{"id":"https://openalex.org/W2993578250","doi":"https://doi.org/10.1109/access.2019.2957055","title":"Insider Threat Identification Using the Simultaneous Neural Learning of Multi-Source Logs","display_name":"Insider Threat Identification Using the Simultaneous Neural Learning of Multi-Source Logs","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2993578250","doi":"https://doi.org/10.1109/access.2019.2957055","mag":"2993578250"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2957055","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2957055","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08918248.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08918248.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010171381","display_name":"Liu Liu","orcid":"https://orcid.org/0000-0001-7959-6764"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Liu Liu","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7959-6764","affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114860210","display_name":"Chao Chen","orcid":"https://orcid.org/0000-0003-1355-3870"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chao Chen","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1355-3870","affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044019139","display_name":"Jun Zhang","orcid":"https://orcid.org/0000-0002-2189-7801"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jun Zhang","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, Australia"],"raw_orcid":"https://orcid.org/0000-0002-2189-7801","affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026180696","display_name":"Olivier De Vel","orcid":"https://orcid.org/0000-0001-5179-3707"},"institutions":[{"id":"https://openalex.org/I1303474014","display_name":"Defence Science and Technology Group","ror":"https://ror.org/05ddrvt52","country_code":"AU","type":"government","lineage":["https://openalex.org/I1303474014","https://openalex.org/I2801453606","https://openalex.org/I3139952251"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Olivier De Vel","raw_affiliation_strings":["Department of Defence, Defence Science and Technology Group, Edinburgh, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5179-3707","affiliations":[{"raw_affiliation_string":"Department of Defence, Defence Science and Technology Group, Edinburgh, Australia","institution_ids":["https://openalex.org/I1303474014"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100666554","display_name":"Yang Xiang","orcid":"https://orcid.org/0000-0001-5252-0831"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yang Xiang","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5252-0831","affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Hawthorn, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":3.17,"has_fulltext":true,"cited_by_count":32,"citation_normalized_percentile":{"value":0.93305681,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"7","issue":null,"first_page":"183162","last_page":"183176"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.7847515344619751},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7043301463127136},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.6630547642707825},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6087351441383362},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.41664019227027893},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4099096655845642},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.39687713980674744},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3294081687927246}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.7847515344619751},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7043301463127136},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6630547642707825},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6087351441383362},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.41664019227027893},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4099096655845642},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39687713980674744},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3294081687927246},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/access.2019.2957055","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2957055","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08918248.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:76a58b56355345fd8022c7f50cace951","is_oa":true,"landing_page_url":"https://doaj.org/article/76a58b56355345fd8022c7f50cace951","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 183162-183176 (2019)","raw_type":"article"},{"id":"pmh:oai:figshare.com:article/27561852","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Insider_Threat_Identification_Using_the_Simultaneous_Neural_Learning_of_Multi-Source_Logs/27561852","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},{"id":"pmh:oai:researchbank.swinburne.edu.au:ef09c6ce-f927-4128-ac57-4448661397a2/1","is_oa":false,"landing_page_url":"http://hdl.handle.net/1959.3/453787","pdf_url":null,"source":{"id":"https://openalex.org/S4306401157","display_name":"Swinburne Research Bank (Swinburne University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I57093077","host_organization_name":"Swinburne University of Technology","host_organization_lineage":["https://openalex.org/I57093077"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol. 7 (2019), pp. 183162-183176","raw_type":null},{"id":"pmh:oai:researchonline.jcu.edu.au:64433","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4377196350","display_name":"ResearchOnline - JCU (James Cook University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I86467917","host_organization_name":"James Cook University","host_organization_lineage":["https://openalex.org/I86467917"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2957055","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2957055","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08918248.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320719","display_name":"Department of Science and Technology, Ministry of Science and Technology, India","ror":"https://ror.org/0101xrq71"},{"id":"https://openalex.org/F4320335334","display_name":"Defence Science and Technology Group","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2993578250.pdf","grobid_xml":"https://content.openalex.org/works/W2993578250.grobid-xml"},"referenced_works_count":48,"referenced_works":["https://openalex.org/W36903255","https://openalex.org/W168564468","https://openalex.org/W1614298861","https://openalex.org/W1990089904","https://openalex.org/W1991210879","https://openalex.org/W1995919426","https://openalex.org/W1995976200","https://openalex.org/W2013946142","https://openalex.org/W2025519999","https://openalex.org/W2027380800","https://openalex.org/W2051000513","https://openalex.org/W2081547124","https://openalex.org/W2082384736","https://openalex.org/W2107373450","https://openalex.org/W2112965356","https://openalex.org/W2122646361","https://openalex.org/W2123941465","https://openalex.org/W2130071187","https://openalex.org/W2131744502","https://openalex.org/W2137052698","https://openalex.org/W2142960677","https://openalex.org/W2144584907","https://openalex.org/W2397065307","https://openalex.org/W2423693064","https://openalex.org/W2475438375","https://openalex.org/W2528339895","https://openalex.org/W2542582667","https://openalex.org/W2594475271","https://openalex.org/W2620229640","https://openalex.org/W2768745333","https://openalex.org/W2790664081","https://openalex.org/W2808709910","https://openalex.org/W2888160480","https://openalex.org/W2905097561","https://openalex.org/W2914623161","https://openalex.org/W2963673968","https://openalex.org/W2966342255","https://openalex.org/W4236135181","https://openalex.org/W4288083473","https://openalex.org/W4294170691","https://openalex.org/W6601546654","https://openalex.org/W6636510571","https://openalex.org/W6649564924","https://openalex.org/W6679775712","https://openalex.org/W6682691769","https://openalex.org/W6712631520","https://openalex.org/W6745040976","https://openalex.org/W6752999876"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":{"Insider":[0],"threat":[1,181],"detection":[2],"has":[3],"drawn":[4],"increasing":[5],"attention":[6],"in":[7,69,105,196],"recent":[8],"years.":[9],"In":[10,82],"order":[11],"to":[12,43,56,127],"capture":[13],"a":[14,23,31,40,58,70,87,93,113,150,154,202],"malicious":[15,159],"insider\u2019s":[16],"digital":[17],"footprints":[18],"that":[19,90,188],"occur":[20],"scatteredly":[21],"across":[22,61],"wide":[24],"range":[25],"of":[26,34,64,95],"audit":[27],"data":[28],"sources":[29],"over":[30],"long":[32],"period":[33],"time,":[35],"existing":[36],"approaches":[37,67],"often":[38],"leverage":[39],"scoring":[41],"mechanism":[42],"orchestrate":[44],"alerts":[45],"generated":[46],"from":[47],"multiple":[48,62,165],"sub-detectors,":[49],"or":[50],"require":[51],"domain":[52],"knowledge-based":[53],"feature":[54],"engineering":[55],"conduct":[57],"one-off":[59],"analysis":[60],"types":[63],"data.":[65],"These":[66],"result":[68],"high":[71],"deployment":[72],"complexity":[73],"and":[74,109,153,194,208],"incur":[75],"additional":[76],"costs":[77],"for":[78,132,204],"engaging":[79],"security":[80,96,99],"experts.":[81],"this":[83],"paper,":[84],"we":[85,124,136],"present":[86],"novel":[88],"approach":[89,191],"works":[91],"with":[92,121,164,172],"variety":[94],"logs.":[97],"The":[98,168],"logs":[100],"are":[101,125,147,170],"transformed":[102,139],"into":[103],"texts":[104],"the":[106,116,122,129,138,173,189,206],"same":[107],"format":[108],"then":[110],"arranged":[111],"as":[112,141,158],"corpus.":[114],"Using":[115],"model":[117],"trained":[118],"by":[119],"Word2vec":[120],"corpus,":[123],"enabled":[126],"approximate":[128],"posterior":[130],"probabilities":[131,146],"insider":[133,180],"behaviours.":[134],"Accordingly,":[135],"label":[137],"events":[140],"suspicious":[142,166],"if":[143,160],"their":[144],"behavioural":[145],"smaller":[148],"than":[149],"given":[151],"threshold,":[152],"user":[155],"is":[156,162,192],"labelled":[157],"he/she":[161],"associated":[163],"events.":[167],"experiments":[169],"undertaken":[171],"Carnegie":[174],"Mellon":[175],"University":[176],"(CMU)":[177],"CERT":[178],"Programs":[179],"database":[182],"v6.2,":[183],"which":[184],"not":[185],"only":[186],"demonstrate":[187],"proposed":[190],"effective":[193],"scalable":[195],"practical":[197],"applications":[198],"but":[199],"also":[200],"provide":[201],"guidance":[203],"tuning":[205],"parameters":[207],"thresholds.":[209]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":10},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":1}],"updated_date":"2026-08-02T14:50:37.381335","created_date":"2025-10-10T00:00:00"}