{"id":"https://openalex.org/W2938414802","doi":"https://doi.org/10.1109/access.2019.2906503","title":"Density-Based Outlier Detection for Safeguarding Electronic Patient Record Systems","display_name":"Density-Based Outlier Detection for Safeguarding Electronic Patient Record Systems","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2938414802","doi":"https://doi.org/10.1109/access.2019.2906503","mag":"2938414802"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2906503","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2906503","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08672058.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08672058.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033432185","display_name":"Aaron Boddy","orcid":"https://orcid.org/0000-0002-3436-3817"},"institutions":[{"id":"https://openalex.org/I63098007","display_name":"Liverpool John Moores University","ror":"https://ror.org/04zfme737","country_code":"GB","type":"education","lineage":["https://openalex.org/I63098007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Aaron J. Boddy","raw_affiliation_strings":["Faculty of Engineering and Technology, Liverpool John Moores University, Liverpool, U.K"],"raw_orcid":"https://orcid.org/0000-0002-3436-3817","affiliations":[{"raw_affiliation_string":"Faculty of Engineering and Technology, Liverpool John Moores University, Liverpool, U.K","institution_ids":["https://openalex.org/I63098007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013177439","display_name":"William Hurst","orcid":"https://orcid.org/0000-0001-8287-0330"},"institutions":[{"id":"https://openalex.org/I63098007","display_name":"Liverpool John Moores University","ror":"https://ror.org/04zfme737","country_code":"GB","type":"education","lineage":["https://openalex.org/I63098007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"William Hurst","raw_affiliation_strings":["Faculty of Engineering and Technology, Liverpool John Moores University, Liverpool, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Engineering and Technology, Liverpool John Moores University, Liverpool, U.K","institution_ids":["https://openalex.org/I63098007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061834959","display_name":"Michael Mackay","orcid":"https://orcid.org/0000-0001-9013-7884"},"institutions":[{"id":"https://openalex.org/I63098007","display_name":"Liverpool John Moores University","ror":"https://ror.org/04zfme737","country_code":"GB","type":"education","lineage":["https://openalex.org/I63098007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Michael Mackay","raw_affiliation_strings":["Faculty of Engineering and Technology, Liverpool John Moores University, Liverpool, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Engineering and Technology, Liverpool John Moores University, Liverpool, U.K","institution_ids":["https://openalex.org/I63098007"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003225736","display_name":"Abdennour El Rhalibi","orcid":null},"institutions":[{"id":"https://openalex.org/I63098007","display_name":"Liverpool John Moores University","ror":"https://ror.org/04zfme737","country_code":"GB","type":"education","lineage":["https://openalex.org/I63098007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Abdennour el Rhalibi","raw_affiliation_strings":["Faculty of Engineering and Technology, Liverpool John Moores University, Liverpool, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Engineering and Technology, Liverpool John Moores University, Liverpool, U.K","institution_ids":["https://openalex.org/I63098007"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I63098007"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":4.5985,"has_fulltext":true,"cited_by_count":37,"citation_normalized_percentile":{"value":0.95176612,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"7","issue":null,"first_page":"40285","last_page":"40294"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6296167373657227},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.615799069404602},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.608017086982727},{"id":"https://openalex.org/keywords/data-breach","display_name":"Data breach","score":0.5931525230407715},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5829828977584839},{"id":"https://openalex.org/keywords/safeguarding","display_name":"Safeguarding","score":0.5781865119934082},{"id":"https://openalex.org/keywords/audit-trail","display_name":"Audit trail","score":0.499845027923584},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.49657636880874634},{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.49130240082740784},{"id":"https://openalex.org/keywords/data-access","display_name":"Data access","score":0.4527289867401123},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3652762174606323},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3514130115509033},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.19984832406044006},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.19924822449684143},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.18074294924736023},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.10322120785713196}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6296167373657227},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.615799069404602},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.608017086982727},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.5931525230407715},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5829828977584839},{"id":"https://openalex.org/C2776743756","wikidata":"https://www.wikidata.org/wiki/Q5097921","display_name":"Safeguarding","level":2,"score":0.5781865119934082},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.499845027923584},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.49657636880874634},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.49130240082740784},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.4527289867401123},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3652762174606323},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3514130115509033},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.19984832406044006},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.19924822449684143},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.18074294924736023},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.10322120785713196},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.0},{"id":"https://openalex.org/C159110408","wikidata":"https://www.wikidata.org/wiki/Q121176","display_name":"Nursing","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/access.2019.2906503","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2906503","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08672058.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:researchonline.ljmu.ac.uk:10389","is_oa":true,"landing_page_url":null,"pdf_url":"https://researchonline.ljmu.ac.uk/id/eprint/10389/1/08672058.pdf","source":{"id":"https://openalex.org/S4306401246","display_name":"Liverpool John Moores University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I63098007","host_organization_name":"Liverpool John Moores University","host_organization_lineage":["https://openalex.org/I63098007"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"},{"id":"pmh:oai:doaj.org/article:c7db3fbc7c174785b9d96526595ecfdf","is_oa":true,"landing_page_url":"https://doaj.org/article/c7db3fbc7c174785b9d96526595ecfdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 40285-40294 (2019)","raw_type":"article"},{"id":"pmh:wur:oai:library.wur.nl:wurpubs/573406","is_oa":false,"landing_page_url":"https://research.wur.nl/en/publications/density-based-outlier-detection-for-safeguarding-electronic-patie","pdf_url":null,"source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, 7, 40285 - 40294","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2906503","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2906503","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08672058.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6200000047683716,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2938414802.pdf","grobid_xml":"https://content.openalex.org/works/W2938414802.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W1728842521","https://openalex.org/W1811741202","https://openalex.org/W1899230695","https://openalex.org/W1977311695","https://openalex.org/W1998933811","https://openalex.org/W2028695285","https://openalex.org/W2033309596","https://openalex.org/W2102039730","https://openalex.org/W2111040543","https://openalex.org/W2111131733","https://openalex.org/W2144182447","https://openalex.org/W2144517168","https://openalex.org/W2154765153","https://openalex.org/W2161336914","https://openalex.org/W2466206609","https://openalex.org/W2599180620","https://openalex.org/W2781128994","https://openalex.org/W2790849663","https://openalex.org/W2792581847","https://openalex.org/W2795060486","https://openalex.org/W2804864889","https://openalex.org/W4292811746","https://openalex.org/W6639792745","https://openalex.org/W6719918161","https://openalex.org/W6749302402","https://openalex.org/W6749918566","https://openalex.org/W6751769625"],"related_works":["https://openalex.org/W4387497383","https://openalex.org/W3183948672","https://openalex.org/W3173606202","https://openalex.org/W3110381201","https://openalex.org/W2948807893","https://openalex.org/W2935909890","https://openalex.org/W2778153218","https://openalex.org/W2758277628","https://openalex.org/W1531601525","https://openalex.org/W2374550342"],"abstract_inverted_index":{"This":[0,42,192,255],"paper":[1,58,193],"concerns":[2],"the":[3,21,61,99,212,259,262,276],"detection":[4,203],"of":[5,52,56,63,74,103,146,214,251,258,265,270,275],"abnormal":[6],"data":[7,40,46,82,125,132,149,220],"usage":[8],"and":[9,96,106,134,227,234,273],"unauthorized":[10],"access":[11,78],"in":[12,20,69,130,218,230,247,279],"large-scale":[13],"critical":[14],"networks,":[15],"specifically":[16],"healthcare":[17,81,121,178,215],"infrastructures.":[18,122,216],"Hospitals":[19,91],"U.K.":[22],"are":[23,108,221],"now":[24],"connecting":[25],"their":[26],"traditionally":[27],"isolated":[28],"equipment":[29],"on":[30,60,138,261],"a":[31,49,131,167,195,199,280],"large":[32],"scale":[33],"to":[34,37,48,79,84,110,114,165,172,182,209,211,223,232,242],"Internet-enabled":[35],"networks":[36],"enable":[38],"remote":[39],"access.":[41],"step-change":[43],"makes":[44],"sensitive":[45],"accessible":[47],"broader":[50],"spectrum":[51],"users.":[53],"The":[54,205,238],"focus":[55],"this":[57,80,124],"is":[59,116,126,207,240],"safeguarding":[62],"electronic":[64],"patient":[65,94,266],"record":[66,267],"(EPR)":[67],"systems":[68],"particular.":[70],"With":[71],"over":[72],"83%":[73],"hospitals":[75],"adopting":[76],"EPRs,":[77],"needs":[83,181],"be":[85,173,183],"proactively":[86,184],"monitored":[87,185],"for":[88,186],"malicious":[89],"activity.":[90,191],"must":[92],"maintain":[93],"trust":[95],"ensure":[97],"that":[98,197],"information":[100],"security":[101],"principles":[102],"integrity,":[104],"availability,":[105],"confidentiality":[107],"applied":[109],"EPR":[111,115,219],"data.":[112],"Access":[113],"often":[117],"heavily":[118],"audited":[119],"within":[120,177],"However,":[123],"regularly":[127],"left":[128],"untouched":[129],"silo":[133],"only":[135],"ever":[136],"accessed":[137],"an":[139,248],"ad":[140],"hoc":[141],"basis.":[142],"Without":[143],"proactive":[144],"monitoring":[145],"audit":[147,253],"records,":[148],"breaches":[150],"may":[151],"go":[152],"undetected.":[153],"In":[154],"addition,":[155],"external":[156],"threats,":[157],"such":[158],"as":[159],"phishing":[160],"or":[161,189],"social":[162],"engineering":[163],"techniques":[164],"acquire":[166],"clinician's":[168],"logon":[169],"credentials,":[170],"need":[171],"identified.":[174],"Data":[175],"behavior":[176,226],"infrastructures,":[179],"therefore,":[180],"malicious,":[187],"erratic,":[188],"unusual":[190],"presents":[194],"system":[196,206,239],"employs":[198],"density-based":[200],"local":[201],"outlier":[202],"model.":[204],"intended":[208],"add":[210],"defense-in-depth":[213],"Patterns":[217],"extracted":[222],"profile":[224],"user":[225],"device":[228],"interactions":[229],"order":[231],"detect":[233,243],"visualize":[235],"anomalous":[236,245],"activities.":[237],"able":[241],"144":[244],"behaviors":[246],"unlabeled":[249],"dataset":[250],"1,007,727":[252],"logs.":[254],"includes":[256],"0.66%":[257],"users":[260],"system,":[263],"0.17%":[264],"accesses,":[268,272],"0.74%":[269],"routine":[271],"0.53%":[274],"devices":[277],"used":[278],"specialist":[281],"Liverpool":[282],"(U.K.)":[283],"hospital.":[284]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":11},{"year":2019,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}