":[146,153],"author(s).Additional":[148],"informationFundingThis":[149],"work":[150],"is":[151],"supported":[152],"State":[155],"Grid":[156],"Science":[157],"Technology":[159],"Project":[160],"[Project":[161],"No.5108-202224046A-1-1-ZN].":[162]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":3}],"updated_date":"2026-02-25T23:00:34.991745","created_date":"2025-10-10T00:00:00"}